A shell scripting language for when machines write the scripts and humans only get to review them. Readable by default, structurally immune to injection, and auditable before a single process starts.
put the number of lines in file "access.log" into request count put "processing" && request count && "requests" run "curl" with "-fsS", url within 30 seconds put the json of it into build if the "status" of build is not "green" then quit with status 1
Chunk expressions live, and below that the real interpreter compiled to WebAssembly: manifests, policy refusals and approvals, answering exactly as they would in a terminal.
The whole language, browsable, generated from LANGUAGE.md.
Four scripts read by the analyser: a fake dotfile backup that steals keys and a cleanup script that quietly does four dangerous things, both refused, beside two that pass.