AI Built My App. Another AI Found the Security Flaw

Question

I let Strix, an open-source AI pentester, attack an app I built with Claude Code and written security rules. Forged tokens, account swaps and 2FA bypasses all failed. One race condition got through, the AI's own model refused to prove it, and I proved and fixed it by hand.