differential-review

Automated security code review analyzes PRs and commit diffs to identify regressions, calculate blast radius, and generate structured markdown audit reports. It uses baseline context and phase-driven triage to document security-focused changes across your git history.

Differential review is a security-focused analysis of code changes across PRs and commits to detect regressions. Use it when you need traceable evidence, risk stratification, and audit-ready markdown reports for codebases with active git histories and evolving trust boundaries.

Yes, you can generate compliance-ready audit reports from git diff content. The workflow produces a structured markdown report aligned with differential review methodology, incorporating risk stratification, blast radius assessment, and adversarial analysis for high-risk changes.

Blast radius assessment calculates the potential impact of changed code to guide audit focus and risk-based prioritization. It evaluates test coverage and regression risks, coordinating baseline context with security invariants to determine the scope of affected trust boundaries.

Automated diff review operates with no external dependencies, analyzing git histories and diff content directly. It adapts analysis depth to codebase size and applies phase-driven workflows independently to produce security audit reports.

To prevent security regressions, run a phase-driven diff review that applies baseline context for security invariants, evaluates test coverage for changed code, and performs adversarial analysis on high-risk changes to automatically detect and document potential vulnerabilities.