The Manifest

The fix commit that didn't look like a security fix

We measured the blind spot around CVE-2026-104851 (fsspec, CVSS 8.8) hour by hour: every public feed empty 10 hours after disclosure, and a fix commit with zero security vocabulary. Here's how fix-radar caught it anyway — after missing it first.