ExploitLattice v1.0.0 — Initial Public Release

ExploitLattice v1.0.0

The first public release of ExploitLattice, an attack-path-aware secure code review workflow designed to move beyond isolated vulnerability findings.

What this release includes

• Evidence Gate for separating Confirmed, Probable, and Needs Validation findings
• Attack-path chaining using explicit preconditions and postconditions
• Reachability-aware vulnerability prioritization
• CWE and OWASP security mapping guidance
• CVSS v4.0 support when sufficient evidence exists
• Root-cause remediation and secure patch guidance
• Fix-validation and regression testing
• Repository, PR/diff, and focused review modes
• Deterministic attack-path analysis helper
• Synthetic demonstration findings and attack-path output
• Automated validation through GitHub Actions

Why it is different

ExploitLattice does not treat every vulnerability as an isolated ticket. It evaluates whether weaknesses can combine into a realistic attacker path, identifies the highest-leverage remediation points, and separates verified security evidence from assumptions that still require validation.

Responsible use

ExploitLattice is intended for defensive security review of code and systems that the reviewer is authorized to assess.