Source isolation: git-object-only reads, byte-identical replay
A scanner that reads only pinned, committed Git objects, never a dirty working tree, with independently re-run byte-identical replay.
A scanner that reads only pinned, committed Git objects -- explicitly never a dirty working tree -- with independently verified byte-identical replay against multiple real runs. An AI system that reads a live working directory risks scanning uncommitted, unreviewed, or accidentally sensitive content -- and a system whose output cannot be independently reproduced cannot be trusted or audited. Evidence: a public-artifact-free run log stating the exact pinned commit, grant, and reproduction command for each run, with two runs explicitly re-verified on a later date against a dirty local checkout and confirmed byte-identical.
Technologies
- Git-object-only source reads
- Byte-identical reproducibility
Applicability
Useful for a technical or executive evaluator assessing Source isolation specifically; drawn from internal source evidence, not an independently public-published artifact.
Evidence
Evidence class: demonstrated-capability
Frequently asked
What is the evidence behind "Source isolation: git-object-only reads, byte-identical replay"?
a public-artifact-free run log stating the exact pinned commit, grant, and reproduction command for each run, with two runs explicitly re-verified on a later date against a dirty local checkout and confirmed byte-identical.