A composable security-review workflow for coding agents that investigates, reproduces, and patches vulnerabilities.