# StepCheck Dev

> Deterministic context firewall for AI coding agents: AST-skeleton checkouts, three commit gates (A mechanical, B omission, C executed invariants) and DSSE attestations, served as a Streamable HTTP MCP server and a BYOK proxy. 50-turn benchmark: 132,779 raw tokens -> 16,081 sent (87.9% saved), 4/4 injected faults caught.

Apache-2.0. Python projects for now. This file is generated by `stepcheck llms` from the repository's own files.

## Kernel seams

- [StateKernel (Seam 1)](https://github.com/lalithasutam/stepcheck-dev/blob/main/backend/kernel/__init__.py): init_session, checkout(focus=), commit(patch=) through Gates A/B/C, lock_node, provenance (in-toto Statement v1)
- [DualDoorGateway (Seam 2)](https://github.com/lalithasutam/stepcheck-dev/blob/main/backend/server.py): Door 1 BYOK firewall proxy for /v1/messages and /v1/chat/completions; Door 2 REST /v1/step/* plus MCP at /mcp
- [CLI](https://github.com/lalithasutam/stepcheck-dev/blob/main/backend/cli.py): stepcheck up / benchmark / review / preview / audit / ci / llms
- [Agent rules](https://github.com/lalithasutam/stepcheck-dev/blob/main/CLAUDE.md): the MCP workflow Claude Code and Cursor follow: session, focused checkout, patch commit, omission check

## Benchmarks

- [benchmarks/results.json](https://github.com/lalithasutam/stepcheck-dev/blob/main/benchmarks/results.json): the 50-turn coding-rot benchmark receipt every figure above is read from
- [Interactive 50-turn replay](https://lalithasutam.github.io/stepcheck-dev/): turn scrubber, OKF graph, patch diff, attestation and cost curve; no install
- [Audit receipt](https://lalithasutam.github.io/stepcheck-dev/audit.html): anonymized stepcheck audit of real Claude Code sessions: cache-cliff re-writes and Read-tool bloat
- [CI](https://github.com/lalithasutam/stepcheck-dev/actions/workflows/ci.yml): pytest at the two public seams plus stepcheck ci on Ubuntu and Windows

## Quickstart

- [README](https://github.com/lalithasutam/stepcheck-dev#run-turnkey): pipx install git+https://github.com/lalithasutam/stepcheck-dev, then stepcheck audit and stepcheck up
- [MCP for Claude Code](https://github.com/lalithasutam/stepcheck-dev#claude-code-slash-commands-work-out-of-the-box-after-cloning): claude mcp add --transport http stepcheck http://127.0.0.1:8420/mcp/ and the four shipped slash commands
- [Release v0.1.0](https://github.com/lalithasutam/stepcheck-dev/releases/tag/v0.1.0): source and the self-contained studio preview

## Optional

- [GLOSSARY](https://github.com/lalithasutam/stepcheck-dev/blob/main/GLOSSARY.md): ubiquitous language: OKF frame, gates, seams, attestation
- [LAUNCH](https://github.com/lalithasutam/stepcheck-dev/blob/main/LAUNCH.md): the launch write-up with the metrics table and its sources
- [llms-full.txt](https://lalithasutam.github.io/stepcheck-dev/llms-full.txt): this index followed by the full README, launch write-up and glossary