gitgalaxy 2.0.3__tar.gz → 2.0.7__tar.gz

gitgalaxy-2.0.7/.github/ISSUE_TEMPLATE/parsing_discrepancy.yml

@@ -0,0 +1,50 @@
+name: 🐛 Report a Parsing/blAST Discrepancy
+description: Report an issue where the blAST engine misidentified or failed to parse a repository structure.
+title: "[Bug]: "
+labels: ["bug", "triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for taking the time to report a discrepancy! Please provide the context we need to reproduce the issue.
+  - type: input
+    id: repo_link
+    attributes:
+      label: Repository Link
+      description: Provide a link to the public repository you were scanning (e.g., GitHub, GitLab URL).
+      placeholder: https://github.com/torvalds/linux
+    validations:
+      required: true
+  - type: dropdown
+    id: viewer_used
+    attributes:
+      label: Which Observatory viewer were you using?
+      description: Help us identify if this is a backend parsing issue or a frontend visual constraint.
+      options:
+        - GitGalaxy.io (Web Viewer)
+        - Airgap Observatory (Local Server)
+        - CLI Only (Did not use a visualizer)
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Description of the Discrepancy
+      description: What did GitGalaxy report, and what should it have been? (e.g., "Flagged X files as Python, but they are actually Cython.")
+    validations:
+      required: true
+  - type: textarea
+    id: custom_standards
+    attributes:
+      label: Custom standards.py (If Applicable)
+      description: If you are using a custom `standards.py`, please paste its contents here, or drag and drop the file into this box.
+      render: python
+    validations:
+      required: false
+  - type: input
+    id: contact
+    attributes:
+      label: Contact Info
+      description: An email or Discord handle where we can reach you if we have questions about this specific codebase.
+    validations:
+      required: false

gitgalaxy-2.0.7/.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  # 1. Keep GitHub Actions up to date
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "security"
+      - "github-actions"
+
+  # 2. Keep Python dependencies up to date
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "security"
+      - "python"

gitgalaxy-2.0.7/.github/pull_request_template.md

@@ -0,0 +1,9 @@
+### Description of Structural Changes
+### Visual Observatory Testing
+- [ ] I tested the output JSON on **GitGalaxy.io** OR the **Airgap Observatory**.
+- [ ] Flexbox constraints, HUD elements, and 3D rendering remain intact.
+
+### The Differential Scan Acknowledgement
+- [ ] I understand that my PR will be subjected to a Full Differential Scan.
+- [ ] I have provided the link to the specific repository this PR addresses so it can be tested alongside the 80-repo calibrated baseline.
+- [ ] I believe these changes will measurably improve the engine's Accuracy, Speed, Utility, or Ethos without causing regressions.

gitgalaxy-2.0.7/.github/workflows/codeql.yml

@@ -0,0 +1,40 @@
+name: "CodeQL Security Scan"
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+  schedule:
+    - cron: '0 12 * * 1' # Runs every Monday at 12:00 UTC
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: ${{ matrix.language }}
+        # If you have specific queries you want to run, you can specify them here.
+        # "security-extended" adds deeper vulnerability hunting.
+        queries: security-extended,security-and-quality
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3
+      with:
+        category: "/language:${{matrix.language}}"

gitgalaxy-2.0.7/.github/workflows/publish.yml

@@ -0,0 +1,40 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  pypi-publish:
+    name: Build and Publish to PyPI
+    runs-on: ubuntu-latest
+    
+    # This matches the environment name you set in PyPI
+    environment:
+      name: pypi
+      url: https://pypi.org/p/gitgalaxy
+
+    # This specific permission is REQUIRED for Trusted Publishing
+    permissions:
+      id-token: write
+      contents: read
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      with:
+        fetch-depth: 0  # <--- ADD THIS so it downloads your Git tags!
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.10"
+
+    - name: Install build tools
+      run: python -m pip install --upgrade pip build
+
+    - name: Build the wheel and source distribution
+      run: python -m build
+
+    - name: Publish package to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1

gitgalaxy-2.0.7/.github/workflows/smoke-test.yml

@@ -0,0 +1,66 @@
+name: GitGalaxy Smoke Tests
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  smoke-test:
+    runs-on: ${{ matrix.os }}
+    env:
+      PYTHONUTF8: "1" # <--- FIX 1: Forces Windows to render emojis without crashing
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.9", "3.10", "3.11", "3.12"]
+        
+    steps:
+    - name: Check out repository code
+      uses: actions/checkout@v6
+
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v6
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Install macOS dependencies (OpenMP for XGBoost)
+      if: runner.os == 'macOS'
+      run: brew install libomp
+
+    - name: Install dependencies
+      shell: bash
+      run: |
+        python -m pip install --upgrade pip setuptools wheel
+        if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+        pip install PyYAML networkx tiktoken pandas xgboost pytest flake8
+        pip install --no-build-isolation -e . # <--- FIX 2: Bypasses the pip build bubble
+        
+    - name: Global Syntax Sweep (Flake8)
+      run: |
+        flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
+
+    - name: Smoke Test - Core Engine
+      # Using the -m flag is the safest way to run modules inside a package
+      run: python -m gitgalaxy.galaxyscope --help
+
+    - name: Smoke Test - Legacy Refractor Controller
+      run: python -m gitgalaxy.cobol_refractor_controller --help
+
+    - name: Smoke Test - Java Spring Forge Controller
+      run: python -m gitgalaxy.cobol_to_java_controller --help
+
+    - name: Smoke Test - SBOM Generator
+      run: python -m gitgalaxy.tools.compliance.sbom_generator --help
+
+    - name: Smoke Test - Supply Chain Firewall
+      run: python -m gitgalaxy.tools.supply_chain_security.supply_chain_firewall --help
+
+    - name: Smoke Test - API Network Map
+      run: python -m gitgalaxy.tools.network_auditing.full_api_network_map --help
+
+    - name: Golden Record Integration Test (Pytest)
+      run: |
+        pytest tests/ -v

gitgalaxy-2.0.7/.gitignore

@@ -0,0 +1,73 @@
+# ==========================================
+# SECURITY / SECRETS (CRITICAL)
+.env
+.env.*
+*.pem
+*.key
+
+# PYTHON, FLASK & VIRTUAL ENVIRONMENTS
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+venv/
+env/
+.venv/
+flask_session/
+
+# PYPI PACKAGING & BUILD ARTIFACTS
+build/
+dist/
+*.egg-info/
+
+# TESTING & LINTING (NEW)
+.coverage
+htmlcov/
+.mypy_cache/
+
+# LOGS & DATABASES
+*.log
+gitgalaxy_dropped_orders.log
+*.sqlite3
+*.sqlite3-journal
+
+# FRONTEND & NODE
+node_modules/
+tailwindcss
+
+# OS & EDITOR FILES
+.DS_Store
+Thumbs.db
+.vscode/
+.idea/
+*.swp
+*~
+*.bak
+.~lock.*
+
+# PROJECT-SPECIFIC SCRIPTS & DRAFTS
+get_ids.py
+get_shop.py
+histogram_matcher.py
+archive/
+*.odt
+
+# GITGALAXY HEAVY DATA
+data/
+museum/
+museum_2/
+*.json
+*_llm.md
+venvs/
+
+# Local data mounts
+data/
+museum/
+docs_build/
+updated_results/
+utilities/
+# Ignore local data symlinks
+site/museum/
+museum/
+updated_results_expanded_story/
+updated_results_2/

gitgalaxy-2.0.7/CONTRIBUTING.md

@@ -0,0 +1,63 @@
+# Contributing to GitGalaxy
+
+First off, thank you for considering contributing to GitGalaxy! The blAST engine is essentially a tunable scientific instrument, and calibrating it across the vast ecosystem of open-source software requires a community effort.
+
+Whether you are reporting a taxonomic discrepancy, refining the parsing engine, or expanding the documentation, your input helps map the structural DNA of software more accurately.
+
+## 🧬 The blAST Philosophy
+
+Before diving in, please remember that GitGalaxy treats code as a living organism. The blAST engine evaluates structural logic and behavioral genetic markers, not just rigid syntax. 
+
+Sometimes, what appears to be a traditional parsing error might actually be blAST intentionally flagging a structural anomaly or a dense risk exposure. Please keep this in mind when reporting issues or proposing changes to the sequencing algorithms.
+
+---
+
+## 🔬 The Differential Scan (How We Review Pull Requests)
+
+We do not merge structural backend changes based solely on subjective code review. GitGalaxy operates at hyper-scale, and every change to the parsing logic has cascading effects.
+
+When you submit a Pull Request that alters the blAST engine, your candidate changes will be subjected to a **Full Differential Scan**. 
+
+* **The Control + Variable Test:** We run your branch against our calibrated baseline of ~80 massive open-source repositories, **plus** the specific repository your PR is designed to address.
+* **Before and After:** We perform a strict comparison of the engine's output before and after your rule update across this entire dataset (80 + 1). This ensures your addition resolves the target discrepancy without degrading the established baseline.
+* **The Metrics:** The output is assessed strictly on four vectors: **Accuracy, Speed, Utility, and Ethos.**
+* Only changes that are mathematically and practically *measurably better* across the broader ecosystem will be incorporated.
+
+---
+
+## 🛠️ Submitting Pull Requests
+
+To ensure your contribution integrates smoothly into the blAST ecosystem:
+
+1. **Fork and Branch:** Create a feature branch from `main` (`git checkout -b feature/your-feature-name`).
+2. **Maintain the Contract:** Ensure that any backend changes to the CLI do not break the universal JSON contract expected by the frontend Observatory. 
+3. **Test Visually:** Run your newly generated `_galaxy.json` through either **[GitGalaxy.io](https://gitgalaxy.io)** or your local **Airgap Observatory** to verify that visual rendering and flexbox constraints remain intact. Whichever is more convenient for you is fine.
+4. **Document:** If you are adding new language phenotypes or altering the parsing logic, please update the Taxonomical Equivalence Map in the wiki.
+5. **Submit:** Open a PR with a clear title. Explain the *why* behind your structural changes, not just the *what*. Be sure to include the link to the target repository so we can include it in the Differential Scan.
+
+---
+
+## 🐛 Reporting Discrepancies
+
+If the galaxyscope misidentifies a repository's structure or fails to parse a specific file phenotype, please use our **[Parsing Discrepancy Form](https://github.com/squid-protocol/gitgalaxy/issues/new/choose)**. 
+
+To help us reproduce the issue with quantitative precision, you will be asked to provide:
+* A direct link to the public repository being scanned.
+* The Observatory viewer you were using (GitGalaxy.io or Airgap Observatory).
+* A clear description of the expected vs. actual output.
+* The contents of your custom `standards.py` file (if applicable).
+* Contact information for follow-up questions.
+
+---
+
+## 🛡️ Security Vulnerabilities
+
+If you discover a vulnerability within GitGalaxy itself (e.g., a way to bypass the local sandbox or an issue in the Airgap Observatory), **do not open a public issue.** Please reach out directly via the contact portal at [GitGalaxy.io](https://gitgalaxy.io) so the vulnerability can be patched securely before public disclosure.
+
+---
+
+## 📜 Licensing Reminder
+
+GitGalaxy is released under the **PolyForm Noncommercial License 1.0.0**. By contributing to this repository, you agree that your contributions will be licensed under these same terms. 
+
+*Note: This tool is free for research, education, testing, and hobby projects. Any commercial use or integration into commercial SaaS products or corporate CI/CD pipelines requires a separate commercial license.*

{gitgalaxy-2.0.3/gitgalaxy.egg-info → gitgalaxy-2.0.7}/PKG-INFO

@@ -1,8 +1,8 @@
 Metadata-Version: 2.4
 Name: gitgalaxy
-Version: 2.0.3
-Summary: An AST-free, zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
-Author: Joseph Michael Esquibel
+Version: 2.0.7
+Summary: An AST-free, LLM-free zero-trust static analysis engine for mapping architectural risk, securing CI/CD pipelines, and modernizing legacy monoliths.
+Author: Joe Esquibel
 Project-URL: Homepage, https://gitgalaxy.io
 Project-URL: Documentation, https://squid-protocol.github.io/gitgalaxy/
 Project-URL: Source, https://github.com/squid-protocol/gitgalaxy
@@ -16,7 +16,7 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Classifier: Topic :: Scientific/Engineering :: Visualization
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: Information Technology
-Requires-Python: >=3.8
+Requires-Python: >=3.9
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Dynamic: license-file
@@ -38,32 +38,36 @@ Dynamic: license-file
 [![Zero Dependencies](https://img.shields.io/badge/Dependencies-0-brightgreen.svg)](https://pypi.org/project/gitgalaxy/)
 [![Airgap Ready](https://img.shields.io/badge/Security-Airgap_Ready-teal.svg)](#)
 
-### **The blAST Engine: A custom heuristics-based AST-free Knowledge Graph Generator**
+### **AST-Free Static Analysis & Knowledge Graph Engine**
 
-The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository. 
+The blAST (Bypassing LLMs and ASTs) engine is a custom-made knowledge graph engine that resolves repositories at the function level. It scores each function based on 50 unique metrics, rolls that data up to score the file, and finally summarizes the entire repository.
 
-By utilizing a custom engine, we retain full control over the search space. We built it to be exceptionally fast, capable of assessing your entire repository without requiring compilable code—a fundamental limitation of standard Abstract Syntax Trees (ASTs). ASTs are great for finding missing commas and memory overflows, but they miss the forest for the trees when generating knowledge graphs. LLMs, on the other hand, suffer from hallucination during large context windows and yield probabilistic, fluctuating answers. 
+### Scanning Apollo-11 with the blAST Engine
 
-The blAST engine solves this. Because all programming languages utilize keywords and functions, our engine treats code files as text, scanning for these structural anchors to build a deterministic 3D knowledge graph. It seamlessly handles mid-file language switching, assesses the architectural ratio of test files to logic, and extracts invaluable project structure data that ASTs ignore. 
+![GitGalaxy CLI Scan](./docs/wiki/assets/apollo11_scan.gif)
+
+By utilizing a custom engine, we retain full control over the search space. We built it to be exceptionally fast, capable of assessing your entire repository without requiring compilable code—a fundamental limitation of standard Abstract Syntax Trees (ASTs). ASTs are great for finding missing commas and memory overflows, but they miss the forest for the trees when generating knowledge graphs. LLMs, on the other hand, suffer from hallucination during large context windows and yield probabilistic, fluctuating answers.
+
+The blAST engine solves this. Because all programming languages utilize keywords and functions, our engine treats code files as text, scanning for these structural anchors to build a deterministic 3D knowledge graph. It seamlessly handles mid-file language switching, assesses the architectural ratio of test files to logic, and extracts invaluable project structure data that ASTs ignore.
 
 Every assumption our system makes has been abstracted into over 300 tunable variables. Think of GitGalaxy as a highly calibrated telescope. You can query the number of active API network nodes, isolate unique external imports, or highlight functions exhibiting extreme cognitive load—all adjusted via custom whitelists and blacklists to eliminate false-positive fatigue. Field-tested on over 1,000 repositories spanning 50+ languages and 250+ extensions, the engine comes equipped with smart defaults ready for immediate deployment.
 
-**Core Technology**
+**Core Codebase Mapping Technology**
 * Bypasses LLMs and rigid ASTs.
 * Doesn't require code to compile (AST-free).
 * Produces full function-to-function call chains.
 * Deterministically maps code by 60+ keyword regex profiles (Structural markers, I/O intents, state mutations).
-* Regex keyword profiles allow us to classify functions, files, classes, folders and repos. 
+* Regex keyword profiles allow us to classify functions, files, classes, folders and repos.
 * Eliminates LLM architectural hallucinations and context window limits.
 * Scans 50+ languages, 250+ extensions, fully folder-aware. **([How to add a language in 1 minute and 1 prompt](gitgalaxy/standards/HOW_TO_ADD_LANGUAGE.md))**
 
-**Extreme Velocity & Scale**
+**Enterprise Scale & Performance Metrics**
 * 100,000 LOC/sec code analysis.
 * 0.07 GB/sec raw log ingestion.
 * Full-system scans in minutes without data sampling.
 * 100% daily system coverage.
 
-**Scientific Claims & Validation**
+**Methodology & Comparative Benchmarks**
 GitGalaxy is backed by an academic-grade thesis detailing the equations powering the blAST engine.
 
 * **[Optimum Search Strategies Evolve](https://squid-protocol.github.io/gitgalaxy/03-01-claim-1-search-strategies/):** AST-free mapping. Outperforms rigid parsers and LLM context windows.
@@ -71,15 +75,14 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
 * **[All languages have keywords that roughly do the same thing, these can be grouped to make cross-language keyword maps](https://squid-protocol.github.io/gitgalaxy/03-03-claim-3-taxonomy-map/):** Standardizes 50+ languages into a single universal physical framework.
 * **[Cross-Language Comparisons of over 1000 repos](https://squid-protocol.github.io/gitgalaxy/03-04-claim-4-comparing-languages/):** Deterministic 1:1 benchmarking of distinct syntax architectures.
 * **[Universal File Archetypes by k-means clustering](https://squid-protocol.github.io/gitgalaxy/03-05-claim-5-file-archetypes/):** ML isolation of files into K-means clusters (e.g., "The God Nodes," "Declarative Glue").
-* **[Assessing the blAST engines cross-language capbility over 10 different DOOM ports](https://squid-protocol.github.io/gitgalaxy/03-07-claim-7-doom-comparisons/):** Comparative function analysis across 10 distinct DOOM source ports.
-* **Mainframe Proven:** Successful from-scratch translation of legacy COBOL monoliths to compiling Spring Boot architectures.
+* **[Mainframe Proven: 100% CI/CD Translation Success Rate](https://github.com/squid-protocol/gitgalaxy/tree/main/examples/ibm_cics_translation):** Flawless architectural translation of 27 distinct legacy COBOL repositories (including IBM CICS benchmark apps) into compiling Java Spring Boot environments.
 
-**Security & Deployment**
+**Data Privacy & On-Premise Deployment**
 * 100% air-gapped execution.
 * On-premise deployment with zero IP exfiltration risk.
 * Zero-trust processing model.
 
-**How to use**
+**Installation & Usage**
 * Python-based: `pip install gitgalaxy`
 * CLI execution
 * Outputs forensic JSONs (optimized for AI-agent summary reports) and a native SQLite3 database for robust querying and storage.
@@ -88,7 +91,7 @@ GitGalaxy is backed by an academic-grade thesis detailing the equations powering
 
 ---
 
-## Quickstart
+## Quickstart Guide
 
 ### 1. Install
 
@@ -105,41 +108,74 @@ Point the GalaxyScope at any local repository or ZIP archive. The engine runs en
 galaxyscope /path/to/your/local/repo
 ```
 
+### 3. GitHub Actions CI/CD Integration
+
+GitGalaxy can be integrated directly into your GitHub Actions pipeline for automated DevSecOps auditing, Zero-Trust SBOM generation, or Pre-Commit firewalls. 
+
+Create a file in your repository at `.github/workflows/gitgalaxy-scan.yml`:
+
+```yaml
+name: GitGalaxy Security Audit
+
+on:
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  gitgalaxy-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Run GitGalaxy Supply Chain Firewall
+        uses: squid-protocol/gitgalaxy@main
+        with:
+          tool: 'supply-chain-firewall' # Options: galaxyscope, zero-trust-sbom, pii-leak-hunter, etc.
+          target: '.'
+```
+
 ---
 
-### [Project Overview](docs/wiki/01-project-overview.md)
+### [GitGalaxy Core Analysis Engine](docs/wiki/01-project-overview.md)
 The central blAST engine. It bypasses rigid ASTs using mathematical heuristics to map O(N) multi-dimensional relationships across 50+ languages, managing signal processing, spatial layout, and high-speed SQLite telemetry recording.
 
 
 
-## The GitGalaxy Ecosystem
+## Enterprise Codebase Tools & Use Cases
 
-GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations. The following toolsets provide novel heuristic solutions to several open problems in computing. 
+GitGalaxy operates on a modular Hub-and-Spoke architecture. While the core engine provides the overarching physics and cartography, our specialized toolsets leverage that deterministic graph to execute enterprise-grade operations. 
 
-### [Legacy Modernization: Converting Raw Cobol Repos to Java Spring Boots](gitgalaxy/tools/cobol_to_java/)
+### [Automated Legacy Migration: COBOL to Java Spring Boot](gitgalaxy/tools/cobol_to_java/)
 A deterministic, high-fidelity translation pipeline. It converts legacy COBOL into fully compiling, modern Spring Boot architectures, mapping memory exactly and scaffolding JPA entities, REST controllers, and Maven builds before utilizing AI to translate isolated business logic.
+* **Proven Metric:** Achieved a perfect 27/27 Maven compile success rate across a batch test of distinct legacy repos.
+* **Verify for Yourself:** [Inspect the raw outputs of the IBM CICS Application Translation here.](examples/ibm_cics_translation/)
 
-### [Legacy Modernization: Converting Raw Cobol Repos to cleaner Cobol Repos](gitgalaxy/tools/cobol_to_cobol/)
+![Java Forge & Batch Test](./docs/wiki/assets/java_forge_and_batch_test.gif)
+
+### [Mainframe Refactoring: COBOL & JCL Optimization](gitgalaxy/tools/cobol_to_cobol/)
 A mathematical x-ray suite for sanitizing mainframe monoliths. It safely neutralizes legacy lexical traps, extracts dead "Graveyard" memory, maps topological DAG execution orders, and generates Zero-Trust JCL configurations for modern cloud deployments.
+* **Proven Metric:** The Graveyard Reaper engine extracted over 6,700 lines of dead execution blocks and orphaned variables from the standard IBM CICS benchmark app in seconds.
 
-### [Supply Chain Security](gitgalaxy/tools/supply_chain_security/)
+### [Software Supply Chain Security & Pre-Commit Firewalls](gitgalaxy/tools/supply_chain_security/)
 Extreme-velocity pre-commit firewalls. Instead of trusting manifest files, it scans physical internals to block steganography, sub-atomic XOR decryption loops, homoglyph typosquatting, and exposed cryptographic vaults before they ever enter your CI/CD pipeline.
 
-### [Network Auditing](gitgalaxy/tools/network_auditing/)
+### [Zero-Trust SBOM Generation & Dependency Auditing](gitgalaxy/tools/compliance/)
+A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
+* **Proven Metric:** Successfully mapped and mathematically verified the physical internals of 170 unique Go modules inside the local Kubernetes repository.
+
+### [API Security & Shadow API Detection](gitgalaxy/tools/network_auditing/)
 A deterministic mapping tool that hunts undocumented vulnerabilities. It uses structural regex to find active physical routing logic (Express, Spring Boot, FastAPI) and applies set theory against official OpenAPI/Swagger documentation to isolate critical Shadow APIs and outdated Ghost APIs.
 
-### [Terabyte Log Scanning](gitgalaxy/tools/terabyte_log_scanning/)
+### [High-Speed PII Detection & Log Analysis](gitgalaxy/tools/terabyte_log_scanning/)
 Unindexed, tactical log analysis operating at 0.07 GB/sec. It streams massive database dumps to deterministically hunt and mask PII (Credit Cards, SSNs, AWS Keys) and uses static architecture maps to prove exact runtime execution frequencies with ASCII time-series histograms.
 
-### [Compliance Operations - SBOM Generators](gitgalaxy/tools/compliance/)
-A Zero-Trust Software Bill of Materials (SBOM) generator. It refuses to blindly trust `package.json` or `requirements.txt` files, instead locating the physical dependencies on disk, mathematically verifying their entropy and linguistic identity, and generating strict CycloneDX 1.4 JSON reports.
-
-### [AI Guardrails](gitgalaxy/tools/ai_guardrails/)
+### [AI Agent Guardrails & Codebase Protection](gitgalaxy/tools/ai_guardrails/)
 Specialized keyword sensors protecting both your application and your codebase. The AppSec Sensor detects weaponized LLM features (RCE funnels, exfiltration risks), while the Dev Agent Firewall evaluates token mass and blast radius to restrict autonomous coding agents from modifying dangerous over context token-draining files. Helps identify which files need to be chunked to reduce context overload.
 
-  ## The Web Viewer (Frictionless Dashboards)
+  ## Local Browser-Based 3D Codebase Visualization
 
-If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics. 
+If you prefer visual analytics, we've built a non-numerical dashboard where each file represents a star, sized and colored according to specific risk metrics.
 
 Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip` of your raw repository) directly into [GitGalaxy.io](https://gitgalaxy.io/). All rendering and scanning happens entirely in your browser's local memory.
 
@@ -147,7 +183,7 @@ Simply drag and drop your generated `your_repo_GPU_galaxy.json` file (or a `.zip
 
 ![GitGalaxy native SQLite3 database schema for AST-free enterprise codebase mapping and cybersecurity auditing](https://raw.githubusercontent.com/squid-protocol/gitgalaxy/main/docs/wiki/assets/sqlite_overview.png)
 
-## Zero-Trust Architecture
+## Zero-Trust Data Security
 
 Your code never leaves your machine. GitGalaxy performs 100% of its scanning and vectorization locally.