23 days ago
- Project Glasswing explores using frontier AI models for enterprise code security, highlighting the need for a model-agnostic architecture to avoid reliance on any single model.
- A two-stage vulnerability research workflow is implemented: the Vulnerability Discovery Harness (VDH) for discovery and the Vulnerability Validation System (VVS) for triage, using different models to cross-check findings.
- Key stages in VDH include Recon, Hunt, Validate, Gapfill, Dedup, Trace, and Feedback, with strict context controls and persistence to prevent hallucinations and data loss.
- The system emphasizes adversarial verification, requiring proof-of-concept tests and patches for each finding, and uses deterministic code to validate paths and prevent false positives.