=========================
AI-Powered Analysis
=========================

Every detected bug passes through four LLM inference passes with three validation layers.

Usage
-----

.. code-block:: bash

   # AI analysis runs automatically during scan
   memguard scan /tmp/binary --tools valgrind,infer

   # Select issue number for full analysis
   Select issue # for details: 2

   # AI reasoning chain
   memguard explain <scan-id> --issue 1

   # Allocation lifecycle backtracking
   memguard backtrack <scan-id> --issue 1

   # Interactive fix session
   Start interactive guided fix? (y): y
   # Commands: apply, validate, explain, chat, alternative, rollback

4-Pass Pipeline
---------------

**Pass 1: Triage** (~5s) - Bug type confirmation, severity, one-line summary.

**Pass 2: Deep Analysis** (~15s) - Root cause, explanation, impact, CWE references.
MemHint context injected so AI knows custom allocators.

**Pass 3: Fix Generation** (~30s) - Code patches with anti-pattern rules.
Custom deallocator rules from MemHint injected.

**Pass 4: Step Decomposition** (~10s) - Guided steps for interactive session.

Three Validators
~~~~~~~~~~~~~~~~

- **Fix Validator** - catches free-then-use, useless allocation, recognizes safe linked-list traversal
- **CWE Validator** - auto-corrects wrong CWE references
- **JSON Escape Fixer** - fixes invalid escapes from smaller LLMs