A Prompt Is Not a Security Function

What does it mean for a finding to be a “False Positive” to your team? I watch a lot of metrics on the SAST+SCA triage harness we build at Pixee. Among them are jitter (how often the system changes it