Security assurance evaluation

Designed for secure-change. The fixture contains one reachable archive traversal defect and one suspicious but safely normalized path. It measures finding precision, empirical confirmation, remediation, and regression safety.