How it works
You make a commit
Change any file in your repo. Confine sees the diff automatically.
Confine loads context
It pulls cached contents of every function your changes interact with. Remembers the repo and its history.
You get a review
Delivers targeted comments. Not warnings — explanations. Not problems — fixes.
Removing this check allows
user_id == 0(root) to generate tokens without validation. This was added in commita3f2cto prevent privilege escalation.Keep the user_id validation check