Verified Security Sweep

Repeatable security and correctness reviews of a codebase, with a record: pick a zone, delegate the reading, verify every finding on the cited lines, reproduce it with a failing test, keep a registry of what was reviewed and found. Finds and verifies; does not ship fixes.