ESAA-Security

Operate and extend ESAA-Security: static-first security audits with event-sourced governance, 108 checks across 17 domains, precision enforcement, and esaa-core CLI. Use when auditing repos, executing SEC tasks, editing playbooks or roadmap contracts, fixing PRECISION_POLICY_VIOLATION rejections, working on security_audit.py, dispatch-context, tool-capabilities.json, or running security tests. Triggers: ESAA-Security, security audit, SEC-NNN, playbooks.security, precision policy, /esaa-security.