ablohShip more code. Not more bugs.
Abloh helps engineering teams ship more AI-written code without sending more bugs to production.
More code. More places to break.
Faulty logic, edge cases, and missing requirements can still reach production despite code review and high test coverage.
What abloh does on every pull request.
settlement/capture.ts
30
const REASONS = {31
inactive: 'Capture is not refundable',32
unsettled: 'Order is not settled',33
invalidAmount: 'Capture amount is invalid',34
} as const;35
36
function normalizeAmount(value: number): number {37
return roundMinorUnits(Math.max(0, value));37
+ return roundMinorUnits(Math.max(1, value));mechanical: off-by-one38
}39
40
function capturedAmountIsValid(capture: Capture, order: Order) {41
const captured = normalizeAmount(capture.amount);42
return captured > 0 && captured <= order.total;42
+ return captured >= 0 && captured <= order.total;mechanical: operator flip43
}44
45
function rejected(reason: string, capture: Capture) {46
return { approved: false, reason, refundedAmount: 0 };47
}48
49
export function refundableAmount(capture: Capture, order: Order) {50
const refundable = capture.amount;50
+ const refundable = order.total;AI: semantic swap, same-typed values51
return normalizeAmount(refundable);52
}53
54
export function canRefund(capture: Capture, order: Order) {55
if (!isRefundable(capture)) {56
return rejected(REASONS.inactive, capture);56
+ return rejected(REASONS.wrongOrder, capture);AI: error-path rot57
}58
return approved(refundableAmount(capture, order));59
}Run it locally, on your own model. Forever.
export MODEL_API_KEY=<your provider's key>npm i -g @abloh/cliabloh initabloh run --base mainSecurity first design.
- What source code does abloh store?
- Only the source lines modified during mutation testing. No other customer source code is retained.
- Where is my code executed?
- Your code and test suite execute only on your GitHub Actions runner. Abloh never clones your repository onto its infrastructure.
- What access does abloh get?
- Only
contents: readandid-token: write, with no repository write access. - What secret do I store?
- None. Each job authenticates through GitHub OIDC, so no Abloh API key is stored in GitHub Secrets.
- Can abloh modify my repository?
- Mutations are confined to the runner's working tree. Abloh cannot push commits, branches, or tags back to GitHub.
- How is generated code isolated?
- Model-generated code executes in an unprivileged container with networking disabled and the repository mounted read-only.