code review infrastructure

Verifiable reviews.
Auditable results.

AI reviews your code in a TEE. You get findings + cryptographic proof of what ran.

Start review

privacy

Privacy by design

Everything runs inside an Intel TDX Trusted Execution Environment on EigenCloud. Your code never leaves the encrypted enclave—the key exists only inside the TEE. Not even we can access it.

Perfect for proprietary code that can't touch external systems. Full compliance, zero exposure.

verification

AI writes code. We verify it.

Today AI generates thousands of lines of code. Parsing and tracking that context manually is impossible. It needs to be done by AI—verifiably.

Our agents audit AI-generated code with cryptographic attestation. Every finding is traceable.

documentation

Reports as documentation

Publish audit reports as pages—like Wikipedia for your codebase. They describe lineage, changes, architecture, and what the code actually does.

A goldmine of context for human reviewers, compliance auditors, and AI agents that need to understand your code.

process

01Submit repository URL
02Review executes in TEE
03Receive attested findings
Repository Input
github.com/
›acme-corp/payments-api|
branch: main
depth: full
Enclave Active
Code isolated in TDX enclave
Memory encryption verified
Running security analysis...
Attestation Complete
// findings.json
{
"severity": "medium",
"findings": 12,
"attestation": "0x8f3a..."
}

integration

Attach to your workflow

Run verifiable audits on every pull request. Findings post directly to your PR.

.github/workflows/audit.yml
# Runs on every PR
name: Verifiable Audit
on: [pull_request]

jobs:
  audit:
    runs-on: ubuntu-latest
    steps:
      - uses: verifiablerepos/audit@v1
        with:
          mode: security
          post-review: true
          fail-on: high
          attestation: true
Findings posted as PR review comments

sdk

coming soon

Or integrate directly

Use the SDK for custom pipelines. Get typed responses with full attestation data.

audit.ts
import { audit } from '@verifiablerepos/sdk'

const result = await audit({
  repo: 'github.com/org/repo',
  mode: 'full',
})

// Returns attested findings
console.log(result.report)
console.log(result.attestation)
Full TypeScript support