sufield/stave

Stave finds compound attack paths that single-resource scanners miss. AWS security findings from configuration snapshots without any credentials.