Trust center
The honest boundary of a local-first workbench, written down.
Projects open locally in the browser. Source is never uploaded, proxied, or analyzed on a server.
The dependency review reads your files and lists remote references. It installs nothing and fetches nothing.
Quality gates report pass/fail with the failing detail attached. A passing release is one whose checks executed - not a feeling.
CodeForge does not run a dev server, execute your JavaScript, or deploy. It proves the static site you hand it.
No analytics SDKs, no session recording, no third-party pixels.
Checkpoints and results live in browser storage. Clearing site data removes them completely.
Reproducible
Because every check is static and local, the same source always produces the same verdicts. Evidence that cannot be reproduced is not evidence.