Conference talks, rump sessions, and lecture materials. Click to view inline.
Four approaches to having Claude audit a codebase, from the simplest to the most structured: a raw agent session, SAST, a harness, and a workflow where the model proposes and a deterministic engine decides.
A tour of code auditing in three acts: from grep and pattern rules, to AST, IR and code property graphs, to agents that judge on top of a deterministic engine instead of replacing it.
An introduction to EPSS: how the model works, how it differs from CVSS, and how to use it to prioritize vulnerability remediation in practice.
