Capabilities
What is working, what is partial, and what is still roadmap.
Apex is designed to refuse a bad change, keep proof you can check without trusting Apex, and read a codebase cold. Apex is designed so a person makes the acceptance decision.
No customer deployment yet. Test counts are labeled internal audit, 15 Oct. They are not public proof.
Internal audit, 15 Oct 2026 (v2), private under NDA
These statuses and check counts are attributed to that historical internal audit, not independently reproduced here. Its private-source label is not an offer of confidential access; no access procedure is established.
Refuses bad changes by itself
Partial
Upward-only posture ratchet
Working
The posture bar only moves upward. Only one dimension is checked today: enforcement test coverage.
270 tests passing (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Required-checks reality gate
Working
Required checks are compared with the checks that are actually required.
PASS, 8 declared, drift 0, 53 tests (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Delta gate
Partial
Designed to gate a change on its delta.
107 tests (internal audit, 15 Oct).
What's left: The live run halted on the committed baseline, and the workflow is dispatch-only.
Internal audit, 15 Oct 2026 (v2), private under NDA
Proof you can check without trusting Apex
Partial
Sealed signed capsules with offline verify
Partial
Designed so a sealed capsule can be verified offline.
244 checks passed of 246 checks. 43 tests (internal audit, 15 Oct).
What's left: A live verify rejected the committed capsule, and sealing needs a campaign.
Internal audit, 15 Oct 2026 (v2), private under NDA
Independent operator verifier
Partial
Designed for an independent operator to inspect a request.
What's left: The live inspect refused the historical request and needs a current enterprise-flight request.
Internal audit, 15 Oct 2026 (v2), private under NDA
Offline verifiers for 4 evidence kinds
Working
Offline verifiers cover these evidence kinds.
4 evidence kinds. 36 tests (internal audit, 15 Oct). The campaign-manifest schema from enterprise flight is rejected.
Internal audit, 15 Oct 2026 (v2), private under NDA
Semantic-proof offline verifier
Partial
Designed to check a semantic-proof receipt offline.
12 tests (internal audit, 15 Oct).
What's left: Only fixtures were checked, and no real receipt exists.
Internal audit, 15 Oct 2026 (v2), private under NDA
Open the site verifier or download the offline verifier. Those check the public signed projection. The test counts on this page are a separate internal audit.
Internal audit, 15 Oct 2026 (v2), private under NDA
Understands a codebase cold
Partial
Reality Engine
Working
A codebase can be taken up cold through the Reality Engine.
362 tests (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Scanner chassis
Working
The scanner chassis covers a cold codebase.
807 passed, 21 failed (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Finance and Python-security lenses
Working
Finance and Python-security lenses run on a cold codebase.
7 finance lenses. 263 tests (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Behavioral lens
Working
A behavioral lens runs on a cold codebase.
350 tests (internal audit, 15 Oct).
Internal audit, 15 Oct 2026 (v2), private under NDA
Onboarding
Partial
Designed to register a cold repository in discovery-only mode.
149 onboarding tests (internal audit, 15 Oct).
What's left: It writes into Apex's own source and needs a wheel rebuild.
Internal audit, 15 Oct 2026 (v2), private under NDA
Designed to bind delivery to the sealed change
Partial
bind_pr
Partial
Designed to refuse any PR that differs from the sealed change.
141 tests (internal audit, 15 Oct).
What's left: Tests only, and it needs a verified capsule and a real PR.
Internal audit, 15 Oct 2026 (v2), private under NDA
Acceptance decision
Partial
Apex is designed so a person makes the acceptance decision.
What's left: Tests only, and it sits downstream of bind_pr.
Internal audit, 15 Oct 2026 (v2), private under NDA
One operator control tower
Partial
Operator CLI
Working
A CLI with 25 commands: status, doctor, model registry and costs, gate status, scan.
Internal audit, 15 Oct 2026 (v2), private under NDA
Operator broker
Partial
Designed to hold signed authority through the operator broker.
197 tests (internal audit, 15 Oct).
What's left: Tests only, and no real authority request exists.
Internal audit, 15 Oct 2026 (v2), private under NDA
What's next
Roadmap
Open a PR from a sealed change
Roadmap
Opening the PR automatically from a sealed change.
Roadmap. Not done.
Internal audit, 15 Oct 2026 (v2), private under NDA
Onboarding outside Apex source
Roadmap
Onboarding that doesn't modify Apex's own source.
Roadmap. Not done.
Internal audit, 15 Oct 2026 (v2), private under NDA
End-to-end campaign
Roadmap
Prove a full end-to-end campaign run.
0 proven cycles.
Internal audit, 15 Oct 2026 (v2), private under NDA
Libraries still to wire
Roadmap
Wiring finished libraries into the product: audit pack, ledger replay, customer constitution ratification, and customer-side verification without Apex keys.
Roadmap. Not done.
Internal audit, 15 Oct 2026 (v2), private under NDA