Code is cheap to produce.
Proof earns review.

I built a typed evidence compiler that turns a change into risk, required proof, missing evidence, and closure.

Read
Map
Compile
Gate
Close
Deliver

Engineering evidence

Evidence receiptGate

AUTHRisk surface matched
MISSINGFail-closed proof
BLOCKHuman review waits

Dogfood, not correctness

85 targeted tests · architecture gatePrivate alpha

Swipe through the evidence04 / 06

Diff, intent, repository context, and available tools become typed local facts.
DIFFChanged lines
INTENTDeclared + inferred
TOOLSAvailable evidence
Git diffIntentTool terrain
Keep network enrichment opt-in and preserve where every fact came from.
Local CLI receipts
Local-first
Each risk surface creates deterministic proof obligations.
AUTHSecurity proof
MIGRATIONRollback + data proof
UIVisual + a11y proof
Risk surfacesRequired proofFound or missing
Model change → obligation → evidence → closure explicitly instead of hiding it in a score.
Evidence Graph contracts
Configured policy
Facts, rules, obligations, closure, gates, and UI outputs share one typed spine.
FACTSRepo + diff + tools
RULESEvidence contracts
RECEIPTCanonical output
Typed factsEvidence contractsReceipt compiler
Compile one canonical model instead of letting each delivery surface invent parallel dictionaries.
Core spine complete
Migration pressure remains
A hard block exists only when configured policy requires proof that is still missing.
AUTHRisk surface matched
MISSINGFail-closed proof
BLOCKHuman review waits
Repo policyEvidence binderPass / warn / block
Let fuzzy findings warn; reserve blocks for deterministic requirements and attach the repair action.
85 targeted tests · architecture gate
Dogfood, not correctness
Every missing-proof row records whether it was fixed, tested, justified, deferred, or accepted.
OPENMissing proof
ACTIONFix / test / reason
REVIEWReady gate
MERGESeparate gate
Stable ledger rowFresh evidenceTwo gates
Keep permission to start human review separate from permission to merge.
Closure ledger contracts
Human remains final
The same receipt reaches CLI, GitHub Action, VS Code, JSON, Markdown, and agent briefs.
CORECanonical receipt
CLI + CIDeveloper workflow
COCKPITSource-linked review
CONTROLCalibration gate
CLIGitHub ActionVS Code
Compile once, render many times, and calibrate rule changes against positive and negative controls.
Current delivery surfaces
Private alpha

System viewPolicy—not model confidence—controls a hard blockFuzzy signals may route attention; only configured missing proof can stop the review workflow.

Code is cheap to produce.Proof earns review.

Code is cheap to produce.
Proof earns review.