
Teams keep dead code because deleting it feels risky. Nobody knows what the tests really rely on. Theseus makes that risk visible, with proof. It copies your project and never writes the original. It cuts one part at a time from the copy and runs your tests inside a bwrap sandbox: no network, no host home, no keys, read-only system, time and memory caps. If the tests break, the part goes back and is marked load-bearing. If they pass, it is not needed. It is proven bloat only when tests cover it. A blast radius map shows every part. Approve writes a new trimmed copy and re-runs the tests. Nothing is deleted without your yes. An opt-in agent on Vultr Serverless Inference plans the cut order, explains the biggest breaks in plain words and writes the brief. The tests back each call. Real runs on a Vultr VM (6 vCPU, 12 workers), v0.2.3: - expressjs/compression: 36 parts in 52.9 s. 24 load-bearing, 1 proven bloat (the Buffer import, index.js line 18), 11 flagged for a human. - expressjs/express: 402 parts. 354 load-bearing, 48 not needed, 0 proven bloat. All 402 verdicts matched a second machine. - Agent cost: about $0.003 to $0.006 per scan. Containment is shown live: hostile code tries the network, the home folder, SSH and Vultr keys, /usr, 600 processes and 2 GB. Every attempt fails.
8 Nov 2026