I spent five days building an autonomous system that owns the vulnerability remediation lifecycle — the six weeks after a scan, which is where one-person security programs actually die. Finding vulnerabilities is solved. Chasing the owner who never opened the ticket is not. The part worth writing about is not the pipeline. It is a number I did not expect and initially misread as a bug. 65% disagreement Every triage decision in this system is challenged before it becomes s...