Manifest Vulnerability Management vs Root Evidence (2026)