// CONTEXT-AWARE CODE REVIEW · VERIFIED FIXES · HUMAN APPROVAL

The code reviewer that
reads the whole story.

KIO reviews every pull request with the code around it, proves each fix in a sandbox, and never changes your repository without you.

$0 infrastructure per month.
FREE TIER
9 verification stages per fix.
PIPELINE
≤12K context tokens per review.
CONTEXT ENGINE
0 auto-commits, ever.
APPROVAL GATE

// PLATFORM

Everything a review needs.
Nothing it doesn't.

One platform for engineering teams and open-source contributors: repository intelligence, context-aware review, verified fixes, docs and weekly reports - all behind one approval gate.

  ┌───────┐
  │ ◉ ◎ ○ │
  │ ◎ ◉ ◎ │
  │ ○ ◎ ◉ │
  └───────┘

Context Engine

Every changed file is reviewed with its tests, imports, dependents, models and routes - chosen by a deterministic graph, budgeted to ~12K tokens.

  │  ▄ 
  │▁ ▄ █ ▄
  │█ █ █ █
  └────────

Functional Issue Detection

Findings carry severity, file, line, what / where / why / impact and the files used as evidence. Thin evidence is labelled, never asserted.

  ┌─┐   ┌─┐
  │F├──►│V│
  └─┘   └┬┘
        ┌▼┐
        │✓│
        └─┘

Verified Fixes

Patch validation, static checks, baseline tests, regression check and AI re-review before a deterministic verdict: PASS, PARTIAL, FAIL or NEEDS MANUAL.

   ╔═══╗
   ║ ◈ ║
  ┌╨───╨┐
  │░░░░░│
  └─────┘

Human Approval Gate

Reviews stay drafts until you approve. Patches are diffs you apply. No code path commits, pushes or opens a pull request.

    .--.
   /    \
  | (  ) |
   \    /
    '--'

Open-Source Explorer

Paste a public repo URL: mind map, difficulty-tagged issues and step-by-step contribution guidance. No account needed.

  POST /api/pr
  ────────►
  ◄────────
  { findings }

API First

Every capability is a documented endpoint with a consistent error envelope. OpenAPI generated from the code, at /docs.

// HOW IT WORKS

Three steps from
repo to verified fix.

review.ts
1// connect a repository
2await kio.post('/api/repos', {
3 github_repo_id: 1002
4})
Ready

// ENGINEERING BUDGETS

Numbers we design
against, not after.

free-tier by design|--:--:--
<0s
AI review turnaround
P95 target, typical diff
<0s
Mind map render
public repos under 10k files
<0ms
Non-AI API routes
P95 target
>0%
Weekly report success
scheduled jobs
Review pipeline · example trace
nowPOST /api/pr/reviewpr #412 · 3 findings20041s
1sPOST /api/pr/fixfinding HIGH · patch 9f3c120112s
2sPOST /api/pr/verify9 stages · verdict PASS20058s
3sGET /healthzdatabase ok · redis ok2008ms

// CONNECTOR ROADMAP

One approval gate.
Every tool.

GitHub is live. Every later connector sits behind the same interface and the same explicit-approval rule - a connector never gains write access on its own.

  ╔═╗
  ║<║
  ╚═╝

GitHub

repos, PRs, issues

live

  ┌─┐
  │#│
  └─┘

Slack

reports, notifications

planned

  ▲
  ─

Vercel

deploy status

planned

  [≡]
  [≡]

Jira

tickets as context

planned

  ◈◈
  ◈◈

Linear

tickets as context

planned

  {N}
  ---

Notion

publish docs

planned

  ≋≋
  ≋≋

Sentry

errors as evidence

planned

  [█]
  [█]

GitLab

explorer

planned

Need another connector?

Each connector implements connect(), sync() and an optional notify(). It enriches existing features - tickets as review context, deploy status in reports - instead of adding parallel ones.

See the API
// Example: notify a channel
await kio.notify({
channel: "#eng-reviews",
event: "fix.verified",
verdict: "PASS"
}); // notify only - never a write to your repo

// SECURITY BY DESIGN

Built like it will be audited.

Security boundaries are invariants, not settings. Where a feature and a security rule conflict, the security rule wins.

  ╔═══╗
  ║ ◈ ║
  ╚═══╝

Tokens encrypted at rest

GitHub tokens are Fernet-encrypted, never logged, never sent to a model, never reach the browser

  ┌───┐
  │ ✓ │
  └───┘

Clerk-verified sessions

Every authenticated request carries an RS256 JWT verified against the tenant JWKS

  ╭───╮
  │ ▣ │
  ╰───╯

Sandboxed verification

Only the repository's own test command runs, in an ephemeral workspace with an empty environment

  [===]
  [===]

Human approval gate

No code path commits, pushes or opens a PR - the capability does not exist

  ▪ ▪ ▪
  ▪ ▪ ▪

Audit logs

Every approval, verification and integration change is recorded with actor and timestamp

  ◉─◉─◉
  │ │ │

Deterministic verdicts

PASS / FAIL decided by rules over evidence - never by a model's confidence score

Engineering guarantees

Enforced in code and covered by tests - not claims on a slide

Fernetat rest
Empty envsandbox
0auto-commits
$0per month
🔒

AI output is untrusted by default

Every model response is validated against a schema, hallucinated file paths are dropped before you see them, and every AI-generated artifact stays labelled until a human approves it.

// FOR DEVELOPERS

An API you can read
in one sitting.

Routers are I/O only, services hold the logic, and every capability is a plain HTTP endpoint you can call from anything.

OpenAPI from the code

Every endpoint documented at /docs. Shapes are stable; breaking changes go to /api/v2.

One error envelope

{ error: { code, message, details } } with proper status codes. 503s carry Retry-After.

Async by contract

Anything that may exceed 10s returns 202 + job id. Poll job status; never block.

Deterministic verdicts

Same evidence, same verdict. No model confidence ever decides PASS or FAIL.

1// generate a review draft for a PR
2const res = await fetch(`${KIO}/api/pr/review`, {
3 method: 'POST',
4 headers: { Authorization: `Bearer ${clerkToken}` },
5 body: JSON.stringify({ repo_id, pr_number: 412 })
6})
7const { review_id, status } = await res.json()
8// status: 'draft' - nothing is posted until you approve
$curl -s $KIO/healthz
{"status":"ok","checks":{"database":"ok","redis":"ok","clerk":"configured"}}
OpenAPI at /docs|Python 3.12 · FastAPI · Next.js 15

// GET STARTED

Review with context. Ship with proof.

Free to run, built on free tiers, and never changes your repository without you.

Start free

No credit card. No trial. $0.