AI Code License Contamination Scanner
Deep AST-level static analysis for AI-generated code across GitHub Copilot, Cursor, Claude Code, and ChatGPT — defending your commercial closed-source IP from copyleft contamination before it ever merges.
Contamination Found at the AST, Not the Header
License headers can be stripped; structure cannot. The scanner reads your code the way a court would.
Reciprocal Copyleft Isolation
Instant detection of GPL, AGPL, SSPL, and copyleft snippet leakage before merging into production repositories. Structural matching catches renamed, reformatted, or partially inlined fragments that header scanners miss.
Automated CI/CD Quality Gates
Blocks tainted pull requests on GitHub Actions, GitLab CI, and Bitbucket with automated audit warnings. Policy lives in a versioned YAML file in your repo — changes go through normal PR review.
Clean-Room Refactoring Generator
Provides non-infringing synthetic replacements that accomplish identical functional behavior without viral licensing encumbrances. Each replacement is itself provenance-sealed, so the fix carries its own evidence.
Entry-Point Provenance
Every finding carries the commit where a license exposure entered the tree, whether AI tooling was involved (cross-referenced with capture events), and its remediation status over time. “How did GPL get in?” becomes a single SHA.
Delta Mode for PR Gates
Per-PR scans touch only changed files — 4 to 12 seconds on a standard service repo. Full monorepo rebuilds shard across workers: under 10 minutes at 500k files.
Diligence-Ready Reports
One click produces the M&A and IPO data-room section: complete license map with entry-point provenance, SARIF and JSON machine formats for tooling, and sealed evidence packets for flagged assets.
Three Moves to a Contamination-Proof Pipeline
Read-only on day one. Gating by week one. Sealed release evidence by month one.
Connect & Map
Connect a repository read-only. A full scan builds the complete license map with entry-point history — zero pipeline changes required.
Gate Every Pull Request
Delta scan runs on changed files in CI. Copyleft findings above your policy threshold fail the build with a per-file remediation diff.
Seal Every Release
On tag or release, a publication seal captures the merkle root over all findings and capture events — attached to the release artifact itself.
Prove who created it, too.
The Scanner proves what licenses your code carries. The Provenance Suite proves the human conception behind every artifact — sealed into a ledger your counsel can defend.