Verifiable reports on closed software, without outside access to its code.

An author who keeps the code closed can still show its state to a funder, an insurer or a reviewer. The inspection runs inside the author’s own repository; only a signed report goes out, and anyone can check who issued it.

1. 01The inspection runs in the author’s repository, on the platform’s hosted machines.
2. 02It answers a fixed list of questions, the same for everyone; anything not measured is reported as “not measured”, never as silence.
3. 03The run is signed by the platform, so the report’s origin can be verified without trusting the author or us.