variant-scan

Seed-diverse multi-pass find: run the same target through THREE independent find passes — blind, threat-model-first, and CVE/history-seeded — union the candidates with vote-counting, then hit each with a 3-skeptic adversarial verify panel (correctness / reachability / impact). This is the recall engine the real-OSS campaigns were run on; it complements /vuln-scan (single-pass focus-area fan-out) rather than…