Ten findings, ten answers — publishing the audit of our own black box
An external line-by-line audit of our flight recorder found 10 vulnerabilities. We published all ten with their file, line and severity — and answered every one in release 0.21.0, each fix carrying its own named test. 392 tests collected.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.