Enclave now files its own @linear issues, and closes them only when it can no longer break in.
When an attack path is proven, the engineer who owns the code gets an issue with the full path, the evidence, and a review ready fix.
Ship it and the agents rerun the attack.