Stop accepting AI edits in the dark.
Every AI code change is tracked through an 8-stage Rust pipeline, backed up before it touches your file, and blocked if it looks destructive — because AI should be seen, not just trusted.
Most AI coding assistants operate without guardrails. Changes go in, but visibility, safety, and accountability don't come out.
You accept an AI edit. Three weeks later, something breaks. You think: "Wait… did the AI do that? Or did I?" With other IDEs, you'll never know.
AI edits live in browser memory. The IDE crashes, the tab closes, your machine restarts — and every AI change since your last manual save is gone. Permanently.
AI returns 30 lines for a 250-line file. Auto-apply blindly replaces everything. 88% of your working code — deleted in milliseconds, with no warning and no undo.
Trust is not a debugging tool.
Don't trust your AI. Track it.
Blind trust in AI is blind faith in code you can't see.
Every AI code change passes through a Rust-powered precision pipeline. Each stage is visible, timed, and auditable.
Real-time overlay tracks each stage with millisecond timing. Run counter persists across edits.
Real capture from Operator X02. The AI returned 21 lines for a 240-line file. The Safety Guard blocked it in 35ms.
Left: Pipeline Tracker showing ❌ at 35ms. Center: Monaco editor with App.tsx (13,721 chars). Right: AI assistant explaining the surgical edit. 240 lines preserved.
The Safety Guard intercepts every edit before it reaches your filesystem. If the change looks destructive, it's blocked — automatically, silently, instantly.
Blocks edits that would remove more than half the file. Catches truncated AI responses returning headers or snippets.
Blocks when incoming code is less than 40% of the original. Prevents partial fragment replacement.
Guard only activates on files with 20+ lines. Small configs and scripts pass through without false positives.
Approved edits are written through Tauri/Rust directly to the filesystem. If the IDE crashes, your code is already on disk.
Timestamped .bak files are created via Rust before any AI edit touches your code. Full lifecycle management built in.
Full Backup Manager UI panel — filter by file, preview content, compare against current version, one-click restore.
Configurable limits: max age (default 7d), max per file (10), max total size (100MB). Runs automatically on IDE startup.
Live backup count and total size displayed in the bottom bar. Click to open the Backup Manager. Refreshes every 30s.
Full programmatic access via bm.restore(), bm.diff(), bm.cleanup(), and 7 more commands.
Three levels of context injection — keyword-triggered, automatic. The AI receives live backup data so it can answer "undo my last change" with an actual restore command.
"How does surgical edit work?" → AI receives the full 3,500-word reference covering pipeline stages, edit operations, limitations, and architecture.
"Undo my last change" → AI receives real-time stats from Rust: file counts, sizes, paths, timestamps, and the exact restore command to run.
"Fix line 42" → AI receives a brief reminder that backups are active and mentions automatic backup creation in its response.
The safety guard saved me twice last week. AI tried to replace my 500-line file with a single comment block.
I finally know exactly what the AI changed. The purple line indicators completely changed how I review AI-generated code.
Accidentally accepted a bad edit. Opened the Backup Manager, clicked restore, and was back in 2 seconds. No drama.
Built on Rust/Tauri for performance and reliability. Zero configuration required — enabled by default on startup.
| Component | Implementation |
|---|---|
| Backend runtime | Rust / Tauri v2 — disk writes, backup I/O, stats aggregation, diff engine |
| Backup storage | ~/OperatorX02/backups/surgical_edits/ |
| Backup format | {filename}_{unix_timestamp_ms}.bak |
| Safety thresholds | Blocks >50% line deletion OR <40% size ratio on files >20 lines |
| Pipeline | 8 stages — Detect → Select → Analyze → Route → Apply → Sync → Decorate → Confirm |
| Visual indicators | Purple line highlights, gutter icons, status widget, file tree markers, toast alerts, pipeline overlay |
| AI context | 3 levels — knowledge base (L1), live backup data (L2), edit awareness (L3) |
| Backup manager | 10 Rust commands — list, preview, diff, restore, delete, batch delete, cleanup, export, stats, get_dir |
| Auto-cleanup | Configurable: max age (days), max per file (count), max total size (MB) |
| Console API | se.* (engine) + bm.* (backups) — full programmatic access |
| Editor sync | Disk-first — Monaco synced FROM filesystem after Rust write completes |
| RAM overhead | Minimal — UI overlay only; all heavy operations execute in Rust process |
Open source. MIT licensed. Surgical Mode is on by default — zero configuration.