643a804bdf
- Python ipaddress.is_private/is_reserved misses CGN (100.64.0.0/10) - Go http.DefaultTransport clone retains ProxyFromEnvironment (proxy-assisted SSRF) - Both gaps survived Sonnet+GPT approval; only security-reviewer blocked merge - Lesson: dedicated security reviewer role required for auth/network security code
Model Findings — Analytical & Research Work
Tracking what actually works (and doesn't) when using AI models for research, analysis, bias detection, and document review — not coding.
Started: 2026-04-26
Context
We use multiple models in different roles: Claude Code (Opus/Sonnet) for generation, Sonnet + GPT-5 for independent dual review, smaller models for focused analytical tasks. Most public discussion is about coding. We found almost no published methodology for using models in analytical research tasks (searched 2026-04-26). That gap is why we're tracking this.
Each experiment lives in its own file. See individual finding files below.