Trust Boundary

The app can use AI review providers and local artifacts, but deterministic code owns score, caps, labels, and disclaimers.

Automated
Public Review

Improve

Configured providers can draft bounded section notes. They do not define levels, change score law, or override caps.

Improve

Can speed evidence discovery. They are input hints, not public truth.

Strong

Every report is tied to the reviewed public revision so future re-reviews can be compared honestly.

Improve

Can identify a submitter. It does not automatically prove repository ownership or quality.

Strong

Product signals only. They never affect THC score or level.

Absent

Future sandbox workers may run safe checks, but the app server should not execute arbitrary repo code.

Strong

Registry and queue substrate. Database rows preserve artifacts; they do not become methodology truth.

Absent

Private repos, private tests, secrets, and unpublished dashboards are excluded from v1 scoring.