What your security team will ask before a coding agent touches the repo

Seven questions a security review actually asks, answered from current documentation rather than a trust page — including the three where the honest answer is "nothing stops that".