About this project

• Parses two versions of an Anchor/Solana program into a normalized semantic model, diffs them, and classifies the result as compatible, warning, or breaking.
• Surfaces security regressions directly (e.g. a dropped signer check) alongside the diff, with a rule catalog and per-rule explanations via `semora explain`.
• CI-ready: outputs terminal, JSON, SARIF (GitHub Code Scanning), or markdown/LLM-prompt reports, with a configurable `--fail-on` severity gate and baseline suppression for already-accepted findings.