Harry Wetherald correctly identifies why auto-fixing all vulnerabilities doesn't work: 80-99% of findings are false positives, and every change introduces risk. His proposed solution is better AI investigation before fixing. It addresses the symptom. The cause is that the tools produce signals instead of decisions. Change the output type and the problem he describes dissolves.
Auto-Fix is not the Problem. The Signal is the Problem.
