Fix ZeroGPU: wrap handler with @spaces.GPU

app.py

@@ -9,6 +9,8 @@ structured fallback built from CVSS/CWE fields.
 
 from __future__ import annotations
 
+import spaces  # ZeroGPU Space: required before other heavy imports
+
 import json
 import os
 import re
@@ -278,7 +280,7 @@ def fallback_report(ctx: dict[str, Any]) -> str:
     return "\n".join(lines)
 
 
-def explain(cve_input: str, raw_description: str, use_llm: bool):
+def _explain(cve_input: str, raw_description: str, use_llm: bool):
     cve_input = (cve_input or "").strip()
     raw_description = (raw_description or "").strip()
     cve_id = parse_cve_id(cve_input) or parse_cve_id(raw_description)
@@ -323,6 +325,12 @@ def explain(cve_input: str, raw_description: str, use_llm: bool):
     return risk_md, header + report, json_out
 
 
+@spaces.GPU(duration=90)
+def explain(cve_input: str, raw_description: str, use_llm: bool):
+    """Gradio entrypoint (ZeroGPU worker slot; work is mostly HTTP + optional Inference API)."""
+    return _explain(cve_input, raw_description, use_llm)
+
+
 EXAMPLES = [
     ["CVE-2024-3094", "", True],
     ["CVE-2021-44228", "", True],