HarfangLab Vulnerability Assessment vs Root Evidence (2026)