Remediation and Verification
When to Use
Use this capability when an AgentSec finding has enough evidence to change code, configuration, dependencies, or deployment policy and the result must be demonstrated rather than assumed.
Prerequisites
- A specific finding with evidence and affected location.
- Understanding of the application trust boundary and intended behavior.
- A focused test or deterministic check that can be rerun.
Workflow
- State the root cause, attacker-controlled input or authority boundary, and impact.
- Implement the smallest idiomatic fix in the existing stack.
- Add or update a focused regression test where practical.
- Run the relevant scanner plus normal project tests.
- Record what was verified and any provider/runtime control that remains review-needed.
Verification
The fix is complete only when the regression test passes, the focused security check no longer produces the same evidence, and the report or change notes explain residual risk and operational follow-up.