LogicProof CLI (logicproof)

Standalone Native Binaries for Mathematical Security & Business Logic Verification

Zero Dependencies. Zero Code Retention. Sub-Second Local Pre-Push Verification.

Installation • Releases • CLI Usage • Git Hook • Checksums

---

📥 Quick Installation

LogicProof is distributed as a single standalone native executable with the Z3 SMT solver statically embedded. You do not need Python, Node, Docker, or external compilers installed.

Linux (x86_64)

curl -fsSL -o logicproof https://github.com/logicproof-ai/logicproof-cli/releases/latest/download/logicproof-linux-x64
chmod +x logicproof
sudo mv logicproof /usr/local/bin/
logicproof --version

macOS (Apple Silicon arm64 / Intel x64)

curl -fsSL -o logicproof https://github.com/logicproof-ai/logicproof-cli/releases/latest/download/logicproof-macos
chmod +x logicproof
sudo mv logicproof /usr/local/bin/
logicproof --version

Windows (x86_64 PowerShell)

Invoke-WebRequest -Uri "https://github.com/logicproof-ai/logicproof-cli/releases/latest/download/logicproof-windows-x64.exe" -OutFile "logicproof.exe"
.\logicproof.exe --version

---

🔑 Activating Your License

Before running your first analysis, activate your client license key from the LogicProof Portal:

logicproof --activar YOUR_API_KEY

For continuous integration servers or transient container environments, export the environment variable:

export LOGICPROOF_API_KEY=your_api_key

🔒 Privacy Guarantee: The CLI performs verification completely offline and locally. The only network call made by the binary is an encrypted license token verification. No source code, file contents, or AST structures ever leave your machine.

---

💻 CLI Usage Guide

1. Analyze an Entire Repository

logicproof .

2. Analyze a Specific File or Directory

logicproof src/api/payments.ts
logicproof app/services/

3. Fast Mode (Rapid Development)

Focuses on immediate path exploration for instant feedback during active development:

logicproof . --fast

4. Critical Breaches Only (Zero Noise)

Hides informational review notes and only outputs mathematically proven high-severity vulnerabilities:

logicproof . --solo-criticas

5. Generate SARIF 2.1.0 for IDEs and CI/CD

logicproof . --sarif audit.sarif

6. Machine-Readable JSON Output

logicproof . --json > findings.json

---

🪝 Pre-Push Git Hook: Catch Flaws Before Committing

Never push a vulnerability to remote branches again. Install the automated pre-push hook with a single command:

logicproof --instalar-hook

This installs .git/hooks/pre-push. Every time you run git push:

• LogicProof verifies changed files in sub-seconds.
• If a critical breach or invariant violation is proven, the push is safely blocked.
• You receive the exact counterexample and certified code patch in your terminal.

To uninstall:

logicproof --desinstalar-hook

---

🛡️ Supported Vulnerability & Logic Coverage

• OWASP / Taint Sinks: SQL Injection, SSRF, Command Injection (RCE), Path Traversal, Insecure Direct Object References (IDOR/BOLA), Reflected/Stored XSS, Mass Assignment, Insecure Deserialization, Dynamic Code Evaluation.
• Business Logic Invariants: Custom declarative constraints via logicproof.yaml (@balance >= 0, @shipped implies @paid).
• Auto-PoC Engine: Generates responsible curl commands and reproduction scripts for critical findings.

---

🔐 Integrity Verification

Every release includes a cryptographically signed SHA256SUMS.txt. Always verify binary integrity after downloading:

# Verify Linux checksum
sha256sum -c SHA256SUMS.txt --ignore-missing

# Or manual verification
sha256sum logicproof

---

📄 Licensing & Commercial Support

The logicproof binary is proprietary commercial software. Use of the binary requires a valid subscription license key.

• Web: logicproofai.com
• Support: soporte@logicproof.ai
• Security Inquiries: security@logicproof.ai