# OpenThunder

> OpenThunder is the AI developer environment where you build with AI, verify what it produces, and own the outcome. The understand, risk, and verification work is deterministic and local-first: it runs with no AI key and never uploads your source by default. Surfaces: Desktop, for VS Code, Cloud, and CLI. The differentiator is accumulated, versioned verification evidence, not AI summaries. OpenThunder is a product of Skills Tech Talk, LLC.

## Docs

- [Getting started](https://openthunder.dev/docs/getting-started.html): Install OpenThunder Desktop and get first value in under 5 minutes, offline, no account.
- [Core concepts](https://openthunder.dev/docs/concepts.html): Missions, the Lenses, Change Verification and Can-I-Ship, Evidence Packs, AI Context Packs, Blast Radius, and the MCP Context Brain.
- [Evidence Packs and provenance](https://openthunder.dev/docs/evidence.html): Why OpenThunder produces evidence, not an AI summary, and how every conclusion is labeled by source and confidence (deterministic, scanner, verified, user-claim, AI-inference, missing, unknown).
- [CLI reference](https://openthunder.dev/docs/cli-reference.html): Every openthunder command, generated from the real --help output.

## Guides

- [Verify an AI-generated change before you commit](https://openthunder.dev/docs/verify-ai-change.html): The keyless local loop to run after your agent edits code (review-diff, risks, security check, can-i-ship, evidence).
- [Decide if a change is safe to ship](https://openthunder.dev/docs/can-i-ship.html): Read the SHIP / CAUTION / HOLD verdict, its blast radius and evidence, and gate CI on it.
- [Understand a repo you didn't write](https://openthunder.dev/docs/understand-a-repo.html): Get oriented in an unfamiliar or AI-generated codebase from the real code: architecture Lens, brief, analyze, catch-up, risks.
- [Set up a verified mission for high-risk work](https://openthunder.dev/docs/verified-mission.html): Run auth/billing/DB/security changes as a mission with an independent reviewer; output is a diff plus an Evidence Pack.
- [Connect your AI agent (MCP)](https://openthunder.dev/docs/mcp.html): Wire Claude Code, Codex, Cursor, or Copilot into your repo graph. MCP tools, resources, and prompts; keyless and local.
- [Use OpenThunder in CI](https://openthunder.dev/docs/ci.html): Gate merges on can-i-ship and security check in GitHub Actions, GitLab, or Azure DevOps.
- [Get a repo development-ready](https://openthunder.dev/docs/prepare-environment.html): openthunder ready detects the stack, services, and env vars and prepares the environment.
- [Check security, including AI-era risks](https://openthunder.dev/docs/security.html): Keyless Security Lens: scan, score, findings, AI security (OWASP LLM: prompt injection, unsafe RAG, excessive agency, tool risk), fusion blast-radius triage, and the security check gate.
- [Check dependencies and supply chain](https://openthunder.dev/docs/dependencies.html): CycloneDX SBOM, SLSA provenance, artifact verification, and an honestly-labeled trust report.
- [Roll out OpenThunder to your team](https://openthunder.dev/docs/teams.html): Local-first per developer, gate merges in CI on can-i-ship + security check, publish derived results (no raw code) to the Cloud, route high-risk work through verified missions.

## Surfaces

- [OpenThunder Desktop](https://openthunder.dev/docs/desktop.html): The free local app for macOS, Windows, and Linux; bundles the engine and CLI, local-first, no account.
- [OpenThunder for VS Code](https://openthunder.dev/docs/vscode.html): Understand, verify, and connect your AI agent inside the editor.
- [OpenThunder Cloud](https://openthunder.dev/docs/cloud.html): The optional privacy-first team control plane at openthunder.ai; derived results only, no raw code.

## Trust

- [Trust Center](https://openthunder.dev/docs/trust.html): Exactly what runs locally, what leaves only when you choose, the three execution modes, and secret protection.
- [Privacy FAQ](https://openthunder.dev/docs/privacy-faq.html): What runs locally, what never leaves your machine, and what the Cloud is for.
- [Privacy Policy](https://openthunder.dev/docs/privacy.html)
- [End User License Agreement](https://openthunder.dev/docs/eula.html)