Feature
Secret scan and AI review
A deterministic scan blocks credentials; an advisory AI review never blocks.
The secret scan runs on the client during `wl push` and again on the server, which is the authoritative gate: a package version whose asset content contains a credential is refused. A rule can be waived for one push with `--allow-secret <ruleId>`.
A review is an advisory AI analysis of a package version (`wl review`). Its findings have a category (bug, security or improvement), a severity and a source: the secret scan, which is ground truth, or the model, which is advisory. A review never approves or blocks a version.
More features
All features →- 01
Organization packages
Scoped, immutable packages of skills, agents, prompts and configs, owned by your org.
- 02
Workspace desired state
Each workspace declares which packages, versions and providers every target gets.
- 03
Provider rendering
Assets become each provider’s native files, from a deterministic render plan.