1 · Your workspace
Register, verify your email, and create an organization. Assign the minimum role each teammate needs. Owners and administrators manage access; analysts start audits.
Start with a workspace, connect a selected repository, and make the scope and limits explicit.
Register, verify your email, and create an organization. Assign the minimum role each teammate needs. Owners and administrators manage access; analysts start audits.
An operator configures the GitHub App, model provider, payment sandbox, and execution infrastructure. Missing configuration produces a clear blocker. Development/test adapters are explicitly labelled and never establish live provider validation.
Select a fixed source revision, included and excluded paths, focus areas, profile, agent budget, and a credit limit. Review coverage implications before submission.
A completed workflow does not mean exhaustive coverage. Incomplete or cancelled reviews preserve verified results and disclose exact blockers.
The source repository includes environment templates, architecture and threat models, migrations, provider setup, test results, deployment, backup, restoration, and incident runbooks.