Static analysis

State the analysis lattice, transfer behavior, merge rule, scope, and soundness tradeoff before optimizing implementation details.

Topic routing

• Dataflow and pointers for control/data flow, LLVM analysis infrastructure, and points-to techniques.
• Taint and dependencies for source-sink models, interprocedural taint, dependency graphs, and slicing.
• Security tools and integration for vulnerability applications, existing frameworks, IDE/CI integration, and resources.

Use dynamic-instrumentation when runtime evidence is required. Make false-positive, false-negative, path-sensitivity, aliasing, and interprocedural limits explicit in the result.