# Security-gate report

## Target reviewed
- `abs/target.ts`

**Oracle (complete-mediation) — run per in-scope file (target + inlined deps):**
- `abs/target.ts` (target): FLAGS — see below

```
(oracle silent)
```

**LLM leg (v2@sonnet/MEDIUM, 1-roll union + semantic-merge, single-file):**
- [high] reset token single-use not enforced  _(found by 1/1 rolls)_
- [low] missing rate limit on reset  _(found by 1/1 rolls)_