Intelligence contextHuman-reviewed
Injection path in public API gateway
Risk summaryInternet-facing production path with known exploit context and a critical SLA window.
Priority contextExploitability, asset role, recurrence, and compliance impact explain why it ranks first.
Suggested fix pathParameterize the query and remove string-built SQL from the affected handler.
Validation commandRun source scan, integration test, and post-deployment confirmation.
Evidence requirementsAttach the pull request, passing rescan, deployment reference, and owner approval.
False-positive reviewSummarize supporting context for a reviewer without approving the decision.
AI clarifies the remediation record.Humans approve the decision.

