Find the first wrong assumption.
Trace config, runtime, specification and artifact state through evidence instead of guessing from the final error message.
LOCAL FORENSIC WORKSPACE · ZERO TELEMETRY
Trace the value, artifact or configuration that actually caused the failure. Nothing leaves the Keep.
Loss-aware local JSON validation, formatting and forensic diagnostics with immutable original input.
DAILY CORE / LOCALLoss-aware local YAML, JSON and TOML safe-subset validation and conversion with explicit incompatibility reporting.
DAILY CORE / LOCALLocal CSV, TSV, JSON and JSONL table analysis with dialect confidence, quarantine evidence and non-coercive type inference.
DAILY CORE / LOCALSafety-first local XML 1.0 analysis, deterministic formatting and ordered XML-to-JSON conversion with DOCTYPE/entity quarantine.
DAILY CORE / LOCALUnicode-safe local Base64, Base64URL, URL-component and HTML transforms with explicit transform provenance.
DAILY CORE / LOCALOffline WHATWG URL anatomy, normalization, duplicate query, IDN and literal network-target diagnostics without DNS or requests.
DAILY CORE / LOCALLocal exact-byte SHA-256, HMAC-SHA-256 verification and CRC-32/IEEE analysis with explicit crypto-provider boundaries.
DAILY CORE / LOCALExact offline IPv4/IPv6 CIDR inspection, containment, overlap and minimal range covering with BigInt arithmetic and no DNS lookup.
DAILY CORE / LOCALLocal ECMAScript regex syntax, portability and conservative structural ReDoS analysis with no foreign-engine or match execution.
DAILY CORE / LOCALLocal UUID and ULID inspection plus explicit-provider UUIDv4, UUIDv7, ULID and unbiased NanoID generation with provenance and ordering boundaries.
DAILY CORE / LOCALOffline Unix timestamp and ISO-8601 interpretation with explicit UTC/IANA timezone rendering and precision diagnostics.
DAILY CORE / LOCALOffline JWT and PASETO structure inspection with claim-time diagnostics and an explicit no-verification boundary.
DAILY CORE / LOCALStatic local conversion of bounded cURL request syntax into readable Python or JavaScript request code without executing requests.
DAILY CORE / LOCALBounded offline five-field cron parsing, expansion and next-run explanation with explicit UTC reference semantics.
DAILY CORE / LOCALStatic local SQL portability inspection for PostgreSQL, MySQL, SQLite and SQL Server signals with no database execution.
DAILY CORE / LOCALLocal JSON structural or deterministic line-level text comparison with immutable originals and bounded change evidence.
DAILY CORE / LOCALLocal conservative Markdown preview sanitization with raw HTML escaping and dangerous URI-scheme blocking.
DAILY CORE / LOCALConservative local SVG sanitization, whitespace compaction and percent-encoded data-URI derivation with external references denied.
DAILY CORE / LOCALDeterministic local SemVer comparator, caret, tilde and OR-range expansion with explicit prerelease boundaries.
DAILY CORE / LOCALBounded local JSONPath and JMESPath-style query subset with step trace, result limits and fail-closed unsupported syntax.
FORENSIC CORE / LOCALLocal OpenAPI declared-vs-observed operation drift analysis without sending requests.
FORENSIC CORE / LOCALLocal API, specification and SDK operation-inventory triangulation with explicit drift evidence.
FORENSIC CORE / LOCALLocal static inspection of secret references versus literal materialization markers.
FORENSIC CORE / LOCALLocal public-artifact inventory inspection for source maps, environment files and secret-bearing surfaces.
FORENSIC CORE / LOCALLocal source-text inspection for network-capable primitives and remote URL surfaces without executing code.
FORENSIC CORE / LOCALLocal transcript and tool-trace inspection for privileged prompt, argument and token exposure markers.
FORENSIC CORE / LOCALLocal Docker Compose environment-reference tracing with explicit supplied values and fallbacks.
FORENSIC CORE / LOCALLocal Wrangler configuration inspection for binding placement and secret-like plain-variable risks.
FORENSIC CORE / LOCALLocal dependency declaration, resolution and policy drift inspection without registry access.
FORENSIC CORE / LOCALLocal static Helm override blast-radius analysis without rendering charts or contacting a cluster.
FORENSIC CORE / LOCALLocal Tailwind v4 theme-token declaration and reference resolution analysis without running Tailwind.
FORENSIC CORE / LOCALLocal build-time, runtime, public and secret-like configuration provenance classification.
FORENSIC CORE / LOCALLocal environment-reference graph construction with secret-like source and public-like sink analysis.
SECURE SHARE & RELEASE / LOCALLocal pattern-based support-evidence redaction with deterministic share-safe output markers.
SECURE SHARE & RELEASE / LOCALLocal log and stack-trace redaction with deterministic timestamp timeline extraction.
SECURE SHARE & RELEASE / LOCALLocal release-package inventory inspection for unexpected source, environment and debug artifacts.
SECURE SHARE & RELEASE / LOCALLocal dev, CI and production environment-map comparison with explicit ignored keys.
SECURE SHARE & RELEASE / LOCALOffline JWT-shaped OAuth/OIDC artifact decoding with explicit no-verification and no-discovery boundaries.
Trace config, runtime, specification and artifact state through evidence instead of guessing from the final error message.
Keep declaration, transformation, materialization and consumer stages explicit so every finding can be reconstructed.
Analysis views may mask. Sanitized output is always a separate derivative with an auditable original-to-result mapping.
OctetKeep is not a pile of formatters. Every serious workflow is designed to preserve the original artifact, expose the reasoning path and disclose fidelity boundaries.
Parsing, conversion, time, identifiers, crypto, networks, SQL, diff and standards-oriented utilities.
FORENSIC CORE13Reality drift, provenance, secret flow, egress, dependency policy and environment causality.
SECURE SHARE & RELEASE5Sanitization, environment parity, release auditing and offline OAuth/OIDC reconstruction.
The Web runtime is compiled under connect-src 'none', exact release manifests and a fail-closed local service-worker cache. Analysis engines declare network, filesystem and shell capabilities explicitly.
No account is required for the Web workspace. Professional use is allowed; paid editions expand local workflow scale, CLI/CI, policy and assurance capabilities.