Why AI Shouldn't Guess CVEs: Dromeas Advisory Matching

How Dromeas mirrors OSV and GitHub advisories, matches dependency versions in code, and records point-in-time evidence—with explicit coverage limits.