patch-verification

Bounded repository context and verified patches for Codex and Claude Code. Explicit edit grants, source fingerprints, isolated worktrees, acceptance checks, and reproducible paired benchmarks.

DeepSeek Harness plugin that validates and ranks 3/5 independent coding-agent patches before approval-gated apply.

Autonomous AI-powered 0-day vulnerability discovery, fuzzing, triage, and self-healing patch verification engine.

CVE-2026-2332 and 4 more 2026 Jetty CVEs: which does your Jetty (or Spring Boot) build hit, and does the fixed version Jetty names even exist on Maven Central? For 9.4/10/11 EOL lines the answer is 'see details for availability' = 404.

Evidence-first repository debugging: durable Python/LangGraph jobs, isolated Python/TypeScript tests, and React patch review. Validated M0; development in progress.

Read-only PHP2Shell patch auditing for Linux, Windows, and macOS, with local, SSH, and container inspection, vendor backport support, and explicit UNKNOWN results.

SAPI differential research on CVE-2026-109618/109619: FPM session-residue patch verification (29/29 vs 0/31), mod_php clean-room PoC, full A/B labs

Certifica que un parche resuelve un issue: transición RC != 0 → RC == 0 en sandbox efímero, sin mutar el examen.

Measures whether AI-generated security patches fix real CVEs without breaking tests, and gates merges on that evidence

CVE-2026-24880: does Apache's upgrade advice actually apply to your Tomcat? Detects the fix by class presence, not version comparison. Covers 7.0/8.0/8.5/9.0/10.0/10.1/11.0 lines.