triage-verifier
Triage Verifier
Use this skill after finding-tracker shows a finding is confident and the
current research chain has reached a natural stopping point. Do not interrupt
active code review, reversing, debugging, fuzzing, or web testing that is still
producing new evidence. This skill is the final proof gate before a finding can
be marked proofed.
A finding is proofed only when it is reproduced, proven, or otherwise undeniable from a triager's perspective. The standard is not "the agent believes it"; the standard is "a skeptical security triager can follow the evidence and accept the issue, impact, and affected boundary."
Exploit-chain findings follow the same proof gate. Individual proofed component findings do not automatically proof the chain; the verifier must see that the combined path works or is otherwise undeniable.