Security Tests As Executable Specifications for LLM Code Generation: Benefits, Trade-Offs, and Coverage Limits

Large language models LLMs can generate functionally useful code that remains vulnerable, while security-focused interventions may break intended behavior. We investigate security tests as executable specifications both before generation and during iterative repair. We develop SecTDD, a controlle...