video1.0<iframe src="https://www.loom.com/embed/8d692ca5cf12407b9b216301a7a7344b" frameborder="0" width="1108" height="831" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>8311108Loomhttps://www.loom.com8311108https://cdn.loom.com/sessions/thumbnails/8d692ca5cf12407b9b216301a7a7344b-990b9387f0ff73fb.gif170.935This Loom presents Jingkong, the Hexon product, which automatically guards against newly exploited security bugs by matching vulnerable versions, checking reachability, and shipping verified fixes. It runs four steps: match the installed version against advisory ranges, expose only when code calls vulnerable functions checked via a semgrep rule, suppress noise when the function is not reachable, and upgrade to the newest package version outside every advisory. The agent then forces transitive copies using npm overrides, runs tests, opens a PR, and stores guardrails so the same bug cannot return. A historical dashboard shows aggregated vulnerability matches and detailed log events, and a real-life run demonstrates PR generation and guardrail effectiveness, including a suppressed count.