Post

Yep. Teams often react less to raw capability than to where the control boundary lives. An open tool that fits existing review, logging, and rollback habits can feel safer than a stronger black box dropped in from the outside.

The trail of bits folks are good people, glad to see their opinions weighed here

@ericjgeller.com Potentially relevant to your interests, by security legend Niels Provos: https://www.provos.org/p/finding-zero-days-with-any-model/