What changed, including what went wrong.

Fixed a packaging bug that could silently skip some scanner findings

The Semgrep rules and the Joern query used by our static-analysis stage weren't being packaged correctly in a recent release, which meant some of their findings could be silently skipped rather than reported. Fixed so both are packaged and run as intended. Hosted Semgrep stays off by default until we've measured its real signal-to-noise on top of what we already run.

Faster scans on large repositories, and three scanner bugs fixed

Scanning large repos is now meaningfully faster: on the Linux kernel (1.46M commits, ~95k files), a cold scan dropped from roughly 12+ minutes to about 5 minutes, and a warm re-scan to about 2.5 minutes, mainly from overlapping git/network/parsing work that used to run sequentially and caching more per-file state between scans. Three real bugs were found and fixed along the way: a quadratic slowdown in error handling on repos with many parse errors, a parser-cache collision that applied the wrong language grammar to .ts and .tsx files interchangeably once scanning ran in parallel (nondeterministic, wrong results on some files), and a history-depth setting that wasn't persisting correctly on warm scans.

Fixed AIRview and Docs occasionally dropping entire outputs

A formatting quirk in the underlying model's output could cause AIRview and Docs to silently drop an entire batch of generated descriptions when one response came back malformed. The model is now asked to return valid JSON directly, significantly reducing these failures.

Removing a repo from an installation now deletes its retained checkout, and the privacy policy was corrected to match

An internal audit found that deselecting a single repository from an installation (while keeping the rest) only hid it from the dashboard - the working copy of that repo's source code, kept on disk between scans for incremental re-scanning, was not being deleted. We fixed the deletion path the same day: removing a repo now purges its on-disk checkout immediately, not just on a full uninstall. The audit also found our privacy policy under-described one feature: Docs sync (AIRview Docs) sends the source of individual public functions and classes to write descriptions, not only "derived evidence" as a prior version of the policy implied. The policy text was corrected to state this plainly rather than changing what the feature does.

Time from discovery to a fix being live: same day.

Fixed a billing bug where a refund could silently convert purchased credit into plan credit

If a reserved charge came out of purchased top-up credit (because the plan's included credit was already used up) and that charge was later refunded, the refund was going back into the plan's credit bucket instead of the top-up balance it actually came from - meaning credit a customer paid for could quietly turn into credit that resets at renewal instead of staying theirs. Fixed so a refund returns to the balance it was drawn from. A separate bug in the same pass: free-tier installs were being held to a per-repo review cap meant only for paid plans; that cap is now paid-only, as intended.

Fixed credit top-ups and affiliate commissions priced in the wrong currency

Checkout can localize prices into a customer's own currency, which was throwing off how much credit a top-up granted and how affiliate commissions were calculated. Both are now priced correctly in USD regardless of checkout currency.

Affiliate program is now AIR-only, with updated commission and annual pricing

Affiliate referrals and commissions now apply only to the AIR plan, and commission is calculated on actual earnings after fees rather than the tax-inclusive total. The annual AIR plan's included credit was also adjusted to reflect its two free months.

Flash plan price updated; credit top-ups now carry a service charge

The Flash plan is now $10/month, and credit top-ups carry a service charge of $1.15 per $1.00 of credit purchased, plus tax. You still receive exactly the credit you pay for.