Clover reviews every spec before implementation starts, hands back the security requirements it is missing, and blocks the task until they are covered.