Repository Security Audit

Route repository security work to the right audit mode, then load only the matching reference.

Load Order

1. Read PALADIN.md if present.
2. Choose exactly one mode:
   • Use repository audit mode for prioritized backlog creation, baseline checklist review, or management-ready audit items.
   • Use weekly security sweep mode for recently merged PRs, dependency changes, open findings, known-exploited vulnerabilities, recurring patterns, metrics, or weekly reporting.
3. Read the matching reference:
   • Repository audit: references/audit-mode.md
   • Weekly sweep: references/weekly-sweep-mode.md
4. Read the configured source list only when current advisory context matters. Use PALADIN.md paladin_source_list, or default to repo-root references/security-sources.md.

Shared Workflow

1. Inventory the repo quickly: