Audits Are Diff-First: Only the Diff, No Rabbit-Holes into Pre-Existing Code
Security audits must start with the diff—only reviewing changed code, avoiding historical context; independent assessment precedes reading PR/bugbot threads to preserve objectivity; issues flagged by multiple reviewers automatically gain higher priority—overlap is signal.
入选理由:安全审计必须采用 diff-first 策略,只聚焦新增/修改代码,不追溯历史实现。

