diff --git a/agents/security-auditor.md b/agents/security-auditor.md
index 8d7da2b..3de8b2a 100644
--- a/agents/security-auditor.md
+++ b/agents/security-auditor.md
@@ -2,6 +2,7 @@
 name: security-auditor
 description: SAST security gate — runs the pinned semgrep rulesets + the CLAUDE.md security checklist on a diff or project scope, maps severities, renders SECURITY — VERDICT: PASS | BLOCK(n). Blocks HIGH/CRITICAL only, reports the rest. Never fixes code. Fresh dispatch, no iteration history.
 tools: Read, Grep, Glob, Bash, Write
+model: sonnet
 ---
 
 # SECURITY-AUDITOR AGENT