# Parry — Deterministic AST Code Guardrail for AI Coding Agents

> Parry is an open-source, sub-millisecond (< 1ms) AST code guardrail and pre-commit security scanner for AI coding assistants (Claude Code, Cursor, Windsurf, OpenAI Codex, Gemini CLI). It prevents hallucinated package imports, dropped authentication checks, unit test mock cheating, and structural code slop with zero LLM calls and zero token cost.

## Core Capabilities

- **Sub-Millisecond AST Scanning (< 1ms):** Deterministic syntax-tree and lockfile analysis running locally at git commit. Consumes zero LLM tokens and makes zero cloud network calls.
- **Top-100 Evil AI Benchmark:** Deflects 100 of 100 real-world AI coding vulnerabilities across Python, TypeScript, JavaScript, Rust/Solana, and EVM/Solidity with 0.0% false positives on clean code.
- **Hallucinated Package & Dependency Prevention:** Detects invented package names and unlisted imports missing from `package-lock.json`, `uv.lock`, or `Cargo.lock` to prevent typosquatting and slopsquatting attacks.
- **Anti-Mock-Cheating & Test Integrity:** Detects when an AI agent modifies test mocks or deletes assertions instead of fixing the broken service logic.
- **Dropped Auth & Access Control Checks:** Flags missing server-side authorization, BOLA/IDOR vulnerabilities, and permission bypasses introduced during rapid vibe coding.
- **Prompt Injection Sanitization:** Strips zero-width characters and adversarial injection prompts from repository rule files (`AGENTS.md`, `.cursorrules`) before they reach agent contexts.
- **Structural Code Slop Detection:** Enforces clean architecture by flagging cross-file duplicate helper functions, safety escape hatches (`as any`, `@ts-ignore`, bare `except`, `.unwrap()`), and loop N+1 `await` database queries.
- **Turnkey Tooling Integration:** Native stdio MCP server for Claude Code and Cursor, pre-commit git hooks, and an automated GitHub Action PR Shield bot (`uses: AI-Ops1/Parry@v1`).

## Quickstart

Run the open-source CLI and Top-100 benchmark locally (Python 3.9+, zero third-party dependencies):
```bash
git clone https://github.com/AI-Ops1/Parry.git && cd Parry && python3 parry.py bench
```

Audit any public GitHub repository or pull request in 3 seconds without installing:
Visit: https://parry.scopeledger.net/#scan-repo

## Documentation & Links

- Website: https://parry.scopeledger.net/
- GitHub Repository: https://github.com/AI-Ops1/Parry
- Full Technical Specification: https://parry.scopeledger.net/llms-full.txt
- Solo Developer Setup Guide: https://parry.scopeledger.net/guide/solo-devs
- Web3 & Agency Playbook: https://parry.scopeledger.net/guide/web3-agencies
- Benchmark Leaderboard: https://parry.scopeledger.net/#benchmark
- Pricing: Free MIT core for individual and commercial use; Solo Pro ($29 lifetime / $5 mo) and Team ($19 mo)