Back to inline

The rest of it, on the same rail

The pull request is where inline starts. The same repositories, the same models and the same console also cover what happens around the code: the cloud it runs on, the pipeline that ships it, the errors it throws, the prompts inside it, and the vendors it talks to.

Cloud and
pipeline

Azure posture, health and spend, collected through a single Cloud Shell script that stores no customer secrets. GitHub Actions runs ingested and triaged: what failed, what is flaky, and what got slower this week.

Cloud postureAzure · 2 subscriptions
Findings

37

P1

3

Spend / mo

$18.4k

Storage account allows public blob access
prd-rg · sainlineprd
P1
SQL server has no private endpoint
prd-rg · scu-prd-sql1
P1
Key vault soft-delete purge unprotected
dev-rg · kv-inline-dev
P2
App Service running an unsupported runtime
dev-rg · scudevinline
P3
CI alertsGitHub Actions
Failing

2

Flaky

5

p95 build

6m 12s

e2e-chrome times out waiting for the login form
acme/web · main · failed 4× today
flaky
Docker build fails on the arm64 leg
acme/ledger · release/prod
failing
Integration suite got 3m slower this week
acme/payments-api · main
duration
Cache restore misses on every PR run
acme/mobile · pull_request
cost

Runtime errors,
rooted in the code

An SDK ships errors in; triage groups and prioritises them; then a repo-grounded pass points at the release commit, finds the offending line, and writes the patch using the same read-only tools the reviewer uses.

Issuesacme-web · production
Unresolved

12

Events 24h

8,104

Users

431

TypeError: cannot read 'tenantId' of null
1,204 events · 88 users · P1
root cause
AbortError: signal is aborted without reason
612 events · 140 users · P2
regressed
PrismaClientKnownRequestError P2002
88 events · 12 users · P2
triaged
ChunkLoadError: loading chunk 42 failed
41 events · 39 users · P4
noise
Pentest findingsacme/payments-api · validated
Validated

4

Candidates

23

Run cost

$3.14

IDOR on GET /v1/charges/:id
tenant scope missing · PoC proven in sandbox
critical
Prompt injection via the PR title
reaches the review tool loop
high
Rate limiter keyed on a spoofable header
X-Forwarded-For trusted directly
high
Verbose stack traces in 500 responses
leaks file paths and query text
medium

Prompts and
vendors

inline discovers the LLM prompts in your repository and grades them against synthesized rubrics and adversarial cases. It also watches which vendors receive protected data and whether an agreement covers them.

Prompt evals7 prompts discovered
Graded

142

Mean

3.8/5

Failing

9

review/system-prompt.ts
48 cases · faithfulness 4.4 · safety 4.9
4.6
triage/classify.ts
31 cases · precision 3.1 on edge inputs
3.4
walkthrough/layers.ts
24 cases · ordering drifts on big diffs
3.9
memory/distill.ts
39 cases · no adversarial failures
4.4
ComplianceBAA coverage
Vendors

65

Uncovered

4

Expiring

2

Analytics SDK receives PHI in event props
no agreement on file
uncovered
Transcription API called from the intake service
BAA expires in 21 days
expiring
Email provider handles member names
BAA countersigned 2026-02-11
covered
Error tracker scrubs PHI before send
reviewed, no PHI leaves the process
covered

Included

One consoleevery surface on the same rail, gated by the same permissions
Same modelscheap triage everywhere, deep passes only where they earn it
Cost accountingevery automated action priced, per model and per workspace
Opt-in per areanothing runs until you turn it on

Put it on one repository

Connect GitHub, enable a repo, and the next pull request opened gets a review.