Security Regression Detection

Verify that previously fixed vulnerabilities have not been reintroduced. Reads the fix history from .appsec/fixed-history.json, checks whether vulnerable patterns have returned or fixes have been removed, and reports any regressions. Designed to run as a gate check before merges or releases.

Supported Flags

Read ../../shared/schemas/flags.md for the full flag specification.