winget install --id=Evolith.Evolith -e Evolith reads your git history and answers three questions: what features were actually built, how well Evolith understands the project history, and whether anything sensitive has leaked into the repository. Runs entirely offline — no network calls, no data uploaded. Quick start: evolith init evolith collect git evolith features rebuild evolith doctor
> A Project Memory Doctor for your repository. > > One command. Tells you what was built, whether your history is understandable, and whether anything is at risk — entirely offline.
No Rust. No Cargo. No build step.
macOS (Apple Silicon)
curl -fsSL https://github.com/thulasiramk-2310/Evolith/releases/latest/download/evolith-macos-arm64.tar.gz | tar -xz
sudo mv evolith /usr/local/bin/
Linux (x64)
curl -fsSL https://github.com/thulasiramk-2310/Evolith/releases/latest/download/evolith-linux-x64.tar.gz | tar -xz
sudo mv evolith /usr/local/bin/
Windows (x64)
irm https://raw.githubusercontent.com/thulasiramk-2310/Evolith/main/install.ps1 | iex
No PATH editing. No unzipping. Opens a new terminal and evolith is ready.
Manual install (if you prefer)
evolith-windows-x64.zipevolith.exe to a folder in your PATH (e.g. C:\tools\)Verify:
evolith --version
cd your-project # any git repo
evolith init # set up Evolith (takes 1 second)
evolith collect git # read your commit history
evolith features rebuild # reconstruct what was built
evolith doctor # get the full health report
That's it.
evolith doctorProject Story · Team Project
────────────────────────────────────────────────
Your team has 63 commits across 21 features. Evolith can clearly read 14 of them.
✓ 14 features are clearly identified
⚠ 7 features have limited or unknown history
Project Story: Partially Understood
────────────────────────────────────────────────
Security Notes
⚠ Needs Attention Database URL with credentials detected in BACKEND_GUIDE.md
────────────────────────────────────────────────
What To Do
1. Move the database credentials in BACKEND_GUIDE.md to environment variables.
2. Use git filter-repo or BFG Repo Cleaner to remove secrets from git history.
3. Include ticket IDs in commit messages (e.g. AUTH-123, PROJ-42).
Expected Result
Reduced credential risk and a clearer, more complete project history.
────────────────────────────────────────────────
Details
────────────────────────────────────────────────
Identity Coverage: 38.1%
Feature Consistency: 0.61
Identified Features: 14
Unknown Features: 7
Avg Commits / Feature: 3.00
evolith features listYour project has 21 identified features.
1. AUTH-123: migrate jwt flow [active]
2. Pattern auth [active]
3. PR PR-6: backend CI setup [active]
4. Branch frontend [active]
5. Pattern aiml [active]
... +16 more
evolith features explain AUTH-123: migrate jwt flow
──────────────────────────────────────────────────
What happened?
3 commits · 4 file changes · linked to AUTH-123 · on feature/auth-refresh
Why it matters
This feature is clearly identified — 83% of its commits point to the same
feature. Evolith can reliably trace this back through your history.
What to do
Nothing — this feature is in good shape.
Expected result
Your project memory for this feature is reliable.
──────────────────────────────────────────────────
Identity Clarity: Strong
History Strength: Strong
Commits: 3
Work sessions: 2
Linked to: AUTH-123 · feature/auth-refresh
Your git log tells you what changed — not what was built:
$ git log --oneline
a67bae4 chore: add python to .gitignore
623bb8b Merge remote-tracking branch 'origin/feature/backend-auth'
70ff7fb Ignore local environment files
98bed6f feat: AI analysis module
36c677f fix: resolve react setState hydration warnings
b5ae8af fix: move health route before fastify ready
6e8aaab lint fixed
5d0dd65 Merge pull request #6 from VaibhavDataSci/main
... 52 more commits
Evolith reads this history and answers three questions:
| Question | Command |
|---|---|
| What was actually built? | evolith features list |
| How readable is my project history? | evolith doctor |
| Did anything sensitive leak? | evolith doctor --security |
flowchart LR
A[("<b>Git Repository</b>")] -->|"evolith collect git"| B[("<b>Event Store</b>SQLite · local")]
B -->|"evolith features rebuild"| C{"<b>Anchor-AssistedReconstruction</b>ticket IDs · PR refsbranch names"}
C --> D["🧠 <b>Project Memory</b>FeaturesExplainability"]
C --> E["📖 <b>Project Story</b>Clear / Forming / ThinPlain-language diagnosis"]
C --> F["🔒 <b>Security Notes</b>Credential detectionOffline · read-only"]
D --> G(["<b>evolith doctor</b>"])
E --> G
F --> G
No network calls. No uploads. Everything stays on your machine.
# Setup
evolith init
evolith collect git
# Understand your project
evolith features rebuild
evolith features list
evolith features explain
evolith features explain --json
# Health and security
evolith doctor
evolith doctor --security
evolith doctor --json
# History
evolith runs list
evolith runs show 0
All commands support --json for scripting and CI pipelines.
evolith doctor --security scans your tracked files and reports:
| What it finds | Severity |
|---|---|
.env, .env.production, .env.local in git | Needs Attention |
Private key files (id_rsa, *.pem, *.key) | Secrets Exposed |
| API keys — OpenAI, GitHub tokens, AWS, Google, Slack | Needs Attention |
| Database URLs with embedded credentials | Needs Attention |
.env.example / .env.sample (template files) | Worth a Look |
Missing .gitignore rules for sensitive paths | Worth a Look |
No network calls. No modifications. Read-only.
v0.1.0-alpha)What works:
evolith doctor — weighted scoring, adaptive severity orderingevolith doctor --security — offline credential and secret detectionKnown limitations:
Requires Rust 1.75+:
git clone https://github.com/thulasiramk-2310/Evolith.git
cd Evolith
cargo build --release
# binary at: target/release/evolith
Show project structure
crates/
cli/ — commands, doctor, security scanning
event-store/ — SQLite persistence, migrations
session-engine/ — session reconstruction
replay-engine/ — feature reconstruction algorithm
docs/
rfcs/ — RFC-001 through RFC-007
research/ — alpha feedback, validation artifacts
docs/rfcs/RFC-006-repository-health-recommendations-engine.md — doctor scoringdocs/rfcs/RFC-007-security-and-safety-scanning.md — security designCONTRIBUTING.mdMIT