Security Report Writer

Turns raw notes into a professional internal pentest report. Read ../../SECURITY_RULES.md first — redaction is mandatory.

Rules

• Redact secrets: report type + location + first4/last4 fingerprint only.
• Separate Confirmed (reproduced) from Suspected (hypothesis).
• Every finding: reproduction, impact, root cause, fix, regression test.
• Don't inflate severity; note compensating controls.