Product
LocalForge
Beta
Zero cloud, zero API keys. Your code never leaves your Mac.
§1 — The pipeline
Three layers, entirely offline, on Apple Silicon
LocalForge intercepts every git commit before it lands, running a regex pass, a CoreML classifier, and a local LLM review, in that order, so the fast checks filter first and the expensive one runs last.
01
Rust regex
Fast, cheap first pass for hardcoded secrets and obvious patterns.
02
CoreML
Runs on the Apple Neural Engine to classify likely issues in the diff.
03
Local LLM
Qwen2.5-Coder via MLX reviews the staged diff for logic bugs and dead code.
§2 — What it catches
Layer 3 precision 0.982, false-positive rate 0.018
- →Hardcoded secrets and credentials
- →Injection vulnerabilities
- →Dead code
- →Logic bugs in the staged diff
Compliance export (JSON/CSV) is available for SOC 2, ISO 27001, or due-diligence use. MIT licensed. Native macOS SwiftUI app with Monitor and Repos tabs, plus an MCP JSON-RPC server for IDE integration.
§3 — Install
One command
curl -fsSL https://localforge.dev/install.sh | sh
localforge --install