{
 "schema_version": 1,
 "generated": "2026-10-26",
 "id": "ordewell-ordewell--run-a-read-only-audit-before-changes",
 "repo": "ordewell/ordewell",
 "repo_url": "https://github.com/ordewell/ordewell",
 "repo_slug": "ordewell-ordewell",
 "title": "Run a read-only audit before any code changes",
 "page_title": "How to run a read-only audit before any code changes with Ordewell",
 "summary": "Have agents review the repository without write access, then read their reports.",
 "who": "A tech lead who wants an independent review of a module before deciding what to change.",
 "problem": "Reviews done by a write-enabled agent can change files by accident, and reading agent output without a clear record of what was checked is hard to trust.",
 "outcome": "Read-only audit tasks that produce findings and a summary for each task, with no changes to the repository.",
 "steps": [
  "Install the CLI with `npm install -g ordewell`, then open the terminal UI with `ordewell` in your project.",
  "Describe an audit goal, such as a security review of one module, and answer the planner's questions.",
  "Check in the plan that the audit tasks are set to read-only mode before you approve the run.",
  "Run the plan with `ordewell run` and follow each task's log.",
  "Read each task's summary and numbered findings, then decide what to fix in a separate plan."
 ],
 "agent_prompt": "In the repository at <project path>, plan a read-only audit of <module or area> with Ordewell and run it. Output each audit task's summary and numbered findings with evidence. Verify that the audit tasks ran in read-only mode and that `git status` shows no changes to the repository.",
 "agents": [
  "claude-code",
  "codex"
 ],
 "difficulty": "Intermediate",
 "time": "30 minutes",
 "basis": "readme",
 "caveat": "A read-only audit is only as reliable as the agent doing it, so check the cited evidence in each finding against the code before acting on it.",
 "category": "Software and DevOps",
 "tags": [
  "Software and DevOps"
 ],
 "lang": "typescript",
 "requirements": [
  "Node.js 20 or newer",
  "git, for task isolation",
  "At least one of Claude Code, Codex or OpenCode installed",
  "Optional: an API key from one of the supported providers, if you do not want a coding agent to act as the planner"
 ],
 "risk": "none",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/ordewell-ordewell/run-a-read-only-audit-before-changes/",
 "md": "https://dedupedai.com/use-cases/ordewell-ordewell/run-a-read-only-audit-before-changes/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/ordewell-ordewell--run-a-read-only-audit-before-changes.json",
 "api_version": "v1"
}