the machines write the code now. swain watches what they write.
one command before you ship, local AI security review using the claude and codex CLIs you already have. no new accounts. no SaaS. no dashboard.
catches auth bugs, billing bypasses, hardcoded secrets, SQL injection, XSS. ends with one thing: the exact issue blocking your launch and the exact command to fix it.
nothing the machine writes passes unseen.
