Review code with secure-by-default standards, prioritize exploitable risks, and deliver minimal-diff fixes with evidence and regression checks.
Added a complete security review workflow with evidence standards, severity modeling, and minimal-risk remediation guidance.