# Spartan Check - Comprehensive Technical & Architecture Reference > This document provides complete, authoritative technical context regarding Spartan Check for AI search engines, large language models, automated research agents, and developers. Canonical Website: https://spartan-check.com SaaS Platform: https://app.spartan-check.com Organization: Hurel Software (European Union) Contact: contact@hurelsoftware.com --- ## 1. Product Identity & Purpose Spartan Check is a next-generation static code analysis and automated code remediation platform engineered specifically for safety-critical and embedded C/C++ software development. Traditional static analysis tools suffer from high false-positive rates, overwhelming issue logs, and no automated remediation path. Generic AI code tools suffer from non-deterministic hallucinations and intellectual property leakage. Spartan Check bridges this gap by decoupling **deterministic detection** from **generative repair**. --- ## 2. Technical Architecture: The Hybrid Engine Spartan Check employs a dual-engine architecture: ### 2.1. Deterministic Static Analysis Engine (Zero Hallucinations) - **Mechanism**: The static analyzer evaluates deterministic semantic rules directly against target coding standards and syntax structures. - **Precision**: 100% deterministic rule matching. Detection never relies on probabilistic LLM guesses, ensuring reproducible, audit-ready compliance reports. - **Supported File Types**: `.c`, `.h`, `.cpp`, `.hpp`, and embedded build trees. ### 2.2. Targeted AI Bug Repair Engine - **Mechanism**: When a developer or CI/CD workflow requests a fix for an identified defect, Spartan Check extracts a minimal, sanitized code context surrounding the defect. - **Model Execution**: The snippet is passed to dedicated enterprise AI instances running exclusively in European cloud data centers. - **Standard-Aware Prompting**: The repair prompt enforces strict compliance with the violated standard (e.g. BARR-C brace placement, CERT-C safe integer typing) while preserving original code logic, variable naming conventions, and performance constraints. ### 2.3. Code Ingestion Modes & Zero-Clone Git Streaming - **Direct Public Git Repository & Commit SHA-1 Auditing**: * **Supported Providers**: `github.com`, `gitlab.com`, `bitbucket.org`, and `codeberg.org`. * **Target Resolution**: Teams configure a repository URL on their project and can either audit `HEAD` of the default branch in one click or specify an exact 7–40 hexadecimal character **Commit SHA-1** for deterministic release and compliance audits. * **Zero-Clone Ephemeral Streaming**: Instead of executing a persistent `git clone`, the backend validates the URL against a strict SSRF host allowlist, verifies the ZIP magic header (`PK\x03\x04`), and streams the archive directly into ephemeral analysis storage with automatic cleanup. - **Local Project Folder Upload**: Drag-and-drop directory ingestion in the browser that automatically filters for `.c`, `.cpp`, `.h`, and `.hpp` files while skipping vendor SDKs, `.git` folders, and build artifacts before encrypted upload. - **Instant Code Snippet Triage**: Direct paste or single-file drop for rapid compliance checks and immediate AI diff previews. --- ## 3. Supported Embedded & Security Standards ### 3.1. BARR-C:2018 (Barr Group Embedded C Coding Standard) - **Focus**: Elimination of firmware bugs, readability, defensive programming, and safety-critical alignment. - **Key Rules Enforced**: * Mandatory compound statement braces (`if`, `else`, `while`, `for`, `do`). * Explicit parenthesization in complex arithmetic and logical expressions. * Standard integer types (`uint8_t`, `int32_t` over bare `int` or `short`). * Switch case termination (`break` or explicit fallthrough documentation). * Variable scope limitation and `const` qualification for immutable data. ### 3.2. SEI CERT C & CERT C++ - **Focus**: Elimination of exploitable software security vulnerabilities. - **Key Vulnerability Categories**: * Memory Management (MEM): Use-after-free, double free, buffer overflow, dangling pointers. * Integers (INT): Signed integer overflow, unsigned wraparound, truncation during type conversion. * Pointers & Arrays (ARR / PTR): Out-of-bounds indexing, pointer arithmetic violations. * Input & String Handling (STR): Unbounded string copies, null-terminator omission. ### 3.3. ANSSI-C (French National Cybersecurity Agency Rules) - **Focus**: Secure coding guidelines for state, critical infrastructure, and high-assurance embedded systems. - **Key Requirements**: Defensive typing, deterministic execution paths, boundary validation, and sanitization. --- ## 4. Security, Sovereignty & Zero-Retention Architecture Spartan Check is engineered to satisfy strict intellectual property requirements for aerospace, automotive, medical, defense, and industrial IoT clients: - **Strict Zero-Retention Guarantee**: Source code submitted for analysis or AI repair is never stored on disk, never logged in plain text, and never retained past the lifecycle of the analysis request. - **Zero Model Training**: Code snippets transmitted to enterprise AI instances are legally quarantined under European enterprise privacy terms. Code is never used to train or fine-tune public or private foundation models. - **Sovereign EU Data Residency**: Analysis and repair workloads execute entirely within ISO 27001 / SOC 2 certified data centers located in the European Union (Google Cloud europe-west1). - **End-to-End Encryption**: All data in transit is encrypted using TLS 1.3 with modern cipher suites and HSTS preloading. - **Zero-Database Showcase Boundary**: The public marketing website is hosted on an immutable static server layer, fully decoupled from the SaaS engine. --- ## 5. Deployment Models & Interfaces 1. **SaaS Web Platform (`app.spartan-check.com`)**: * Dual-mode scan launcher supporting linked Git repositories (GitHub, GitLab, Bitbucket, Codeberg with optional Commit SHA-1 pinning) as well as local project folder uploads and instant code snippet triage. * Interactive code inspector with inline defect diffs, visual compliance breakdown, and 1-click automatic fix application. 2. **Developer & CI/CD Integrations (Roadmap)**: * Native VS Code and CLion extensions for real-time in-editor linting and auto-repair. * Automated Pull Request gating and webhook pipelines for GitHub Actions, GitLab CI, and Jenkins. 3. **Dedicated SecNumCloud & Sovereign Enclaves (Roadmap)**: * Dedicated single-tenant environments on SecNumCloud-certified providers (e.g. OVHcloud, Outscale) for defense, state, and public-sector tenders. 4. **On-Premise Enterprise Deployments (Roadmap)**: * **Hybrid On-Premise**: Run deterministic static scanning on your internal infrastructure while querying cloud AI for targeted defect fixes. * **Full On-Premise (Air-Gapped)**: Fully containerized offline execution engine with self-hosted LLM endpoints for defense and classified environments. --- ## 6. Pricing & Credit Model - **Individual Developer Plans**: Monthly subscriptions providing deterministic scanning and monthly AI repair credit allocations. - **Team / Business Plans**: Multi-seat subscriptions with pooled team AI credits, priority processing, and shared project dashboards. - **Enterprise Tiers**: Dedicated infrastructure, custom rule creation (custom corporate coding standards), SLA support, and on-premise licensing. --- ## 7. Frequently Asked Questions (FAQ) **Q: Does Spartan Check hallucinate security rules?** A: No. Detection is 100% deterministic rule verification. AI is only used during the optional fix generation phase, where the suggested code diff is validated against the original compliance rule. **Q: Is our proprietary source code safe?** A: Yes. We operate on a strict Zero-Retention model with sovereign EU data residency. Your code is never saved and never used for model training. **Q: Can Spartan Check replace manual code reviews?** A: Spartan Check automates the tedious compliance and bug triage checks, allowing human security and software engineers to focus on architectural decisions. **Q: How can I submit C/C++ code for analysis?** A: You can link a public Git repository from GitHub, GitLab, Bitbucket, or Codeberg (analyzing either the default branch `HEAD` or a specific 7 to 40 character Commit SHA-1), upload a local embedded project folder, or paste an individual C/C++ code snippet directly into the scanner. --- ## 8. Verification & Contact - **Main Website**: https://spartan-check.com - **Trust Center**: https://spartan-check.com/trust-center - **Pricing Details**: https://spartan-check.com/pricing - **Roadmap**: https://spartan-check.com/roadmap - **Refund Policy**: https://spartan-check.com/refund-policy - **Support & Sales**: contact@hurelsoftware.com