RavenFix
A harness built around Claude Code. RavenFix ingests security findings and runs a gated pipeline of Claude Code agent sessions that patch each vulnerability, then ships it as a human-approved pull request.
Finding vulnerabilities is only half the job. Turning each one into a safe, reviewed fix is still mostly manual, slow work.
A staged pipeline (intake, triage, repro, fix planning, patch, validation, review, reporting) runs each finding through its own Claude Code agent session on a persistent runtime, gated by sentinel files so a run only advances once a stage genuinely completes, with every fix waiting on a human approval before it ships as a PR.
Designed the gated pipeline stages and sentinel-file handoffs around Claude Code, built the Textual TUI for watching and approving runs live, and built the fully-simulated browser demo that walks through the whole flow on mock data.
Gating every stage behind a deterministic sentinel file, instead of trusting an agent's own 'done' signal, made the pipeline far more reliable to run unattended.