Surface hidden risk: how many CVEs are still dangerous once we require every attacker-friendly trait.
The funnel drops CVEs stage by stage: Network vector → Low complexity → No privileges → No user interaction. Whatever survives is trivial to weaponise.
Frictionless score combines all four traits (0–1). Anything above 0.7 typically has a public exploit within days.
Do next: ship the top rows straight to Decision Compression → "Immediate patch".