What happened
Phoenix Security announced general availability of Green AI Remedy on Nov 5, 2026, the SCA remediation flow in its Phoenix Green agentic remediation pipeline. It starts from findings a team has already prioritized, shows scope and a USD cost estimate before any model runs, assesses each repository at a pinned commit within a spend cap, shows evidence/status per finding, and opens a pull request only when a person with the right permission publishes it — closing the finding on the next scan. It runs on the customer's own model key.
Why it matters
Tackles the 'automated fix PRs nobody merges' problem by keeping remediation human-gated, evidence-visible, and cost-capped — a practical differentiator in the crowded agentic vulnerability-remediation space, and an example of token-burn accountability entering AppSec workflows.
Applicability
Vuln-management/ASPM teams using Phoenix, or any team burned by unmerged AI fix PRs, should evaluate the human-gated, cost-capped remediation workflow.