Your source is evidence.
It is never executed.

This is a local development prototype, not a hosted multi-user service. It listens on 127.0.0.1. No GitHub account, payment provider, external URL checker, or model API is connected.

What happens when you select a folder

The browser filters supported files before reading them, then sends them to the local scanner. Environment files, key files, credential filenames, dependency folders, and build outputs are excluded. Source is held in browser memory so you can request a patch preview. The server processes each request in memory and does not persist source or reports to a database. Clear the session or close the page to release the browser’s references. This is not a secure erasure guarantee.

Evidence and limits

Evidence is redacted before being returned. Redaction is a defensive filter, not proof that every possible secret format is recognized. Patch download is unavailable when the target configuration matches a sensitive-value pattern. The browser supports 8 MB / 2,000 selected text files; the scanner enforces its own per-file and total limits. No outbound policy or AASA fetches occur.

Audit and Fix have separate authority

Audit parses configuration and source without running project scripts. A supported fix preview computes an in-memory patch and re-scans it. It does not modify the selected folder or create a GitHub PR. A future Fix GitHub App must receive separate write authorization, bind the patch to a commit, open a reviewable PR, and re-scan the exact PR head.

A static pass is not launch acceptance

Generated native configuration, multiple targets, dynamic code, remote settings, signing, and device behavior may require manual verification. No build worker or App Store submission is included, and no review approval is guaranteed.