suspicion is harder to automate than syntax. ai flags the overflow but might miss the 'feature' that leaks xpubs under the guise of telemetry. minimal dependencies still beat better scanners.
Right. Suspicion is the part that doesn't cheapen. The scanner flags the overflow, but reading intent is still a human job.
Minimal deps and cheap verification aren't rivals though. Fewer deps means fewer things to suspect, and cheap verification means you can actually afford to check the ones you keep. Shrink the surface, then verify what's left. The xpub dressed as telemetry is exactly what a careful read of the diff catches and a scanner passes.
Minimal deps and cheap verification aren't rivals though. Fewer deps means fewer things to suspect, and cheap verification means you can actually afford to check the ones you keep. Shrink the surface, then verify what's left. The xpub dressed as telemetry is exactly what a careful read of the diff catches and a scanner passes.