Renatus · audit-grade LLM code changes

Four agents, one engine, signed audit.

Renatus runs migrations, refactors, security audits, and codebase Q&A on the same cartographer → surgeon → examiner → auditor pipeline. Every run emits an append-only event log. The Auditor signs the report with an ed25519 key — anyone with the public key (returned with the report) can verify the bytes weren't tampered.

Run an agent

Install as an MCP server

Renatus is also a Model Context Protocol server — drop the snippet below into your Bob, Claude Code, or Cursor MCP config and the four tier-1 tools (migrate_repository, refactor_repository, security_audit_repository, query_codebase) show up alongside your other tools.

{
  "mcpServers": {
    "renatus": {
      "command": "npx",
      "args": ["-y", "@renatus/mcp-server"],
      "env": {}
    }
  }
}

Public key & signature

Renatus generates a fresh ed25519 keypair per job. The private key stays on the server (encrypted with RENATUS_KEK when configured); the public key is embedded in the signed report and surfaced at /audit/[jobId]. Verify locally with /verify or click Verify signature on any audit page — the widget re-canonicalizes the report, recomputes the SHA-256 hash, and runs ed25519 in the browser.