Submission complete — here's what to look at
The full demo is live on GitLab. Here are the key moments worth checking directly:
Gate blocking a deployment — pipeline 2986374679: the deploy job log shows the gate reading the evidence artifact, verifying SHA consistency, finding a High-severity SAST finding, and printing DEPLOYMENT BLOCKED — gate check failed. The gate runs on every pipeline via demo:gate-reject (allow_failure: false) so a policy regression breaks CI immediately.
Duo agent sessions — session 9983023 (Developer Flow code review, 6 findings) and session 9983798 (Developer Flow pushed hardening commit with SSRF blocking and 7 new tests).
SAST before/after — pipeline 2982447548: 2 High findings. Latest main: 0 findings.
Automatic Code Review Flow — MR !4: triggered automatically on MR creation, no human action required.
179 tests pass. The repo is MIT-licensed and public.
Log in or sign up for Devpost to join the conversation.