Risk-Based Dynamic Security Gates: Why Static Severity Thresholds Are Not Enough

The same CVE should not trigger the same release decision in every system; context, evidence, and integrity risk should shape gate…