Build your own vulnerability harness

This post details the development of a model-agnostic 'vulnerability harness' for AI-driven security analysis. It describes the evolution from a single-repo 'skill' to a fleet-wide scanning pipeline, emphasizing state management, persistence, and cross-repo reasoning. The harness is divided into a Vulnerability Discovery Harness (VDH) and a Vulnerability Validation System (VVS), using different models for each stage to ensure adversarial validation and model interchangeability. Key components include Recon, Hunt, Validate, Gapfill, Dedup, Trace, and Feedback agents, all orchestrated to manage context exhaustion and ensure robust vulnerability discovery across diverse codebases.