Repair a vulnerability without breaking the services that depend on it.

CVE Twin traces a CVE through a dependency graph to show its blast radius, then runs competing repairs in isolated Git worktrees and checks each one against security and contract tests.

In the recorded local run, three repair strategies were compared and the smallest change took the test suite from 3 failing checks to 7 of 7 passing.