What "merge-ready" actually requires when an AI writes the security fix

Most code-scanning tools stop at "we found a vulnerability." That's the easy part. The hard part —...