No magic.Just math.
The system of record for engineering truth — cryptographically signed, deterministic audit evidence, generated automatically.
Built for Heads of Risk, CROs, CISOs, and Directors of Risk Engineering at firms operating under SOC 2 Type II, ISO 27001, NYDFS Part 500, DORA, or SR 11-7. Observability detects the fire. Déjà documents the cryptographic chain of custody — and proves exactly how it was extinguished. Deterministic Abstract Syntax Tree (AST) analysis, eight weighted scoring factors (W1–W8) summing to 1.00, Ed25519-signed receipts written to an immutable, append-only, tamper-evident ledger. Verified gates, audit-ready evidence. No LLM. No probabilistic hand-waving. No "AI that might be right." No hallucination at audit time. No postmortem narrative your audit firm has to take on faith — verifiable offline by any audit firm, using the open CLI.
output = fp://a1c3_9e44_b772
prior = incident_04hxr8 · 142d ago
Most firms reconstruct evidence at audit time.
- Audit firm asks for incident-response evidence for Q2. Compliance team starts pulling JIRA tickets, Slack threads, Microsoft Teams chats, monitoring snapshots, PagerDuty exports, and PDF postmortems.
- Evidence is reassembled two-to-four weeks per audit cycle, four cycles per year, by senior compliance and engineering staff.
- Context lives in engineers' heads. People leave. Context goes with them. Reconstructed evidence reflects best recollection, not signed primary record.
- Auditor receives prose narrative + supporting documents. No way to verify offline. No way to verify the firm didn't curate the evidence.
- Every production incident produces a cryptographically signed receipt at the moment of attribution — fingerprint, causal change, gate scores, framework scope.
- Audit firm receives a scoped engagement bundle and runs the open
dsr-verifier-clion their own machine — any audit firm (firms such as KPMG, Deloitte, EY, PwC, BDO, or Grant Thornton), or independent. No Déjà account required. - Audit-ready chain of custody. Cryptographically verifiable, immutable, tamper-evident. Even the failures are recorded — low-confidence attributions, no-attributions, failed resolutions, reopened.
- Engineering teams at regulated firms report audit prep consuming multiple FTE-weeks per cycle. Evidence stays valid for decades, durable across regulatory cycles. Verifiable even if Déjà disappears.
Chain of custody pipeline.
> ATTR_EXTRACT: stack_trace,
release, env
> SOURCE: sentry_uplink //
status: ok
> NORMALIZE:
paths_and_line_numbers
> CANON: frames[] →
stable_signature
> HASH: sha256(
"errorType::serviceZone::
normalisedMessage")
> OUTPUT: fp://a1c3…9e
> LOOKUP: fp → proven_fix_pr
> RESULT: match://verified
Trust engine.
Matches only if the fix actually touched relevant files. Rules out superficial code colocation.
> GATE: file_gate // score: 0.91
Regression rate drops after the fix window. Proves the fix actually reduced failure volume.
> GATE: rate_gate // score: 0.87
Rules out infrastructure noise and deploy artifacts. Separates code fixes from environment drift.
> GATE: infra_gate // score: 0.95
Correlates fixes to rollout conditions. Flag toggles don't masquerade as code fixes. Defaults to full score when no feature-flag integration is configured.
> GATE: flag_gate // score: 1.00
Verifies fix stability over time. A signed receipt is always issued; the duration result is recorded as a gate field within it.
> GATE: duration_gate // score: 0.83
Hardened perimeter.
Evidence in. Secrets out.
Déjà reads transient webhook diffs and error payloads. It never clones your repository, reads historical files, or accesses runtime data. Stable IDs for incidents and fixes — no sensitive payloads. Immutable evidence trail suitable for regulated environments.
The architecture that didn't exist before.
Déjà is not an LLM wrapper. It is a deterministic engine performing raw Abstract Syntax Tree (AST) analysis on every code change merged to your repository. The engine produces a Causal Confidence Score (CCS) from eight weighted scoring factors (W1–W8) summing to 1.00, then issues a Ed25519-signed receipt written to an immutable, append-only, tamper-evident ledger. No probabilistic guessing. No hallucination at audit time. Mathematical certainty by construction. Triggered via background webhook interception on every pull_request.merged event.
- Zero-click compliance — receipts auto-generate at attribution
- Background webhook interception — silent on the merge event
- No manual screenshotting of Jira tickets or Slack threads
- No audit-prep sprints — evidence ready before auditors call
- Live Verifier via
dsr-verifier-cli— Apache-2.0, open source (pre-release · public release Q3 2026) - Independent Ed25519 signature verification, offline
- No Déjà account required to verify a receipt
- No source code access — auditors verify attribution, not the codebase
The category exists because manual evidence reconstruction is the default — and it is structurally broken. Based on Déjà's conversations with regulated-firm engineering teams, audit prep can consume multiple FTE-weeks per cycle reconstructing what nobody captured at the time — searching Slack for incident context, screenshotting Jira tickets, copying deployment logs into spreadsheets, manually annotating bundles before the auditor arrives. The cost compounds across SOC 2 Type II, ISO 27001, NYDFS Part 500, DORA, and SR 11-7. The output is unsigned, unverifiable, and reconstructed under deadline pressure. Déjà eliminates the category by writing signed evidence at the moment of attribution — not at the moment of audit.
Receipts are independently verifiable. No implicit trust required between Déjà, the customer, or the audit firm. The signature is the contract; the verifier is the proof; the append-only ledger is the chain. This is the property that defines the category — and the property no other category preserves.
Stop reconstructing evidence at audit time.
Cryptographic incident-evidence custody. Signed at attribution. Verifiable offline by your audit firm. Durable across regulatory cycles. Engineering teams at regulated firms report audit prep consuming multiple FTE-weeks per cycle.