Deep Security Scan

If you know another deep scan is already running over the same scope, ask the user whether to continue or stop before doing substantive work.

Overview

Deep Security Scan is a higher-recall wrapper around the repository-wide and scoped-path exhaustive-scan machinery in references/repository-wide-scan.md. It preserves the ordinary security-scan phase model and final report shape, but repeats the most variance-sensitive phase, finding discovery, before centralized judgment.

The wrapper owns orchestration only:

1. resolve one repository-wide or scoped-path scan target using the exhaustive-scan semantics in references/repository-wide-scan.md
2. run repeated independent discovery workers, each of which generates its own target-specific threat model before following references/phase-finding-discovery.md
3. semantically merge discovery outputs into one canonical candidate inventory
4. synthesize one canonical validation threat model from the worker threat models after discovery reaches a terminal state
5. follow references/phase-validation.md, references/phase-attack-path-analysis.md, canonical JSON completion, and generated report finalization once

Do not replace the established scan rules with custom shortcuts.