audit notes work completed, test fixes work (95% done), new sprints, new data sources setup and configuration
This commit is contained in:
@@ -158,6 +158,8 @@ evidence logs and optional DSSE summaries for audits.
|
||||
|
||||
**Modules:** `EvidenceLocker`, `Attestor`, `Replay`
|
||||
|
||||
See `docs/modules/evidence-locker/export-format.md` and `docs/modules/evidence-locker/guides/evidence-pack-schema.md` for audit pack structure and verification.
|
||||
|
||||
### 8. Lattice Policy + OpenVEX (K4 Logic)
|
||||
|
||||
**VEX as a logical claim system, not a suppression file.** The policy engine uses Belnap K4 four-valued logic.
|
||||
@@ -238,11 +240,25 @@ Key controls:
|
||||
|
||||
**Modules:** `AdvisoryAI`, `Policy`, `Authority`, `CLI`, `Web`, `Gateway`
|
||||
|
||||
### 14. AI Code Guard for AI-Assisted Code
|
||||
|
||||
**Catch security, IP, and license risks in AI-assisted changes.** Fast guard checks run on code diffs and produce evidence for deterministic policy gates.
|
||||
|
||||
Key controls:
|
||||
- Secrets and unsafe API detection with new vs pre-existing classification.
|
||||
- Snippet similarity against allowlist and denylist corpora.
|
||||
- License hygiene on dependency diffs and long snippet attribution.
|
||||
- Overrides with audit (issue link, expiry, role-based approval).
|
||||
|
||||
**Modules:** `Scanner`, `Policy`, `CLI`, `Integrations`, `Attestor`, `Web`
|
||||
|
||||
**Docs:** `docs/modules/scanner/operations/ai-code-guard.md`, `docs/modules/policy/guides/ai-code-guard-policy.md`
|
||||
|
||||
---
|
||||
|
||||
## Competitive Moats Summary
|
||||
|
||||
**Seven capabilities no competitor offers together:**
|
||||
**Eight capabilities no competitor offers together:**
|
||||
|
||||
| # | Capability | Category |
|
||||
|---|-----------|----------|
|
||||
@@ -253,6 +269,7 @@ Key controls:
|
||||
| 5 | **Deterministic Replay** | Security |
|
||||
| 6 | **Sovereign + Offline Operation** | Operations |
|
||||
| 7 | **Controlled Conversational Advisor** | Security |
|
||||
| 8 | **AI Code Guard for AI-Assisted Code** | Security |
|
||||
|
||||
**Pricing moat:** No per-seat, per-project, or per-deployment tax. Limits are environments + new digests/day.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user