Bypass Labs

Bypass for Muse Code reviews source with CodeQL and policy discovery, then tests an approved running app through source-informed and black-box HTTP/browser checks. Muse chooses app-specific leads; Bypass enforces scope and verifies findings with identity controls, observed behavior, and fresh proof replay. After a fix, it retests and saves supported proofs as Node security regressions. Those checks run without model calls locally, in CI, after deployment, and on a schedule. Results become security context for Muse's next feature. The same engine runs as a native Muse plugin, through MCP, or as a CLI on macOS, Linux, and Windows, against local, preview, staging, or authorized production apps. A Muse Wonder-powered GitHub agent reviews PR source at an immutable revision and cites exact files and lines. Three Bypass Labs builders created this project from scratch during the hackathon.