Console
Nothing reaches git until the fingerprints are gone.
InvisableOS stands in front of your VCS. It scans every file for Anthropic and other LLM watermark channels, rewrites the source, then lets the commit through.
- 01 Incoming
- 02 Detect
- 03 Rewrite
- 04 VCS
Agent toll
This console is free. Hosted /api/v1 returns 402 unless the agent prepaid — $0.002 / file, or a seat.
Capacity
Built for a million gates. Scan compute stays on the client. The origin only books metadata under a per-tenant ceiling.
Linear with clients
Detect and rewrite run in the browser. One million users is one million cores — the origin never sees the source.
Signed-in writes are batched, idempotent, and burst-capped. A row is a filename and counters. No blobs.
Postgres keeps the last 100 scans per tenant. Daily quotas stop a single workspace from tipping the fleet.
pre-commit is the last backstop and also scales out — it runs on the laptop making the commit, not here.
Today's budget
sign in to meterSelf-test
Probes run on a timer and whenever policy changes. If any check fails, the gate refuse-closes — commits cannot pass.
Last probe boot
- pass
Required detectors armed
invisible, bidi, homoglyph, bom, variation, tag-chars, claude-mark
- pass
Engine stays up
4 fixtures scanned without throw
- pass
Fixtures still look tainted
All known-tainted samples flagged
- pass
Rewrite leaves no residue
Zero-width, bidi, and homoglyphs stripped
- pass
Aug 2026 Claude mark is intercepted
13 Claude-mark findings stripped
- pass
Adversarial battery
24 probes held
- pass
Commit messages lose vendor credit
Stripped 2 attribution lines
- pass
Live canary is caught
2 findings, cleaned
- pass
Clean canary stays clean
No findings on unmarked source
Battle test
Adversarial probes: evasion, residue, idempotence, and “does not throw.” Fail-closed if any probe misses.
Running battery…
Live hit markers
No hits yet. Open Intercept, load a tainted sample, or run the CLI / git hooks — markers land here.
Last intercept
Gate is armed. Load a tainted sample or drop a file on Intercept.
Active channels
- Invisible Unicodeon
- Bidirectional overrideson
- Homoglyphson
- Whitespace stegoon
- Byte-order markon
- Claude / AI comment voiceon
- Variation selectorson
- Tag characterson
- Claude 2026 watermarkon