What the product does
It retrieves an exact published artifact, performs static analysis without launching extension code, and records findings, coverage, artifact identity, scanner build, and ruleset.
Extension intelligence built around exact evidence.
Guardrails is an independent security product for evaluating IDE extensions before installation and following their published releases afterward.
What can be verified
Analysis Reports expose the version and SHA-256 boundary. The validation study publishes its corpus, regression results, corrections, and claim limitations.
What is not claimed
Guardrails does not claim that every allowed extension is safe, that a capability proves malware, or that the development benchmark measures ecosystem-wide accuracy.
Evaluate the evidence
Open Extension Registry Start with a public artifact.
No account is required to inspect the Extension Registry or validation evidence.