Home

Diff Drift Wiki

Diff Drift is a local desktop reviewer for the code drift AI coding agents leave behind. It compares a git working tree against a chosen baseline (HEAD, the pinned trust point, a merge-base, or any rev), renders supported source changes as an AST-level drift view plus package.json dependency drift, and raises heuristic security flags for human review. A read-only diff-drift check command exposes the same analysis to scripts and agents.

This wiki is the handbook. The README stays short on purpose.

Start Here

• User Guide: open a repo, read the panels, review flags, export a report, CI/hook recipes.
• Concepts: drift, sessions, nodes, flags, dismissed, reviewed.
• Rule Reference: what each security heuristic means.
• FAQ: triage burden, false positives, skipped files, CI integration.
• Architecture: codebase map for contributors and AI agents.
• Development: setup, commands, tests, fixtures.
• Eval Methodology: how the engine benchmark and blind-agent scorecards work, and their limits.
• A/B Study Design: pre-registered design for the packet-vs-raw-diff study (no results yet).
• Threat Model: trust boundaries, attack surface, explicit non-goals.
• Privacy and Data Flow: what is read, what is written, what leaves the machine (nothing).
• Release and Platform Support: Windows, macOS status, release runbook, signing, winget.
• Troubleshooting: common setup and app behavior issues.
• Changelog and Security Policy.
• GitHub Discussions: questions, ideas, and support.

Current Status

• Version: 0.4.0.
• Supported platform: Windows 11.
• macOS: experimental and unsigned.
• Analysis scope: changed .ts/.tsx/.js/.jsx/.mjs/.cjs, .rs, .go, .py/.pyi, .java, .cs, .kt/.kts, and .swift files plus package.json dependency drift, against a selectable baseline. Heuristic flags are strongest for JS/TS and package drift.
• Rule results are review prompts, not vulnerability verdicts.

Source Copy

These pages live in docs/wiki/ so they are available in a normal clone. The GitHub wiki can mirror them, but this repo copy is the source of truth.