c-review

c-review performs comprehensive C/C++ security audits by parsing source code into units and systematically asking ten fixed questions about each (bounds, signedness, allocation/free pairing, NUL termination, etc.), then verifying coverage via a ledger check that proves every relevant code location was examined. A sweep phase hunts for bug classes that received no findings in the main pass, and severity is assigned by the reviewers without post-hoc judgment, so findings are treated as unadjudicated.