InvisableOS
Gate armed

Intercept

Filter and rewrite

Paste or drop source. InvisableOS strips invisible Unicode, folds homoglyphs, kills bidi overrides, and rewrites Claude-voiced comments before anything is allowed near git.

  1. 01 Incoming
  2. 02 Detect
  3. 03 Rewrite
  4. 04 VCS
Verdict
tainted
Risk
68
Findings
4
Marks
5
Lang
go
  • Strip invisible / format characters3
  • Strip Claude / AI-voiced comments1
  • Expand tabs to 2-space indent1

Channels

  • VARIATION SELECTOR-1

    high

    U+FE00 is invisible and used in research text watermarks.

    L10:12·func Verify︀(sig string, body []byte, secret string) bool {

  • Bidirectional RIGHT-TO-LEFT OVERRIDE

    critical

    U+202E can invert or hide source. Trojan Source (CVE-2021-42574) class.

    L14:5·// ‮esle//‬ if sig looks fine, still compare

  • Bidirectional POP DIRECTIONAL FORMATTING

    critical

    U+202C can invert or hide source. Trojan Source (CVE-2021-42574) class.

    L14:12·// ‮esle//‬ if sig looks fine, still compare

  • AI / Claude comment voice

    medium

    Tutorial or assistant phrasing typical of Anthropic and other LLM codegen.

    L9:1·// I'll create a production-ready verifier.

Incoming
1package webhook
2 
3import (
4	"crypto/hmac"
5	"crypto/sha256"
6	"encoding/hex"
7)
8 
9// I'll create a production-ready verifier.
10func Verify︀(sig string, body []byte, secret string) bool {
11	mac := hmac.New(sha256.New, []byte(secret))
12	mac.Write(body)
13	expect := hex.EncodeToString(mac.Sum(nil))
14	// ‮esle//‬ if sig looks fine, still compare
15	return hmac.Equal([]byte(expect), []byte(sig))
16}
Rewritten
1package webhook
2 
3import (
4  "crypto/hmac"
5  "crypto/sha256"
6  "encoding/hex"
7)
8 
9func Verify(sig string, body []byte, secret string) bool {
10  mac := hmac.New(sha256.New, []byte(secret))
11  mac.Write(body)
12  expect := hex.EncodeToString(mac.Sum(nil))
13  // esle// if sig looks fine, still compare
14  return hmac.Equal([]byte(expect), []byte(sig))
15}