Beyond Unit Tests: Implementing BDD and Penetration Testing in GBIM

Claim Summary This claim demonstrates that the GBM project has implemented advanced testing in four areas required by the IR B5 rubric: security testing, penetration testing, behavior-driven development, and stress testing. Area Tool or Approach Primary Evidence Security Testing GitLab SAST, Dependency Scanning, Secret Detection, OWASP ZAP baseline FE security pipeline passed; BE security analyzer jobs passed in MR pipeline 279225; ZAP baseline job is available for staging/scheduled execution. P