Documentation · 0.1 source preview
Learn the workflow.
Inspect the decisions.
Use the task guides to work in the browser and VS Code. Follow the technical chapters to understand how the backend handles authority, scanning and retained evidence.
Use CodeSecurity
Start a local review, move between the Web workbench and VS Code, and follow a finding through to the next decision.
Start from source
Check the setup path and follow the first local review.
Find your way around the Web workbench
Locate the seven views and five Settings groups, then open the guide for the task at hand.
Work in VS Code
Connect the intended profile, choose scan scope and review findings through the editor’s own controls.
Connect with the right authority
Pair the intended browser and editor, then review their access.
Authorize source and scan
Authorize the intended source, prepare scanner data and start analysis.
Review a finding
Read the evidence in context and distinguish a disposition from a verified fix.
Use Advisor deliberately
Use Ollama for a second reading and review any remote disclosure.
Understand the gate
Separate complete evidence from a passing decision.
Protect outgoing history
Check the committed trees that will travel with a push.
Follow long-running work
Check what started, follow progress and recover an interrupted view.
Recover without losing identity
Handle conflicts, limits and uncertain outcomes.
Under the hood
Trace a request through the services, inspect their boundaries and find the source behind the design.
The local workbench
Follow the browser and editor through the API, worker, database and isolated services.
Authority and source boundaries
Understand sessions, capabilities, narrow source roots and sealed snapshots.
From authorized source to findings
Trace preflight, scanner preparation, analysis and bounded result collection.
Durable jobs and retained evidence
Follow leases, attempts, persistence, acknowledgement and recovery.
Reconnect safely
Use event hints and reconcile current state over REST.
Internal service protocols
Inspect the scanner, updater and Advisor connector without treating them as public integration endpoints.
Implementation referenceRead and extend the source
Find the implementation, study its extension points and choose the checks for a change.
API documentation: The reference covers every declared operation at the pinned public commit, including separate internal service protocols. Source-preview behavior can change. Check platform and release status before relying on a workflow.