Skip to content
Jonathan D.A. Jewell edited this page Mar 24, 2026 · 1 revision

FAQ

What is the Safety Triangle?

The Safety Triangle is a prioritisation framework borrowed from industrial safety:

  1. Eliminate — remove the hazard entirely (best)
  2. Substitute — replace with something safer
  3. Control — add safeguards around the hazard (least preferred)

What are the confidence tiers?

  • ≥0.95: Auto-execute via robot-repo-automaton
  • 0.85–0.94: Create PR for review via rhodibot
  • <0.85: Advisory report via sustainabot

How do I add a new scanner rule?

See lib/pattern_registry.ex for the pattern ID system. Add your pattern ID to the @canonical_ids map, then add detection logic to poc-scanner.sh or the Rust CLI scanner.

Where is data stored?

In verisimdb-data — a git-backed flat-file store. VQL queries execute against these files via lib/vql/file_executor.ex.

Clone this wiki locally