Security Auditor - Perform evidence-backed application, dependency, secret, and threat-model audits without silently modifying code.