security audit 30 fix verification.md