ReviewVow
Customers ask how you use AI in your code. Give them proof, not a paragraph.
ReviewVow analyzes your repository history and produces a signed evidence pack that a security reviewer can check on their own, without having to trust us or you.
Who it's for
Small software vendors who keep getting security questionnaires with questions like "Do you use AI coding tools? How is that code reviewed?" and have no good way to answer.
How it will work
- Analyze. We look at repository history for signals of AI assistance: co-author trailers, agent configuration files, and bot commits.
- Record. The result becomes a report with the method and its known limits written next to the numbers.
- Prove. The report is hashed and signed so a reviewer can re-verify it independently.
What an evidence pack looks like
Illustrative sample, not real data
repo: example-org/example-app
period: 2026-01-01 to 2026-03-31
commits analyzed: 1,284
commits with AI-assist signals: 212 (16.5%)
detection method: v0.1, limits documented
signature: pending (sample)
repo: example-org/example-app
period: 2026-01-01 to 2026-03-31
commits analyzed: 1,284
commits with AI-assist signals: 212 (16.5%)
detection method: v0.1, limits documented
signature: pending (sample)
Being straight with you
- ReviewVow is in early development. Nothing here is a finished product.
- Detection from history is not perfect. We will publish how accurate it is, including where it fails.
- We are working out exactly what access we need to your repositories and will document it before asking for any.