What the product does
It retrieves an exact published artifact, performs static analysis without launching extension code, and records findings, coverage, artifact identity, scanner build, and ruleset.
Guardrails is an independent security product for evaluating IDE extensions before installation and following their published releases afterward.
It retrieves an exact published artifact, performs static analysis without launching extension code, and records findings, coverage, artifact identity, scanner build, and ruleset.
Public reports expose the version and SHA-256 boundary. The validation study publishes its corpus, regression results, corrections, and claim limitations.
Guardrails does not claim that every allowed extension is safe, that a capability proves malware, or that the development benchmark measures ecosystem-wide accuracy.
No account is required to inspect public extension reports or validation evidence.