top of page
B14
Action Bounding & Blast Radius
Agent-generated code passes static analysis, secret scanning and dependency checks before merge, cannot be committed directly to protected branches, and requires human review where it touches privileged operations.
WHAT IT ADDRESSES
Vulnerabilities, secrets and backdoors entering the codebase at machine speed and volume.
VERIFICATION METHOD
Submit code with a known finding through the pipeline; confirm it is blocked.
OWASP T&M; NPW
bottom of page