Skip to content
The open standard for codebase assurance

One reproducible number. Verify it yourself.

The Codebase Assurance Index is an open, reproducible 0–100 standard for the condition of a codebase. The algorithm, the lenses and the rubric are public, and the reference scorer is open source. You don't have to trust us — verify any number yourself.

Same commit + frozen rubric → the same number, every run. That invariant is the whole point of this site.

✓ Signed delivery
checkout-serviceby acmeAdequate
CAI62 / 100
Trend: improving (up 17) over the last 8 scans.
4562↑ +17
Code health68
Architecture55
Maturity63
Readiness52
Security71
Measured1 July 2026 · 4.2M lines
Reproducible fingerprinta3f9…e021
SignatureEd25519 — verifies

A sample delivery — dated, signed, verifiable. Same commit + frozen rubric reproduces this exact card.

The binding middle

Producers push. The registry holds. Consumers read.

Two applications close the loop around this standard — neither of them owns the number.

Watchdog produces

Watchdog scans a codebase, computes the CAI under the published rubric, and pushes a signed evidence package to the registry.

Produce a survey →

cai holds & verifies

The registry stores signed CAI-delivery packages — dated, content-hashed, Ed25519-signed. Anyone with a package can check it against the standard.

The registry →

Assay consumes

Assay turns evidence from the registry into decision reports — due diligence, procurement verification, consequences reads.

Commission a decision →
  1. Watchdog producesscans the codebase, computes the CAI under the published rubric, signs the evidence package
  2. The registry holds & verifiesdated, content-hashed, Ed25519-signed deliveries — checkable by anyone against the standard
  3. Assay consumesturns registry evidence into decision reports — due diligence, procurement, consequences

Neither app owns the number — the standard does. That separation is what makes a shared survey worth trusting.

Why the number is trustable

Open, reproducible, and versioned — by construction.

Open verdict

The algorithm, the ten lenses and the rubric are published here. The reference scorer is open source — the verdict is not a private formula.

How the CAI is computed →

Reproducibility invariant

Same commit + frozen rubric → the same number. Run the open scorer over a survey's evidence and you get the same CAI — or you've found a discrepancy.

Verify a survey →

Versioned & contestable

Any change that can move a score bumps the rubric version, and a scoring change not in the published spec fails CI. Every number stays re-derivable from a rule you can read.

Rubric versions →
0–100
one reproducible index for a whole codebase
10
lenses — 5 always on, 5 conditional
Ed25519
signed, tamper-evident delivery packages
100%
reproducible — same commit, same rubric, same number
Neither app owns the number.The standard does. Watchdog measures against it; Assay reads from it; this site defines it, versions it, and lets anyone check it. That separation is what makes a shared survey worth trusting.

Check the work — that's what the standard is for.

Reproduce a survey from its evidence, or read exactly how the index is computed.

Producers → watchdog.canine.dev · Consumers → assay.canine.dev