LOCAL FORENSIC WORKSPACE · ZERO TELEMETRY

Forensic tools for problems linters can't explain.

Trace the value, artifact or configuration that actually caused the failure. Nothing leaves the Keep.

LOCAL INDEX
DAILY CORE / LOCAL

JSON Workbench

Loss-aware local JSON validation, formatting and forensic diagnostics with immutable original input.

DAILY CORE / LOCAL

YAML ↔ JSON ↔ TOML Workbench

Loss-aware local YAML, JSON and TOML safe-subset validation and conversion with explicit incompatibility reporting.

DAILY CORE / LOCAL

Structured Data Table Lab

Local CSV, TSV, JSON and JSONL table analysis with dialect confidence, quarantine evidence and non-coercive type inference.

DAILY CORE / LOCAL

XML Workbench

Safety-first local XML 1.0 analysis, deterministic formatting and ordered XML-to-JSON conversion with DOCTYPE/entity quarantine.

DAILY CORE / LOCAL

Base64 / URL / HTML Codec

Unicode-safe local Base64, Base64URL, URL-component and HTML transforms with explicit transform provenance.

DAILY CORE / LOCAL

URL Anatomy Inspector

Offline WHATWG URL anatomy, normalization, duplicate query, IDN and literal network-target diagnostics without DNS or requests.

DAILY CORE / LOCAL

Hash / HMAC / Checksum Lab

Local exact-byte SHA-256, HMAC-SHA-256 verification and CRC-32/IEEE analysis with explicit crypto-provider boundaries.

DAILY CORE / LOCAL

CIDR / IP Network Lab

Exact offline IPv4/IPv6 CIDR inspection, containment, overlap and minimal range covering with BigInt arithmetic and no DNS lookup.

DAILY CORE / LOCAL

Regex Portability & ReDoS Inspector

Local ECMAScript regex syntax, portability and conservative structural ReDoS analysis with no foreign-engine or match execution.

DAILY CORE / LOCAL

UUID / ULID / NanoID Generator & Inspector

Local UUID and ULID inspection plus explicit-provider UUIDv4, UUIDv7, ULID and unbiased NanoID generation with provenance and ordering boundaries.

DAILY CORE / LOCAL

Unix Time & Timezone Lab

Offline Unix timestamp and ISO-8601 interpretation with explicit UTC/IANA timezone rendering and precision diagnostics.

DAILY CORE / LOCAL

JWT / PASETO Claims Lab

Offline JWT and PASETO structure inspection with claim-time diagnostics and an explicit no-verification boundary.

DAILY CORE / LOCAL

cURL ↔ Code Converter

Static local conversion of bounded cURL request syntax into readable Python or JavaScript request code without executing requests.

DAILY CORE / LOCAL

Cron Builder & Execution Explainer

Bounded offline five-field cron parsing, expansion and next-run explanation with explicit UTC reference semantics.

DAILY CORE / LOCAL

SQL Dialect Workbench

Static local SQL portability inspection for PostgreSQL, MySQL, SQLite and SQL Server signals with no database execution.

DAILY CORE / LOCAL

Text / JSON Structural Diff

Local JSON structural or deterministic line-level text comparison with immutable originals and bounded change evidence.

DAILY CORE / LOCAL

Markdown Preview & Security Sanitizer

Local conservative Markdown preview sanitization with raw HTML escaping and dangerous URI-scheme blocking.

DAILY CORE / LOCAL

SVG Optimizer / Sanitizer / Data URI Encoder

Conservative local SVG sanitization, whitespace compaction and percent-encoded data-URI derivation with external references denied.

DAILY CORE / LOCAL

SemVer Range Explainer

Deterministic local SemVer comparator, caret, tilde and OR-range expansion with explicit prerelease boundaries.

DAILY CORE / LOCAL

JSONPath / JMESPath Query Lab

Bounded local JSONPath and JMESPath-style query subset with step trace, result limits and fail-closed unsupported syntax.

FORENSIC CORE / LOCAL

OpenAPI Reality Drift Checker

Local OpenAPI declared-vs-observed operation drift analysis without sending requests.

FORENSIC CORE / LOCAL

API / Spec / SDK Triangulator

Local API, specification and SDK operation-inventory triangulation with explicit drift evidence.

FORENSIC CORE / LOCAL

Secret Reference Materialization Auditor

Local static inspection of secret references versus literal materialization markers.

FORENSIC CORE / LOCAL

Public Artifact Leak Auditor

Local public-artifact inventory inspection for source maps, environment files and secret-bearing surfaces.

FORENSIC CORE / LOCAL

Static Egress Surface Auditor

Local source-text inspection for network-capable primitives and remote URL surfaces without executing code.

FORENSIC CORE / LOCAL

Agent Transcript Exposure Forensics

Local transcript and tool-trace inspection for privileged prompt, argument and token exposure markers.

FORENSIC CORE / LOCAL

Compose Effective Environment Tracer

Local Docker Compose environment-reference tracing with explicit supplied values and fallbacks.

FORENSIC CORE / LOCAL

Wrangler Binding & Secret Contract Auditor

Local Wrangler configuration inspection for binding placement and secret-like plain-variable risks.

FORENSIC CORE / LOCAL

Dependency Policy Drift Auditor

Local dependency declaration, resolution and policy drift inspection without registry access.

FORENSIC CORE / LOCAL

Helm Override Blast-Radius Simulator

Local static Helm override blast-radius analysis without rendering charts or contacting a cluster.

FORENSIC CORE / LOCAL

Tailwind v4 Theme Resolution Inspector

Local Tailwind v4 theme-token declaration and reference resolution analysis without running Tailwind.

FORENSIC CORE / LOCAL

Build-Time / Runtime Config Provenance Matrix

Local build-time, runtime, public and secret-like configuration provenance classification.

FORENSIC CORE / LOCAL

Environment & Secret Flow Graph

Local environment-reference graph construction with secret-like source and public-like sink analysis.

SECURE SHARE & RELEASE / LOCAL

Support Evidence Sanitizer & Share Pack

Local pattern-based support-evidence redaction with deterministic share-safe output markers.

SECURE SHARE & RELEASE / LOCAL

Log & Stack-Trace Sanitizer / Timeline

Local log and stack-trace redaction with deterministic timestamp timeline extraction.

SECURE SHARE & RELEASE / LOCAL

Release Package Forensic Auditor

Local release-package inventory inspection for unexpected source, environment and debug artifacts.

SECURE SHARE & RELEASE / LOCAL

Dev / CI / Production Environment Parity Inspector

Local dev, CI and production environment-map comparison with explicit ignored keys.

SECURE SHARE & RELEASE / LOCAL

OAuth/OIDC Offline Forensics Lab

Offline JWT-shaped OAuth/OIDC artifact decoding with explicit no-verification and no-discovery boundaries.

01 / CAUSAL ANALYSIS

Find the first wrong assumption.

Trace config, runtime, specification and artifact state through evidence instead of guessing from the final error message.

02 / PROVENANCE & TIMELINE

See where a value came from.

Keep declaration, transformation, materialization and consumer stages explicit so every finding can be reconstructed.

03 / EVIDENCE LOCKER

Originals stay immutable.

Analysis views may mask. Sanitized output is always a separate derivative with an auditable original-to-result mapping.

SIGNAL GRID / WORKFLOW

Input → interpretation → evidence → provenance → result.

OctetKeep is not a pile of formatters. Every serious workflow is designed to preserve the original artifact, expose the reasoning path and disclose fidelity boundaries.

01InspectImmutable source
02ExplainCausal evidence
03DeriveExplicit transform
04ShareSanitized artifact
38 / ACTIVE

One local workspace. Three operational layers.

TRUST CENTER / DEFAULT DENY

No upload path. No telemetry path. No hidden network fallback.

The Web runtime is compiled under connect-src 'none', exact release manifests and a fail-closed local service-worker cache. Analysis engines declare network, filesystem and shell capabilities explicitly.

NETWORKDENY TELEMETRYNONE ORIGINALIMMUTABLE RELEASEEXACT SHA
OPEN THE KEEP

Start with the artifact you already have.

No account is required for the Web workspace. Professional use is allowed; paid editions expand local workflow scale, CLI/CI, policy and assurance capabilities.