AI Code verifier
INDEXING PROJECT DATABASE
SYS.VER.1.0
PROJECT BRIEF
- Findings management — paginated, searchable, filterable by severity/status/project, with correct severity ranking (critical → high → medium → low → info) and CWE tagging.
- Repair loop — multi-sample candidate fix generation (n=3) per finding, with per-candidate simulated Z3 verification, an attempt counter, and automatic escalation after repeated verification failures.
- WCET analyzer — per-function worst-case-execution-time vs. deadline checks (pass/fail with margin), aimed at real-time/embedded targets.
- Transpilation tracking — records and displays code-transpilation jobs and their status.
- Compliance & reporting — report generation (JSON/PDF-via-print) summarizing project risk, open findings, and severity breakdown for audit trails.
- Project explorer & scan history — track multiple codebases, past scans, and trends over time.
- Auth & hardening — JWT-based login/register, protected API routes, Helmet security headers, rate limiting (with a stricter limit on auth endpoints), restricted CORS, sanitized error responses, and a reduced JSON body-size limit.
- Air-gapped by design — no external telemetry, local MongoDB only, explicit "trust indicators" in Settings and the sidebar, and PDF export via the browser's own print function instead of an external rendering service.
SYSTEM TAGS