CRA Article 14 · read-only scan

Article 14 reporting starts 11 September 2026

Article 14 reporting has applied since 11 September 2026

One command, writes nothing — not certification. Curbpack scans your repo read-only on your machine; we never see your code.

Curbpack runs local rule-pack checks offline. Findings are structural evidence for human review.

We do not use a language model to decide whether you passed.

Read-only first — curl …/main/scripts/install.sh | sh then curbpack scan · Windows · macOS · Linux · install doc

Not conformity assessment. Not CE marking. Not a notified-body opinion.

Teaching sample — not a certificate

Development supported by RISE Research Institutes of Sweden as an applied research / competence object.
RISE does not certify products that use Curbpack gate results.

How it works

Scan read-only → optional init → local check → review pack → human review.

Curbpack runs local rule-pack checks offline. Findings are structural evidence for human review. We do not use a language model to decide whether you passed.

Three ways in (Write, Bring, CI): 60-second paths · how it works

Receiving a pack? Artifact trust table · Receiving submissions · Sample review-pack · In-repo: curbpack review --repo (for reviewers)

01

Read-only scan

install.sh → curbpack scan — no files written

02

Local check

On your machine

03

Review pack

Hand to buyer

04

Human review

You decide claims

Optional Write path: curb outlines → dual drafts → cite-check → check. Bring and CI skip outlines. Detail: how it works · Voice: voice and terms · Optional writer aid: research brief sample

Who it is for

Reviewers

Ask for a buyer one-pager and review-pack, then use the artifact trust table — not a certification score. Receiving submissions? Triage offline with curbpack review.

For reviewers

Artifact trust table · Receiving submissions · Sample review-pack

Suppliers & builders

Green checks in your repo in under ten minutes. Dual install for Windows (PowerShell) and macOS/Linux — same doctor → demo → init → check → share ladder.

Full ladder

Install: docs/user-guides/install.md

Authorities

What each artifact means and does not mean — same trust table reviewers use, without treating gate green as conformity.

View docs

Release status and audit limitations: the installer supplies v0.5.5; Action pin stays @v0.5.2. Production qualification remains incomplete.