feat: upgrade scanner with route-middleware modeling, adaptive context triage, and memory scaling

feat: upgrade Layer 7 triage validator to use Llama 3.1 70B and enhanced prompts

bugfix: import ScanDomain in layer7_validator.py

fix(triage): route all SAST/LLM taint findings to Joern CPG validator

fix(triage): route injection findings to Joern for path validation and constrain prompt-injection rules

fix: resolve logic, security, and memory leak issues in scanner layers

feat(scanner): implement 5 targeted improvements to scanning engine and rules

feat: implement primary Gemini with NVIDIA NIM fallback and robust regex JSON parsing

Migrate backend to Gemini 3.1 Flash Lite and optimize JS/TS rulesets

refactor(backend): use asyncio and thread pools for background tasks, optimize scanner AST utils and checks

fix: optimize Layer 7 memory footprints and prevent OOM/timeouts on Render

feat(scanner): sync dynamic secrets validation filters and entropy triaging

perf(scanner): optimize SAST chunk size, layer 7 batch size and NIM client timeout ceiling to prevent timeouts and OOMs

feat(triage): implement single-shot AI Batch Triage, multi-model Cloudflare fallback, zero-bypass keyword gate, and isolated batch timeouts

feat(hardening): deploy 5 surgical patches resolving TSConfig resolver, platform agnosticism, tenant isolation, SQL RLS Level 2, and LLM noise gate

fix(backend): update Dockerfile and layer7_validator to skip/adjust Joern

feat(validator): install Joern and promote to Tier 1.5 primary validation

fix(validator): explicitly mark lockfiles as false positives to exclude from real findings count

fix(pipeline): implement lockfile pre-filters, taint confirmation flag overrides, update Semgrep configs and binary path lookup

fix(pipeline): implement lockfile pre-filters, taint confirmation flag overrides, and scanner self-exclusions

perf & robustness: optimize line counting via binary search, relax pipeline filters for training apps, and fix Windows ARG_MAX SAST crash

feat(pipeline): VibeSec Elite master upgrades and operational sweep

security: implement secure path traversal, SSRF mitigation, rate limiting, and Joern injection sanitization

fix(validator): prevent OOM crashes on Render by caching OpenAI client globally and adding periodic garbage collection

debug: add rich step-by-step layer logging and LLM verdict tracing

feat: secure Python backend engine v2.0