TAG
Deterministic 6-phase security audit CLI, MCP server, and VS Code extension (1:1:1 parity, *os.Root confinement, SARIF 2.1.0, GHSA advisories)