Furnace reads your AI-built app and lists what's unsafe before launch: open routes, missing login checks, leaked keys, unprotected database tables. Fixed rules, no AI guessing. Your code stays on your machine.