Stop Using Binary Pass/Fail for AI Agent Security — Use Context-Aware Policies Instead

A security scanner that says "FAIL" tells you nothing useful. FAIL where? FAIL why? FAIL compared to what threshold? When I built clawhub-bridge, the first version had three verdicts: PASS, REVIEW, FAIL. Binary. Clean. And completely useless for real...