Weaver

Weaver is an autonomous remediation agent that continuously watches a Git repository and automatically fixes vulnerabilities detected by Semgrep. When a finding occurs, the engine attempts Semgrep's native autofix before falling back to a language model to draft a contextual patch. Every proposed patch undergoes an automated verification loop comprising a Semgrep rescan, code compilation, and the repository's test suite. If all verification checks pass, Weaver commits the fix and generates a custom Semgrep rule to block future regressions; otherwise, the change rolls back after three attempts and flags a human. The entire process runs locally without manual ticket creation, exposing an audit trail of every mend via a local web interface.