Public Documentation
Linmas is an open-source defensive security review toolkit designed for AI-assisted software development. It provides specialized skills, deterministic policy evaluation, and portable Review Capsules to help developers and teams review code changes, understand findings, and verify remediation before shipping.
Linmas is strictly defensive. Every review produces structured evidence and remediation guidance, but human review remains required. Linmas never provides automatic security approval or certification.
Documentation Topics
Getting Started
Understand what Linmas is, system requirements, host compatibility, and how to run your first review.
Installation
Install via npm, GitHub source checkout, or the Codex plugin marketplace.
Review Workflow
The 5-step defensive lifecycle: Scope → Route → Review → Remediate → Verify.
Review Capsule
Inspect portable, cryptographically bound evidence of what was evaluated and decided.
Safety Boundaries
Understand defensive scope, offline fixtures vs live reviews, and data transmission boundaries.
Skills Catalog
Explore all 11 canonical security skills across application, architecture, cloud, and operations.
Quick Reference
| Topic | Summary | Canonical Source |
|---|---|---|
| Current Release | 0.8.0 (v0.8.0) | GitHub Releases ↗ |
| Runtime | Node.js 24+ | USAGE.md ↗ |
| License | Apache-2.0 | LICENSE ↗ |
| Security Policy | Defensive, responsible disclosure | SECURITY.md ↗ |