01
The five verdicts
- `regressed` — a new open finding appeared or overall risk increased beyond tolerance. Investigate before merging.
- `improved` — at least one prior finding was resolved, no regression appeared, and the scores did not worsen materially.
- `stable` — the finding set stayed the same and scores remained within tolerance. This describes the comparison; it is not proof of absolute security.
02
Score deltas vs. finding deltas
- Finding deltas (new / resolved / persistent) drive the verdict's binary fail/pass logic.
- Score deltas (overall_risk, detection, exposure, readiness) carry direction (better / worse / neutral) and magnitude — useful for trend reporting even when no findings changed.
- A scenarios array trim (e.g. diff-selected just LLM01) marks dropped findings as 'carried forward' instead of 'resolved' — so an old finding that wasn't re-tested doesn't fake an improvement.