AI 垃圾 CVE 会诱发无效甚至有害的补丁。自动修复前必须核验来源、源码、可达性、隔离复现与真实补丁。
AI slop CVEs can trigger harmful patches. Require provenance, source, reachability, reproduction, and fix evidence before auto-remediation.