Read-only mode

Sometimes you only want Kaivo to look at your code, with no risk: auditing an unknown project, understanding a repository, preparing a report. Read-only mode is made for that.

Run kaivo --read-only. Kaivo can read files and search the code, but every file change and every command is denied, whatever the model says and even if you allowed actions earlier.

You can also turn it on during a session with /readonly on, and off with /readonly off. /status reminds you whether you're in read-only mode.

Combined with -p, it's perfect for a script or continuous integration: kaivo -p "Look for hard-coded secrets" --read-only. Even that headless mode, which normally accepts everything, won't be able to write anything.