One practical layer we've seen work: run parallel security scanning + an auto-fix pass on the AI-generated diff before review, so reviewers spend time on logic

One practical layer we've seen work: run parallel security scanning + an auto-fix pass on the AI-generated diff before review, so reviewers spend time on logic instead of CVEs.