vp-q01-security

Security vulnerability identification applies context-aware severity adjustments based on bounded context, architecture layer, and hotspot status to prioritize findings. This approach ensures critical risks are addressed first by evaluating scanner results against the mental-model framework.

Security analysis supports Python, TypeScript/JavaScript, and Rust projects by applying language-appropriate scanners. It executes configured scanning workflows across multiple stacks to generate prioritized findings based on the mental-model constraints.

Vulnerability severity is adjusted by evaluating findings against layer architecture and interface surface dependencies. Contextual prioritization uses this mental-model framework to downgrade or escalate risks based on the specific bounded context and hotspot status.

Threat modeling and secure development integration is achieved by combining constraint retrieval, scanner execution, and finding enrichment. The guided workflow uses classification steps to enrich raw scanner data into actionable, prioritized security paths.

Dependency graph and layer architecture data are required dependencies to perform accurate risk assessment. They provide the structural context necessary to adjust vulnerability severity based on the application's actual architecture and interface exposure.