Applying Security by Design at the Point of Execution: How Governed Security Requirements Affect the Security of AI-Generated Code
The study tested whether giving AI code generators specific security requirements at execution time improves code security. By delivering requirements from a governed knowledge base via a Model Context Protocol, researchers found that this delivery significantly raised security scores on two benchmarks. The finding suggests that the gap in secure-code benchmarks often stems from missing specifications rather than inherent model weakness.