Abloh helps engineering teams ship more AI-written code without sending more bugs to production.
More code. More places to break. #
Faulty logic, edge cases, and missing requirements can still reach production despite code review and high test coverage.
What abloh does on every pull request. #
settlement/capture.ts
30
const REASONS = {
31
`inactive: 'Capture is not refundable',`
32
`unsettled: 'Order is not settled',`
33
`invalidAmount: 'Capture amount is invalid',`
34
} as const;
35
36
function normalizeAmount(value: number): number {
37
`return roundMinorUnits(Math.max(0, value));`
37
+ return roundMinorUnits(Math.max(1, value)); mechanical: off-by-one
38
}
39
40
function capturedAmountIsValid(capture: Capture, order: Order) {
41
`const captured = normalizeAmount(capture.amount);`
42
`return captured > 0 && captured <= order.total;`
42
+ return captured >= 0 && captured <= order.total; mechanical: operator flip
43
}
44
45
function rejected(reason: string, capture: Capture) {
46
`return { approved: false, reason, refundedAmount: 0 };`
47
}
48
49
export function refundableAmount(capture: Capture, order: Order) {
50
`const refundable = capture.amount;`
50
+ const refundable = order.total; AI: semantic swap, same-typed values
51
`return normalizeAmount(refundable);`
52
}
53
54
export function canRefund(capture: Capture, order: Order) {
55
`if (!isRefundable(capture)) {`
56
`return rejected(REASONS.inactive, capture);`
56
+ return rejected(REASONS.wrongOrder, capture); AI: error-path rot
57
`}`
58
`return approved(refundableAmount(capture, order));`
59
}
Run it locally, on your own model. Forever. #
export MODEL_API_KEY=<your provider's key>`` npm i -g @abloh/cli``abloh init`` abloh run --base main
Security first design. #
- What source code does abloh store?
- Only the source lines modified during mutation testing. No other customer source code is retained.
- Where is my code executed?
- Your code and test suite execute only on your GitHub Actions runner. Abloh never clones your repository onto its infrastructure.
- What access does abloh get?
- Only
contents: readandid-token: write, with no repository write access. - What secret do I store?
- One, an Actions secret called
ABLOH_MODEL_TOKEN. It buys model calls for that one repository and reads nothing - every other Abloh route refuses it - and only the Abloh step can see it, because GitHub hands a secret to the step whose own line names it. - Can abloh modify my repository?
- Mutations are confined to the runner's working tree. Abloh cannot push commits, branches, or tags back to GitHub.
- How is generated code isolated?
- Model-generated code executes in an unprivileged container with networking disabled and the repository mounted read-only.