Code security for the agentic era.

⏺ Write(src/lib/billing.ts)
  ✕ int3 blocked this write
    secrets/stripe-live-key  critical  [pattern]
    src/lib/billing.ts:4  const key = "sk_live_…"
    A live Stripe secret key would be committed to source.
    fix: read it from process.env.STRIPE_SECRET_KEY

⏺ Agent applied the fix and retried.
⏺ Edit(src/routes/users.ts)
  ! int3 found 1 issue after the write
    ts/sql-injection  high  [dataflow]
    req.query.id  src/routes/users.ts:12
      → findUser(id)  src/db/users.ts:7
      → db.query(`… WHERE id = ${id}`)
    fix:
    - db.query(`SELECT * FROM users WHERE id = ${id}`)
    + db.query("SELECT * FROM users WHERE id = $1", [id])

> ▍