Stop Trusting the Security Scorecard: Why AI Code Needs Teeth, Not Numbers
I merged a feature last month that Claude had written. It handled user authentication state. The code looked clean, followed patterns I recognized, passed all the tests. Three days later, a security consultant I'd hired for a compliance audit found a partial bypass in the session...