AI infrastructure
for development teams.
Memory. Guardrails. Knowledge.

// Friday 11pm — critical production incident
vault_save({
  type: "incident",
  title: "Race condition in payment processor",
  content: "Two concurrent requests can double-charge.
  Fix: Redis distributed lock on payment_id.
  LOCK:payment:{id} with 30s TTL — always."
})

// 9 months later, new dev opens payments.ts:
vault_context("payments")
// → AI: "A past incident shows race conditions
//   here. Use distributed locking on payment_id
//   or you risk double-charging customers."
// Saved: 3-day debugging session, $12k incident

$ git commit -m "feat: user authentication"

Running Korva Sentinel...
  ✓ NAM-001  Naming conventions
  ✓ TEST-001 No debug logs in production
  ✗ SEC-001  Hardcoded secret detected
  ✗ SEC-003  Timing attack vulnerability
  ✗ ARC-002  HTTP handler in domain layer

  src/auth/AuthService.ts:14
  const secret = "sk_live_4xK9mP..."
                  ^^^ Use process.env.JWT_SECRET

  src/auth/AuthService.ts:31
  if (user.token === inputToken)
      ^^^ Use crypto.timingSafeEqual()

3 critical issues. Commit blocked.

// You open: src/payments/checkout.ts
// Korva detects context: payments + stripe

📜 stripe-webhooks  Idempotency keys required
📜 pci-dss          Never log card numbers or CVV
📜 decimal-math     Use Decimal.js — never floats
📜 retry-patterns   Exponential backoff on 429s

// AI already knows, without explanation:
"I'll implement checkout using Stripe's
idempotency keys to prevent duplicate charges,
Decimal.js for all monetary amounts to avoid
float precision bugs, and structured logging
that filters out any card data automatically."

vault_sdd_phase({ project: "payments" })
// → phase: "apply"  step: 6/9

vault_qa_checklist({ phase: "apply", language: "typescript" })
// → 22 quality criteria loaded

// ... implement feature ...

vault_qa_checkpoint({ project: "payments",
  phase: "apply", status: "pass",
  score: 87, gate_passed: true,
  findings: [{ rule: "TS-APP-001", status: "pass" }]
})
// → "Gate unlocked. apply → verify allowed."

vault_sdd_phase({ project: "payments", phase: "verify" })
// → Phase advanced ✓

// Beacon — React 19 dashboard at localhost:7437

[Vault Explorer]  projects: 3  obs: 1,247

▸ payments    89 obs   last: 2h ago   sdd: apply
▸ auth        34 obs   last: 4d ago   sdd: verify
▸ user-api    23 obs   last: 1w ago   sdd: archive

[Session Timeline — payments]
12:41  vault_context("payments") → 89 obs loaded
12:42  vault_save — incident: double-charge fix
12:55  vault_qa_checkpoint → gate unlocked ✓
13:10  vault_sdd_phase("verify") → advanced ✓

[Lore Manager]
● stripe-webhooks   active  ✓ idempotency loaded
● pci-dss           active  ✓ compliance loaded
● decimal-math      active  ✓ precision loaded

vault_context({ project: "payments" })
// → hybrid result in 142ms

{
  context: [              // local SQLite
    { type: "incident",
      title: "Race condition in payment processor",
      source: "local" },
    { type: "decision",
      title: "CQRS: no direct DB in controllers",
      source: "local" }
  ],
  hive_context: [         // community brain
    { title: "Decimal.js for monetary amounts",
      source: "hive", score: 0.94 },
    { title: "Webhook dedup via idempotency table",
      source: "hive", score: 0.87 }
  ],
  hive_status: "ok",
  sdd_phase:   "apply"
}