Skip to content
Back to milestones

B06: Automated repository security review

New issue
Open
No due date
•Last updated Oct 8, 2026

Build a deterministic read-only bounded scanner for contextual repository risk, add benign and malicious corpora with measured false positives and redaction policy, and integrate the scanner into CI only after it is built, through a gated report adapter with no auto-approval, secret read, environment fetch, or code execution.

0% complete

Issues