What I hold to, and where Truemend holds to it.
Truemend is built the way I work. Each principle below shows up twice: in how I run an engagement, and in what the product does on its own.
Read before proposing.
How I workI read the repository before I suggest anything. Interviews come after the evidence.
In TruemendA run scores the whole codebase before the report recommends a change.
Don’t guess.
How I workIf I can’t show a change is safe, I don’t make it. I take it to the person who owns the code.
In TruemendChanges it can verify arrive as diffs. Everything else goes to a person, with evidence.
Do the free work first.
How I workMechanical cleanup comes before anything you would pay for.
In TruemendThe report separates what clears at no cost from what it prices.
Leave the big calls with the owners.
How I workArchitecture belongs to the team that will live with it.
In TruemendStructural findings come back as evidence and options. They are never applied automatically.
Keep the code where it lives.
How I workI work on your machine or with read-only access, and I don’t keep a copy.
In TruemendCore analysis runs on your infrastructure, without a model.
Publish the losses.
How I workWhen I’m wrong, it goes on the record.
In TruemendBenchmarks it loses stay published. Rules that fail blind review are switched off, with the reason.
Make myself unnecessary.
How I workAn engagement is done when the team can keep the code straight without me.
In TruemendIt runs in your CI, so the standard holds after I leave.