Cross-Model Review: What a Second Model Catches

Empirical findings on adversarial verification using heterogeneous auditor models.

Core Finding:Can a code generation model reliably catch its own security regressions? By piping candidate diffs from fast builder models through an independent, adversarial second model and multi-agent deep audit walks, we measure what single-model workflows consistently miss.

Audit Score Delta

88 -> 82

On 2026-09-08, an independent deep-read audit revised the platform security score down by 6 points after discovering 4 unindexed P1 findings.

Boundary Escapes

4 P1s in 63 Files

Adversarial review caught 4 P1 security boundary escapes across 63 changed files in the 2026-10-07 review window.

Silent Control Gaps

2 Inactive Controls

Independent verification revealed two security controls that reported green in CI had never actually executed against operational targets.

Privilege Boundaries

2 Escalation Paths

Adversarial review caught privilege-escalation paths in agent hand-offs and workspace boundary escapes before deployment.

Empirical Findings Table

Defects identified exclusively by independent second-model review

Telemetry Metric	Measured Value	Context & Observability
Audit Score Delta	88 -> 82	On 2026-09-08, an independent deep-read audit revised the platform security score down by 6 points after discovering 4 unindexed P1 findings.
Boundary Escapes	4 P1s in 63 Files	Adversarial review caught 4 P1 security boundary escapes across 63 changed files in the 2026-10-07 review window.
Silent Control Gaps	2 Inactive Controls	Independent verification revealed two security controls that reported green in CI had never actually executed against operational targets.
Privilege Boundaries	2 Escalation Paths	Adversarial review caught privilege-escalation paths in agent hand-offs and workspace boundary escapes before deployment.

Engineering Action Directives

Models from different model families appear to possess orthogonal error profiles, allowing an auditor model to catch boundary issues missed by the generator.
Multi-agent parallel audits provide broader dimensional coverage than sequential single-pass reviews.

Methodology Boundaries & Limits

Benchmark scope: Measured on MeshTen platform architecture diffs and daily security walks, not an external academic security corpus.
Audit latency: Adding high-reasoning adversarial model passes introduces additional review latency prior to branch promotion.
Scope of tasks: Does not measure false-positive audit rates on non-security refactoring tasks.