./recon --target api.acme.io --passive
[+] 47 endpoints enumerated
[+] candidate: broken object level auth · /v2/orders/{id}
./verify --proof safe --dry-run --no-exfil
[!!] CRITICAL IDOR → RCE CVSS 9.8
[!] 0 bytes of user data touched
./report --severity critical --sla 24h
[✓] submitted 00:41 · triaged → patched