Five ways to deploy on SaaS.One execution guardian.
Claude Code plugin, cross-agent skill, GitHub Action, AWS Marketplace, or self-hosted API. Same five signals. Same human-on-the-loop verdict. Same binary-level analysis.
Under 5 minutes. No instrumentation. No runtime overhead.
Same guardian.Pick your surface.
LOCI ships as a plugin, a cross-agent skill, a GitHub Action, an AWS Marketplace SaaS, and a self-hosted option for enterprise CI. Every install path runs the same LCLM model and produces the same five signals — the difference is where the guardian fires and who sees the output.
For developers using Claude Code.
/plugin install loci@claude-code-marketplaceWhat you get
- /loci:preflight — audits the agent's plan before code is written
- /loci:post-edit — reviews the PR after the agent commits
- Stop hook — blocks merge until human approves
- Output rendered inline in the Claude Code terminal
Supported workflows
- Preflight during planning (Step 01)
- Post-edit on every PR (Step 02)
- Human-on-the-loop verdict at merge (Step 03)
For teams using Cursor, Codex, Copilot, Windsurf, and more.
npx skills add auroralabs-loci/loci-claudeWhat you get
- Nine skills: loci-preflight, loci-post-edit, exec-trace, stack-depth, memory-report, control-flow, trends, bug-report, and help
- Runs inside any of 15+ supported agents
- Same five signals from the same LCLM model
- Audit-verified on skills.sh
Supported agents
Claude Code · Cursor · Codex · GitHub Copilot · Windsurf · Gemini · Goose · AMP · Antigravity · Cline · Droid · Kilo · Kiro CLI · OpenCode · Roo · Trae · VSCode · ClawdBot
For teams that want the guardian in CI.
- uses: auroralabs/loci-action@v1
with:
gate: post-edit
fail-on-regression: trueWhat you get
- Runs on every PR in your existing GitHub Actions workflow
- Posts findings as a PR comment with per-signal breakdown
- Blocks merge when signals exceed baseline (configurable)
- Zero runtime overhead — analysis on the compiled artifact
Example PR comment
LOCI — Post-Edit Review
⚠️ Timing regression: +3.4ms in AES_encrypt() (p95, TLS handshake path)
⚠️ Throughput regression: BLE throughput −8% in ble_ll_tx()
✓ Stack budget: within 2KB limit
✓ Power: no quality regression detected
Approve or block below.
For enterprise CI/CD and air-gapped environments.
curl -X POST https://api.loci.dev/v1/gate \
-H "Authorization: Bearer $LOCI_API_KEY" \
-F "binary=@./build/output.elf" \
-F "baseline=@./build/baseline.elf" \
-F "gate=post-edit"What you get
- REST API callable from any CI system (Jenkins, GitLab, Bamboo, Azure DevOps, CircleCI)
- On-prem deployment option for regulated industries
- SSO, audit logging, custom baseline management
- No data leaves your environment (on-prem tier)
Best for
- Enterprise teams with strict CI/data requirements
- Safety-critical systems (MISRA, AUTOSAR, ISO 26262)
- Platforms that aren't GitHub-native
For teams purchasing through AWS.
Subscribe via AWS Marketplace → LOCI SaaSWhat you get
- Single-click SaaS subscription through your AWS account
- Billing consolidated on your existing AWS invoice
- Built on AWS infrastructure — security, performance, reliability
- Deployment options: cloud hosted, AMI/VM in customer VPC, or SageMaker integration
Best for
- Enterprise teams with AWS procurement workflows
- Organizations consolidating vendor billing through AWS
- Teams requiring cloud-native deployment options
Plug in at one stage.Or the full pipeline.
The guardian can fire at any stage of your development workflow — as you type, after build, during test, or at PR merge. Each stage is independently useful. Run all four for continuous coverage.
Code
Incremental .so compile
Function-level signal as you type
Build
Full binary pass
All 5 signals, whole program
Test
Tail & edge case prediction
Paths your suite never reaches
Merge
PR verdict
Blocks if signals exceed baseline
Each stage is independently useful — or run the full layer for continuous coverage.
Install in under 5 minutes.
A minimal working install looks like this:
- 1
Install the plugin or skill.
/plugin install loci or npx skills add auroralabs-loci/loci-claude
- 2
Authenticate.
Run loci auth and log in with your Aurora Labs account. Free tier available.
- 3
Point it at your repo.
LOCI auto-detects compiled artifacts (.elf, .so, .wasm). No config required for most projects.
- 4
Run preflight on a change.
/loci:preflight or open a PR — LOCI analyzes automatically.
- 5
Review and approve.
Human-on-the-loop. You decide what ships.
No code changes. No instrumentation. No new build steps. No long onboarding.
Full documentationBuilt forregulated environments.
LOCI is deployed in safety-critical systems across automotive, industrial, and infrastructure. Enterprise installs support on-prem deployment, SSO, audit logging, and strict data residency controls.
On-Prem Deployment
Full air-gapped option. No binary artifacts leave your environment. LCLM runs entirely inside your VPC.
SSO & RBAC
SAML, OIDC, and custom IdP integration. Role-based access control for verdict approvers and policy admins.
Audit Logging
Every verdict logged — who approved, what signals fired, which baseline was compared. Exportable for compliance audits (SOC 2, ISO 27001, MISRA traceability).
Data Residency
No customer binaries in LCLM training. Binary analysis runs on your binaries in your region. No cross-tenant data exposure.