Ask your AI Ask your AI to turn this code into a guided bug-finding exercise.
Claude ChatGPT I am reading "A generated refactor adds a new webhook that can schedule refunds. What is the strongest first security review step?" on CodeWiki (https://codewiki.com/practice/mcq/ai-era/generated-code-security/choose-delta-threat-model/).
Context (verbatim from the page):
"""
A generated refactor adds a new webhook that can schedule refunds. What is the strongest first security review step?
Model the new actors, entry point, identity, protected assets, privileged effect, and abuse cases before tracing controls
Approve it because the generated function is short and uses async/await
Run only the existing successful refund test
Ask the model whether the code follows security best practices
"""
Introduce three subtle bugs into the example above and let me find them. Reveal each answer only after I have guessed.
Answer in English. Keep code examples in Coding in the AI era. Where you are unsure, say so.