I built a tool that makes any coding agent prove the security bugs it finds

A real end-to-end walkthrough: the read-only MCP tool, install, init, and a Pi + RedMirror audit that proves the bypass with a concrete attack path.