Versions can check your project on your own Mac
A project can list its checks, such as its tests. Versions runs them quietly on a saved version and marks it.
A project can now list its checks in a file called bandicot.checks.json: each one has a name, the command that runs it and, if you want, a time limit. When the folder has been quiet for a moment, Versions runs them on the newest saved version and puts a mark on that version in the history, a tick when they pass and a cross when one does not.
The checks run on your Mac, in a plain copy of the saved version, so your project is never touched and nothing leaves your computer. They run without the secrets in your environment, never while the agent is working, and one at a time. Hover the mark to see which check did not pass.
Bandicot only runs a file it was told about. A file written through Bandicot is approved as it is written, and a file that arrived some other way waits behind a Run these checks button above the history. If the file changes, it asks again. Each result is signed by your Mac, so a result that was changed afterwards shows as unverified instead of as a pass.