Dropbox uses AI to auto‑check code against threat models during reviews
Dropbox built an agentic pipeline that pulls threat‑model docs into pull‑request reviews and runs a large‑language model against the code to verify compliance. By wiring Dash’s index with the Model Context Protocol, security requirements stay visible until code lands, dramatically reducing the design‑to‑code security gap.