Enterprise Tier¶

Unlimited limits and organization-grade governance. All 23 tools remain available with no limits on depth, nodes, files, or paths, plus advanced governance features.

Overview¶

All Pro Tools Unlimited¶

Enterprise provides the same tools as Pro and Community, but with no limits and advanced governance:

Compliance & Policy (Unlimited + Enhanced)¶

Same tools as Pro, unlimited with enterprise governance: - code_policy_check - Full compliance verification (now all standards) - verify_policy_integrity - Policy verification (now organization-wide)

What Enterprise enables: - Verify SOC 2, ISO 27001, HIPAA, PCI-DSS, GDPR compliance - Custom organization-specific policy rules - Organization-wide policy verification - Complete audit trail - Unlimited compliance checks

Custom Rules¶

Define organization-specific policies:

• Coding standards enforcement
• Architecture rules
• Security requirements
• Documentation requirements
• Naming conventions

All Limits Removed¶

All 23 tools available with no limits:

Enterprise removes ALL limits from ALL tools.

Audit Logging¶

Complete audit trail for compliance:

• Every tool invocation logged
• User attribution
• Timestamp tracking
• Result capture
• Export to SIEM systems

Enterprise Features in Detail¶

Compliance Standards¶

Built-in support for major compliance frameworks:

Example check:

{
  "tool": "code_policy_check",
  "parameters": {
    "paths": ["src/"],
    "compliance_standards": ["SOC2", "HIPAA"],
    "generate_report": true
  }
}

Custom Rule Engine¶

Define your organization's rules:

# .code-scalpel/custom-rules.yaml
rules:
  - id: require-error-codes
    description: All exceptions must have error codes
    pattern: "raise.*Exception\\([^E]"
    severity: error

  - id: no-print-in-production
    description: Use logging instead of print
    pattern: "print\\("
    severity: warning
    exclude: ["tests/", "scripts/"]

  - id: require-docstrings
    description: Public functions need docstrings
    check: function_has_docstring
    scope: public_functions
    severity: error

Audit Export¶

Export audit logs to your SIEM:

{
  "audit_config": {
    "enabled": true,
    "format": "json",
    "destinations": [
      {"type": "file", "path": "/var/log/code-scalpel/audit.json"},
      {"type": "syslog", "host": "siem.internal", "port": 514},
      {"type": "webhook", "url": "https://audit.internal/events"}
    ],
    "include_results": true,
    "retention_days": 90
  }
}

Organization Binding¶

Enterprise licenses are bound to your organization:

• User limits per license
• Domain verification
• Single sign-on integration
• License usage reporting

Enterprise Limits¶

Unlimited everything:

Installation¶

Organization License¶

1. Contact sales for enterprise evaluation
2. Complete organization verification
3. Receive organization .jwt license
4. Deploy to your infrastructure

Deployment Options¶

# Docker deployment
docker run -v /path/to/license.jwt:/license.jwt \
           -e CODE_SCALPEL_LICENSE_PATH=/license.jwt \
           ghcr.io/codescalpel/code-scalpel-enterprise

Verify Enterprise¶

# Check your tier
code-scalpel --version
# Output: Code Scalpel v1.4.0 (Enterprise)

# Check license details
code-scalpel license info
# Output: Organization: Acme Corp
#         Users: 50/unlimited
#         Features: All
#         Expires: 2025-12-31

Example: Enterprise Workflow¶

Compliance Audit¶

1. verify_policy_integrity()
   → Ensure policies haven't been tampered with

2. code_policy_check(
     paths=["src/"],
     compliance_standards=["SOC2", "HIPAA"],
     generate_report=true
   )
   → Full compliance report

3. [Export report for auditors]

Pre-Deployment Gate¶

1. cross_file_security_scan(project_root=".")
   → No critical vulnerabilities

2. code_policy_check(paths=["src/"], rules=["all"])
   → Meets all coding standards

3. scan_dependencies(scan_vulnerabilities=true)
   → No vulnerable packages

4. [Deploy only if all gates pass]

Custom Policy Enforcement¶

1. Define rules in .code-scalpel/custom-rules.yaml

2. code_policy_check(paths=["src/"], rules=["custom"])
   → Check organization rules

3. [Integrate into CI/CD pipeline]

Support¶

• Priority support: Response within 4 hours
• Dedicated contact: Named support engineer
• Onboarding assistance: Help setting up policies
• Training: Team training sessions available
• Custom development: Feature requests prioritized

Security & Compliance¶

Data Handling¶

• All analysis runs locally
• No code sent to external servers
• Results stored only where you configure
• Air-gapped deployment supported

License Security¶

• RSA-signed license files
• Cryptographic verification
• Tamper detection
• Revocation support

Audit Features¶

• Full operation logging
• User attribution
• Compliance reporting
• SIEM integration

Getting Started¶

Contact Sales Request Demo

Next Steps¶

• Policy Tools - Compliance checking tools
• Configuration Guide - Enterprise configuration
• Security Guide - Security best practices