Static analysis security

Find missing receipts (requires plow.co) · Deterministic local checks for risky code patterns and metadata mismatches.