Fable Heal

Automatically synthesize, apply, and verify security fixes for vulnerabilities detected by fable-redteam.

Purpose

Bridge the gap between active vulnerability discovery and verified code remediation. fable-heal translates offensive security findings (SQL injection, BOLA/IDOR, CORS misconfigurations, missing security headers, sensitive file leaks, SSRF, JWT signature bypass, and LLM prompt injections) into concrete, tested, verified code patches with zero regressions.

When to Use

• fable-redteam or security audits have identified vulnerabilities that need immediate code remediation.
• Automatically generating TDD regression test suites to ensure security flaws stay closed in CI.
• Applying surgical code patches in staging or local branches with atomic rollback protection.
• Verifying whether candidate security patches successfully eliminate attack vectors.

When NOT to Use

• Before vulnerabilities have been identified or reproduced (use fable-redteam or fable-security).
• For general non-security application refactoring (use fable-simplify).
• Direct production patching without human review or staging verification.