Review Reports

The Report page turns runs you have already completed into one shareable PDF titled Review of <repository>. You choose up to one AI Auditor run, one AutoFuzzer run and one AutoProver run of the same repository. The PDF contains one findings section covering every engine, followed by a results section for each engine you selected.

You don't need to launch anything new. Run each engine the way you normally do from Run, then open Report to put the results together.

What the PDF contains

Each report is generated by the Certora AutoProver agent and adapts to the runs you selected:

• Cover: the Certora logo, the report title, the most recent commit among the selected runs, the generation date, and a notice that the AutoProver agent generated the report.
• Summary and methodology: the repository, one row per engine with its commit and run date, and a short description of how each selected engine works.
• Findings summary: counts by severity and by engine, plus a severity chart.
• Findings: a single list of every finding, sorted by severity. Each finding is labelled with the engine that reported it (AI Auditor, AutoFuzzer or AutoProver).
• One results section per engine:
  • AI Auditor: run type and commit, and how many findings were reported, dismissed and included.
  • AutoFuzzer / AutoProver: contract, outcome, rule or test statuses, and the properties that were checked.
• Disclaimer and About Certora.

Engines you did not select are not mentioned anywhere in the report.

Generate a report

1. Open Report in the sidebar and click Generate report.
2. Select runs. Pick at most one completed run for each engine. You need at least one run.
   • The first run you pick sets the repository. The other engines then only list runs of that repository.
   • Runs can be on different commits. The wizard warns you when they are, and the PDF shows the commit each engine ran on.
3. Review findings. Check the combined findings list:
   • AI Auditor findings appear with their triaged severity. Findings you marked Invalid in the run's report are left out.
   • AutoProver writes up each violated property and rates its severity from the violation's assessed impact and likelihood. The PDF includes that write-up: impact, attack path, severity assessment and proof of concept.
   • AutoFuzzer reports failing properties without a severity, so they start at Medium. So do AutoProver properties it could not rate.
   • You can change any of these severities, or untick a finding to leave it out. If you change a severity AutoProver rated, the PDF states AutoProver's rating and the severity you chose. Reset restores AutoProver's rating.
4. Generate. Check the outline, then click Generate report. The report appears in the history as Generating and becomes downloadable when it is ready. This usually takes under a minute.

Update a report

A report remembers the runs and severities you chose. From its menu in the history:

• Regenerate re-renders the PDF with the same runs. Use it after you triage AI Auditor findings. For example, dismiss a finding in the run's report, then regenerate to remove it from the PDF.
• Change runs and regenerate reopens the wizard with the current selection. Use it to swap in a newer run or change AutoFuzzer/AutoProver severities.

Each successful generation increases the report's version (v1, v2, …) and replaces the downloadable PDF.

When an engine's results are unavailable

If an engine's results can't be loaded when the report is generated, its section is left out and the rest of the report is still produced. For example, the run may not have published a results report. The history shows that engine's badge with a warning. To add it back, re-run the engine (on the same commit if you like), select the new run with Change runs and regenerate, and generate again.

Generation fails only when none of the selected runs' results can be loaded. The reason is shown on the report, and Retry is available.

Archive and delete

• Archive hides a report from the default history view; turn on Show archived to see it. Any member can archive or unarchive a report. Regenerating an archived report restores it.
• Delete permanently removes the report and its PDF for everyone in the organization. Only organization admins and owners can delete, and they must confirm first.

Good to know

• Only completed runs can be selected. For AI Auditor, both full and diff reviews are supported.
• Downloads are served through your signed-in session; PDF links are not public.
• Report generation shares the organization's PDF export limit with Collab PDF exports.