An AI-generated login endpoint "works" - I still found SQL concatenation before launch

Functional tests passing is not the same as code being safe to ship. Here is a reproducible case: an...