CODE ZERO — Find Patient Zero in Your Codebase

CODE ZERO is an open-source, AI-powered regression investigation platform that treats software regressions like infections. Import a GitHub repository and CODE ZERO:

• ranks suspicious commits using transparent, evidence-linked risk signals (AST, heuristic and metadata factors);
• traces potential spread through a function-level dependency graph built from the TypeScript compiler AST (the Infection Map);
• lets Gemma 4 explain the evidence with Zod-validated, citation-checked output — root cause, why a commit was flagged, semantic diff, impact, tests, fixes and alternative hypotheses, plus a streaming investigation chat;
• previews treatments (minimal Gemma fix, deterministic revert, preventive regression tests), verifies them on the controlled demo, and exports a full investigation report (Markdown / JSON / PDF).

Modules: Mission Control, Time Portal (five investigation modes with live SSE progress), Temporal Timeline, Breakage Detector, Timeline Divergence (Monaco diffs), Infection Map, Gemma Intelligence, Restore Lab, Investigation Reports, Repository Health, Saved Investigations, ⌘K command palette.

Honesty rules built in: risk scores are heuristics, never probabilities; every finding cites commit SHA, file, line and snippet; evidence IDs the model invents are stripped and flagged; prerecorded analysis is labeled PRERECORDED; imported code is never executed; patches are UNVERIFIED until a verification run passes.

Demo: a built-in TypeScript checkout service (orbit-checkout, 11 commits) where commit 6 silently removes coupon-expiry filtering, percentage validation and the 60% stacking cap — with realistic decoys — so the whole pipeline runs without GitHub or Gemma.

Stack: React 19, Vite, Tailwind v4, React Flow, Monaco, Recharts (web); Fastify, Octokit, better-sqlite3, Zod (API); TypeScript compiler AST analysis. Gemma 4 runs locally via Ollama or through the Gemini API (gemma-4-26b-a4b-it). Apache-2.0.