autonomous cve → commit → rca pipeline