## Lesson — Audit root cause helpers for vulnerabilities

**Tags:** security, process
**Scope:** global

When a security vulnerability is identified in a specific file, extend the audit to the lowest-level helper enabling that behavior. Fixing the symptom in one file leaves other call sites using the same helper exposed.
