A checkpointed pipeline for bug bounty work. It crawls an explicitly scoped host, collects and deobfuscates its JavaScript, maps routes and endpoints, runs isolated model reviews over that evidence, ...

The problem it solves: an agent confidently inventing a Next.js API, or answering a Next.js 16 question from Next.js 14 memory — synchronous cookies(), middleware.ts instead of proxy.ts, fetch cached ...