OCKHAM ─ STRUCTURAL CODE INTELLIGENCE

Every symbol.Every call.One graph.

Ockham compiles every commit into a content-addressed symbol graph — trace call chains, measure blast radius, and lock the functions you can’t afford to break.

SymbolId = sha256(language · path · structure) → stable 32-hex identity

CALL GRAPHcreateScanPipeline() · depth ≤ 5
scanRepo()writeIR()stitch()callGraph()hashFile()upsert()bfs() ↺
● locked @ 56a5879b6 edges · 1 cycle · 0 unresolved
01 · FILEscanned once, shared forevercontent-addressed by sha256
02 · SYMBOL32-hex structural identitystable across every commit
03 · GRAPHone edge per call siteO(E) per commit, zero dupes
04 · LOCKapprovals bound to hashesrenames break loudly

The parts other tools grep for.

Four views over one graph. No plugins, no IDE lock-in — a scan and a browser.

01callers ⇄ callees

Call graphs

BFS in both directions from any symbol — callers and callees, pre-computed at scan time, rendered as a tree you can step through like a debugger.

02blast radius

Impact analysis

Reverse reachability over an O(E) global graph. Point at a function and see exactly which routes, pages and entrypoints break if it changes.

03sha256-bound

Review locks

Approve a function at its canonical hash. Any edit to its name, body, or transitive call tree trips the wire on the next scan — loudly.

04commit ⟶ commit

Structural diffs

Compare any two commits at the symbol level: added, removed, changed — with the whitespace noise already subtracted out.

ockham — scan
$ ockham scan . --at HEAD --push
  tree      225 files · 64d3ca4a
  symbols   +3,104 (skipped 0)
  edges     +5,431 resolved · 10,467 external
  call_graph 4,913 edges across 721 symbols
  ✓ commit d3dec1f indexed

Stop grepping. Start tracing.

works on any TypeScript repo · one CLI · one browser