Skip to content
AI News HubLIVE
More
Summary only

I built an AI vulnerability scanner with Claude and Codex. It failed

This article introduces The Janitor, a Rust-native deterministic security tool that scans pull requests before merge. It uses formal methods, zero-copy execution, and dual-PQC attestation to detect vulnerabilities in 6.7 seconds on a 3.5M-line codebase. Unlike cloud-based AI security solutions, The Janitor runs on-device, never exfiltrates code, and provides mathematically provable security guarantees.

SourceHacker News AIAuthor: GhrammR
I built an AI vulnerability scanner with Claude and Codex. It failed
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions

Summary only

Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.

Key points and analysis

Article intelligence

EngineersIntermediate

Key points

  • The Janitor is a Rust-native structural firewall that uses formal verification (IFDS, Kani, Z3) to detect vulnerabilities.
  • It performs zero-copy execution and zero-upload; code never leaves the local runner.
  • Supports SLSA Level 4 reproducible builds and CycloneDX CBOM cryptographic proofs.
  • Unlike Veracode and similar cloud solutions, The Janitor can operate offline and in air-gapped environments.

Highlights and analysis are generated automatically and may contain errors. Check the original source.

More recent stories on this topic · Agents