The asymmetry here is the real story: attackers use AI to fuzz and chain exploits at scale, while defenders still rely on manual patch cycles. Static analysis and formal verification tools need the same AI-acceleration on the defense side, otherwise this becomes the norm for every open-source