<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="//notes.dawidbalut.com/sitemap.xsl"?><urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1"><url><loc>https://notes.dawidbalut.com/in-legacy-codebases-appsec-ai-is-mostly-a-context-problem/</loc><lastmod>2026-07-01T19:20:33.905Z</lastmod></url><url><loc>https://notes.dawidbalut.com/from-vulnerability-triage-to-exposure-validation/</loc><lastmod>2026-07-01T19:15:44.007Z</lastmod></url></urlset>