Tag
A post argues that coding agents often claim to fix security bugs while leaving the original PoC still exploitable, and proposes freezing the PoC, evidence, and missed check as fixtures for every rejected action so patches are verified against the trigger, not just the diff.