SPLASH: Contrastive Audit Pressure for Detecting and Localizing Security Hallucinations in Generated Code

Code generated by large language models often passes every functional test while remaining insecure. These security hallucinations are common, written with high confidence, and repeated across samples, so neither the generator's own uncertainty nor static analyzers reliably catch them. We introduce