Public repository
The repository must be publicly accessible and carry an OSI-approved licence.
Open-source programme
Full Dokima access for open-source maintainers.
The planned programme gives eligible public repositories under an OSI-approved licence the complete product without a Dokima subscription. You provide and pay for your own Codex or Claude runner.
Applications not yet openThe programme is not accepting submissions.
Read the proposed terms below or use a commercial trial while the operational publication workflow is completed.
The exchange
Private remediation time, then public learning.
When Dokima first marks a finding possibly valid or fully valid, it encrypts and uploads that finding individually. Source code is never uploaded.
Each qualifying finding has its own 120-day private window. Maintainers can triage and update it during that period. Northloom publishes the latest reconciled state with the project name after the window; a retracted finding is not published. Fixing an issue does not end the window early.
A commercial subscription is the private option.
Manual approval
Northloom reviews every open-source application before issuing a licence.
Full product
Use the complete workflow across the approved workspace; runner usage remains your cost.