A live demo walkthrough of compile-sast, a Kotlin compiler plugin that catches security vulnerabilities at build time rather than in CI. We’ll explore why compile-time enforcement works for certain vulnerability classes, and what “shift left” looks like when you go all the way to the compiler itself.