Part 1 of this series walked through why AI has compressed the gap between a vulnerability's disclosure and its exploitation from months to hours, laid out the lifecycle every vulnerability goes through, and mapped Project Glasswing, OpenAI Daybreak, Project Lightwell, Big Sleep, and CodeMender onto that lifecycle. The short version: discovery has gotten fast. Deciding what matters, fixing safely, and governing the automation doing the work have not caught up.This second part covers that second half, the part most vendor announcements leave out.