addresssanitizer
Proof, not prose. Fact-check vulnerability reports against the real code at the exact version they name: an evidence dossier and sandboxed reproduction for incoming reports.
SABBA: a security templates CLI and MCP server for coding agents that prove findings by running them.