BATEN CODE
Source Code Certification Engine
Not AI. Not an opinion.
A deterministic certainty.

Scan a single file or an entire codebase. BATEN CODE applies 8 structural invariants and produces a reproducible, signable, archivable integrity score. Runs locally. No cloud. No telemetry.

Usage
📄
Scan a file
Open any .rs .py .c .cpp file in VSCode.

Click ◈ BATEN in the status bar or Ctrl+Shift+PBATEN CODE: Audit — Current File.

The report opens immediately in the editor.
📁
Scan a project
Open any file in your project in VSCode.

Ctrl+Shift+PBATEN CODE: Audit — Full Project.

The engine recursively scans all supported files from the project root and produces a single consolidated report.
Standalone mode — The Windows exe also works from the command line:
baten_engine.exe "C:\my\project"  or  baten_engine.exe "src\main.rs"
The .md report is generated inside .baten/audit/ at the root of the scanned folder.

Audit Gallery
Redis — Official Repository · C · 797 files scanned
36% — 🔴 CRITICAL
Scan in 16 s · 878 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL14Density penalty ×4 — exploitable
🟠 HIGH18Density penalty ×1 — structural defect
🟡 MEDIUM631Contamination ratio only
🔵 LOW215Contamination ratio only
nginx — Official Repository · C · 396 files scanned
29% — 🔴 CRITICAL
Scan in 9.6 s · 760 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL5Density penalty ×4 — exploitable
🟠 HIGH0Density penalty ×1 — structural defect
🟡 MEDIUM746Contamination ratio only
🔵 LOW9Contamination ratio only
curl — Official Repository · C · 997 files scanned
50% — 🟠 HIGH
Scan in 18.7 s · 1 153 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL5Density penalty ×4 — exploitable
🟠 HIGH0Density penalty ×1 — structural defect
🟡 MEDIUM681Contamination ratio only
🔵 LOW467Contamination ratio only
PostgreSQL — Official Repository · C · 2 552 files scanned
29% — 🔴 CRITICAL
Scan in 81 s · 6 156 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL26Density penalty ×4 — exploitable
🟠 HIGH545Density penalty ×1 — structural defect
🟡 MEDIUM4 941Contamination ratio only
🔵 LOW644Contamination ratio only
CPython — Official Repository · C Core · 374 files scanned
22–49% — 🔴 CRITICAL
Modules / Objects / Python / Parser · 1 CRITICAL · 33 HIGH detected · zero configuration · zero cloud
ComponentFilesScoreCRITICAL / HIGH
Modules10022%0 / 19
Objects12249%1 / 2
Python runtime12743%0 / 8
Parser2548%0 / 4
Notable: posixmodule.c (33 violations) · memoryobject.c · obmalloc.c (CRITICAL)
SQLite — Official Repository · C · 353 files scanned
22% — 🔴 CRITICAL
Scan in 12.6 s · 1 205 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL9Density penalty ×4 — exploitable
🟠 HIGH11Density penalty ×1 — structural defect
🟡 MEDIUM1 067Contamination ratio only
🔵 LOW118Contamination ratio only
OpenSSL — Official Repository · C · ~1 400 files (crypto + ssl + providers + apps)
8–67% — 🔴 CRITICAL
0 CRITICAL · 48 HIGH detected · zero configuration · zero cloud
ComponentFilesScoreHIGH
statem/ — TLS handshake state machine 108%15
apps/9520%15
crypto/94732%12
quic/4847%0
providers/29767%6
⚠ The TLS handshake state machine — the foundation of encrypted communication on the internet — scores 8%.
Node.js — Official Repository · C/C++ · 429 files scanned (src/)
40% — 🔴 CRITICAL
Scan in 14 s · 630 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL1Density penalty ×4 — exploitable
🟠 HIGH0Density penalty ×1 — structural defect
🟡 MEDIUM590Contamination ratio only
🔵 LOW39Contamination ratio only
Git — Official Repository · C · 978 files scanned
35% — 🔴 CRITICAL
Scan in 18.7 s · 1 220 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL16Density penalty ×4 — exploitable
🟠 HIGH45Density penalty ×1 — structural defect
🟡 MEDIUMContamination ratio only
🔵 LOWContamination ratio only
The version control system managing virtually all of the world's source code — 16 CRITICAL violations.
Linux Kernel — Official Repository · C · 4 527 files scanned (kernel/ + net/ + fs/)
29–33% — 🔴 CRITICAL
7 618 anomalies total · 57 HIGH in core kernel · zero configuration · zero cloud
SubsystemFilesScoreHIGH
kernel/60733%57
net/1 81329%0
fs/2 10730%0
The operating system powering 90% of the world's servers, smartphones and cloud infrastructure.
LLVM / Clang — Official Repository · C++ · 1 600 files scanned (clang/lib/)
45% — 🔴 CRITICAL
Scan in 96.7 s · 3 953 anomalies · zero configuration · zero cloud
SeverityViolationsRole in scoring
🔴 CRITICAL0Density penalty ×4 — exploitable
🟠 HIGH0Density penalty ×1 — structural defect
🟡 MEDIUMContamination ratio only
🔵 LOWContamination ratio only
The compiler used to build most of the world's production software — best score in the gallery at 45%. Still below 50%.
Scoring formula — Base score = (clean files / total files) × 100. Density penalty = (CRITICAL × 4 + HIGH × 1) capped at 50% of base score. Final score = base − density penalty. A project with 750 clean files out of 800 starts at 93% before any penalty — one unsafe function does not condemn the whole codebase.

The 8 BICS Invariants

Download
Option 1 — VS Code Extension
Install from the Marketplace
Recommended for VS Code users · live status bar · auto-scan on save
1. Open VS Code → Ctrl+Shift+X (Extensions panel)
2. Search BATEN CODE
3. Click Install — the ◈ BATEN badge appears in the status bar
4. Open any .rs .py .c .cpp file and press Ctrl+Shift+PBATEN CODE: Audit
⬦ Open in VS Code Marketplace →
Option 2 — Standalone Windows Engine
Direct download · no install required
Rust · ~4 MB · no dependencies · Windows 10/11 · works offline
Command line, CI/CD pipelines, server environments
1. Download baten_engine-windows-x64.exe below
2. Windows SmartScreen may appear on first launch — click More info → Run anyway.
    The engine is open, deterministic, no network access.

3. Run: baten_engine-windows-x64.exe "C:\my\project"
4. Report saved to .baten/audit/ in the scanned folder
↓ Download Engine — Windows x64 · exe · ~4 MB
SHA-256: b07f93fd5c3d850c22fb9821d319a26cedd17c2305f5e98a25d083e7063fa0ae · v1.0.26 · 2026-03-21

Editors & Environments
VS Code
● Available
Command Line
● Available
CI/CD Pipeline
● Available
JetBrains
○ Coming soon
Neovim / Vim
○ Coming soon
Cursor / Windsurf
○ Coming soon
Voir la galerie d'audits open-source →