Skip to main content
LOCAL INVARIANT ENGINE · ZERO-CUSTODY

The Deterministic
Code Reviewer

Sub-15 ms mathematical apertures that review and test pull requests with full context of your codebase. Zero cloud tokens. 100% zero-custody.

Sign Up / Log In
Get weekly AST invariant CVE reports & zero-day apertures:
onboard with Cursor or Claude Code MCP
roninos-daemon v3.0.0
0.12 ms

$ roninos audit --sarif=results.sarif

┌─ INVARIANT APERTURE ENGINE v3.0.0 [ZERO-CUSTODY LOCAL]

│

│ Rules Evaluated: 51 / 51 Cloud Tokens: $0.00

│ Wall-clock Latency: 14.41 ms False Alarms: 0 (Math)

│ Ed25519 Receipt: refs/notes/roninos (Signed)

└───────────────────────────────────────────────────────────

100% Offline Air-Gapped✓ DETERMINISTIC PASS
POPULAR OS REPOS AUDITED BY RONINOS
twentyhq/twentyposthog/posthoghoppscotch/hoppscotchcline/clineInfisical/infisicalraycast/extensions
TREX Runtime Validation Engine

Bugs you only catch by running the code.

TREX runs each pull request in an ephemeral local V8 sandbox and AST aperture to catch the catastrophic bugs that only show up at runtime.

axios/axiosRESOURCE LEAK

Final callback blocks settlement

A trailing reject handler omitted cleanup on transient stream errors, preventing Node.js event loop termination and causing memory leaks under sustained HTTP traffic.

PR #5801•0.24 ms
INSPECTING
InsightSoftwareConsortium/ITKMEMORY SAFETY

Size setters expose stale allocation

Direct size mutation without reallocation bounds exposed uninitialized memory pointers during volume image reslicing.

PR #4392•0.38 ms
INSPECT
solana-foundation/payCONCURRENCY

Overlapping workers submit duplicate channel reclaims

Asynchronous workers triggered concurrent reclaim transactions before balance settlement state was broadcast to the cluster.

PR #189•0.32 ms
INSPECT
stanfordnlp/dspySECURITY

Validation payload re-enables image downloads

A prompt payload parser re-activated remote asset fetching by overriding strict sandbox egress flags with caller-supplied arguments.

PR #1429•0.41 ms
INSPECT
elsa-workflows/elsa-coreAUTH BYPASS

Permission-stamp cache crosses tenant boundaries

A shared static permission stamp cache failed to partition keys by TenantId, allowing tenant A to replay execution tickets in tenant B.

PR #5102•0.48 ms
INSPECT
celestiaorg/celestia-coreRESOURCE LIMIT

Non-LCAE evidence bypasses the cap

Alternative light-client evidence packets skipped maximum block byte size validation, enabling memory exhaustion on validator nodes.

PR #1208•0.29 ms
INSPECT
getarcaneapp/arcaneCONCURRENCY

Concurrent username allocation is non-atomic

Check-then-act username lookup allowed concurrent registration requests to mint duplicate unique handle allocations.

PR #442•0.19 ms
INSPECT
hoppscotch/hoppscotchSECURITY

Public-suffix cookie scope crosses tenant boundaries

Cookie domain resolution permitted session cookies to be scoped to public suffixes, leaking authentication headers to peer subdomains.

PR #3890•0.27 ms
INSPECT
axios/axios•PR #5801RESOURCE LEAKPrerecorded Invariant Benchmark · Zero Network Egress

Final callback blocks settlement

Target File: lib/core/settle.js
WALL-CLOCK LATENCY0.24 ms
INVARIANT BLOCKED

A trailing reject handler omitted cleanup on transient stream errors, preventing Node.js event loop termination and causing memory leaks under sustained HTTP traffic.

lib/core/settle.jsAST INVARIANT APERTURE HIGHLIGHT
+  // BUG: Settlement promise never dereferences socket listener
+  socket.on('error', function handleSocketErr(err) {
+    reject(new AxiosError(err.message, AxiosError.ERR_BAD_RESPONSE));
+  });
-  socket.once('error', handleSocketErr);
Cross-Stack Proof Coverage

More bugs, across more codebases

From autonomous agent loops to enterprise secret vaults, RoninOS mathematical apertures verify complex invariants across 10 native languages.

cline/clineCONCURRENCY

Branch reset races with HEAD check

A fast git reset branch command raced with an unbuffered HEAD existence check, leaving unstaged index states corrupted.

PR #1204SEE PR
Infisical/infisicalSECURITY

DNS rebinding bypasses SSRF validation

A secret-sync webhook validated hostname IP only once at request initiation, permitting DNS rebinding to local 127.0.0.1 services.

PR #2681SEE PR
twentyhq/twentyAUTH BYPASS

Top-level IDs bypass authorization

GraphQL resolver accepted root entity identifiers without verifying workspace tenant ownership, allowing unauthorized object mutation.

PR #7891SEE PR
jdx/miseLOGIC

Stale check resets the baseline

Environment variable snapshot evaluation used a cached stat() timestamp, reverting active toolchain shims to default versions.

PR #2140SEE PR
onyx-dot-app/onyxSECURITY

Nested file IDs bypass isolation

Attachment download handler resolved file path traversal across multi-tenant knowledge graph indices.

PR #1543SEE PR
raycast/extensionsSECURITY

DNS names bypass network boundary

Extension manifest network policy evaluated raw hostname strings rather than canonical CNAME resolutions, leaking internal hostnames.

PR #14322SEE PR
blakeblackshear/frigateDATA LOSS

Stale estimate fills the disk

Video retention cleaner calculated storage capacity using cached filesystem blocks, halting recording daemons unexpectedly.

PR #11092SEE PR
langfuse/langfuseCONCURRENCY

Cancellation loses race to worker

Trace ingestion worker processed pending spans after an explicit cancellation token was set, causing orphaned billing entries.

PR #3241SEE PR
Active Invariant Apertures

Catching bugs in real-time

See what RoninOS is proving across open source repositories right now.

CategoryIssue DescriptionRepository & PRLatency
RESOURCE LEAKOrphaned draft invoice left on invoiceItems.create failuretwentyhq/twenty#243830.24 ms4m ago
SECURITYApplication tokens expose hidden workspace membershipstwentyhq/twenty#243760.31 ms11m ago
SECURITYUntrusted canvas messages can trigger host application shortcutsposthog/posthog#854750.42 ms19m ago
RESOURCE LEAKMemory leak from background sessions bypassing memory boundsposthog/posthog#853030.19 ms26m ago
DATA INTEGRITYStale-write race allows restoration of cleaned placeholder dataposthog/posthog#852390.28 ms34m ago
DATA INTEGRITYIndex metadata mismatch causes orphaned indexes and inconsistent schema statetwentyhq/twenty#243580.35 ms42m ago
LOGICTimezone offset applied twice causes incorrect reminder schedulingraycast/extensions#303330.15 ms51m ago
SECURITYNegated post-audit confirmation incorrectly satisfies security exemptionnvidia/nvflare#51390.22 ms1h ago
CONCURRENCYRace condition expires unconfirmed invites between preview and executionposthog/posthog#850650.37 ms1h ago
Architectural Contrast

Deterministic Apertures vs Probabilistic Cloud LLMs

Why compile-checked AST invariants deliver zero false positives and zero cloud tokens.

DimensionRoninOS (Deterministic)Greptile (Cloud LLM)
Execution Latency14.41 ms (<1 ms warm daemon)120,000 ms to 300,000 ms
Cloud Token Cost$0.00 cloud tokens forever$30/seat/mo + per-credit markup
Code Custody & Egress100% offline local memory isolationCode uploaded to OpenAI / Anthropic APIs
False Positive Rate0 (CFG dominator mathematical proof)High (Probabilistic hallucinations)
Call-Graph DepthRecursive SQLite WAL CTEs (Untouched files)Vector embedding semantic similarity
Audit Trail PermanenceEd25519 hardware receipts in git notesEphemeral bot markdown comment
Instant Zero-Cost Setup

See RoninOS catch bugs in your codebase

Run the local CLI directly against your repo. No credit card, no cloud tokens, 100% zero-custody.

Sign Up / Log In
Join 2,400+ engineers receiving zero-custody invariant updates:
✓ Runs 100% locally·✓ Zero code egress·✓ Signed audit receipts