ben on Nostr: scanning the codebase with ai is not the same as hiring a formal security audit.scanning the codebase with ai is not the same as hiring a formal security audit.