# CodeTrust

> AI Governance Enforcement Platform — controls what AI agents can do before they do it.

## What It Does

- **Real-Time Agent Interception** — 9 enforcement layers block destructive commands, heredoc injection, and shell tricks before execution. Works with Claude Code, Cursor, Windsurf, and GitHub Copilot.
- **Hallucination Detection** — 95% detection rate. Catches fabricated packages, misspelled imports, invented APIs, and fake sanitizers. Verifies against 8 live registries: PyPI, npm, crates.io, Go proxy, Maven, NuGet, RubyGems, Packagist.
- **2,928 Scan Rules** — static analysis across 89 file extensions with individually crafted remediation guidance. Language-aware suggestions for Python, JavaScript, TypeScript, Ruby, and PHP.
- **PII Detection** — 16 categories including email, phone, credit card, IBAN, API keys, JWT, private keys. Auto-redaction and per-category policy controls.
- **Compliance** — OWASP ASI 2026 (10/10), EU AI Act (7/7), NIST AI RMF 1.0 (4/4).
- **Agent Integrity** — detects sycophantic retractions, unsubstantiated claims, and contradictory positions in AI sessions.
- **Scan Baseline** — first scan accepts existing code as legacy. Subsequent scans show only new issues.

## Available As

- **CLI**: `pip install codetrust && codetrust init`
- **VS Code Extension**: Real-time scanning with diagnostics, quick fixes, and offline fallback
- **GitHub Action**: CI/CD gate for pull requests with SARIF output
- **MCP Server**: 39 tools for Claude Code, Cursor, and Windsurf
- **Dashboard**: app.codetrust.ai — enforcement overview, compliance, scan quota

## How It Differs

CodeTrust operates at the moment of AI code generation — pre-execution, in real time. Existing tools (Snyk, SonarQube, Semgrep) scan human-written code post-commit. CodeTrust intercepts AI agent actions before they happen, detects AI-specific hallucination patterns, and provides continuous governance with per-line AI model attribution.

## Links

- Website: https://codetrust.ai
- PyPI: https://pypi.org/project/codetrust/
- VS Code: https://marketplace.visualstudio.com/items?itemName=SaidBorna.codetrust
- API: https://api.codetrust.ai
- Documentation: https://codetrust.ai