Give it a target. It comes back with the bug reproduced.

$ curl -fsSL <alpha demo: install link coming soon> | bash

Watch a run

The bargain

Autonomy, bought with three controls.

scope: in acme.test, *.acme.test

The scope guard

Deny wins; ambiguity blocks. Compiled before a packet moves, checked on every tool call that names a target — before autonomy gets a say.

confirmed rejected inconclusive

The proof engine

The agent proposes; the engine disposes. A candidate is re-proven host-side by the least invasive non-destructive proof, and the bytes are kept. Only confirmed is stored.

eng kill stops new traffic, not traffic already sent

The cleanup ledger

Every change ledgered, every change undone — at teardown, so an engagement cannot close dirty.

orchestration

One goal in, specialist children out.

dispatch → ack

re-read per candidate · deny wins

▸ Each child is a durable queue row. Its own workdir, its own SHA-pinned slice of the arsenal.

▸ Every child acknowledges. The master collects a reply back down the spoke it dispatched on, not fire-and-forget.

▸ Nothing they hand back is a finding. Code the model cannot reach re-proves it first.

▸ The gate is re-read, not snapshotted. eng kill or an expiry reaches a job already running, and a refused candidate sends zero packets.

what a run looks like

gimorra · scan illustrative

on disk, and auditable

An evidence trail you can audit.

18m 42s · 5 confirmed · $3.71 est.

The engagement folder

One scan, one folder. ls answers what it wrote, rm -rf removes it, a tarball of it is the whole run.

every source unions onto one table

The attack surface

One table, every pass unioned onto it. Scope is decided before a row lands, and an out-of-scope asset is recorded, not dropped.

export → replay → closed

The evidence chain

Replayed, not asserted. On import the hash chain is recomputed against the manifest, and what lands is closed — a reading surface, never a launching pad.

addressed by content_sha256

The proof document

A finding is its proof. The redacted copy is what the chain hashes; the raw copy is 0600 and never hashed.

Read a finished run before you install anything.

A demo engagement is loaded in it, exactly as a real run leaves it.

Open the demo