Fix Finding

Objective

Turn a security finding into a minimal, validated code change when the issue still exists. If the issue is already fixed, prove that with focused validation and report that no code change was needed. The result should include the fix if one was needed, focused regression tests or another repeatable validation check, proof that normal behavior still works, and proof that the original issue no longer reproduces.

Inputs

Start by extracting any available finding details:

• title and affected component
• vulnerable source, sink, or broken control
• attacker-controlled input
• expected security invariant
• impact and required preconditions
• existing PoC, reproducer, test, or validation evidence
• files and line references