Documentation
How to build, verify and ship with ScodyX
A general guide to the product: the build loop, engines, data and auth, exports and credits. It describes how the platform behaves today and is updated as features change.
Getting started
Create an account, then open a workspace. Every workspace has its own projects, members and credit balance, and nothing is shared between workspaces.
Start a project by describing the app you want in plain language — the audience, the main screens, and the data it should keep. The more concrete the description, the less rework in later runs.
- Name the outcome, not the implementation: “a booking page for a dental clinic”, not “a React form”.
- Mention the pages you expect so the first build lands the right structure.
- Add constraints you care about, such as mobile-first, dark mode, or a specific tone of voice.
The build loop
Each run follows the same four phases: plan, build, verify, repair. The plan is shown before files are written, the build streams files as they are produced, verification checks the app actually renders and routes, and repair takes another pass at anything that failed.
The timeline on the right of the builder records every run, the files it touched and the credits it used, so you can trace how the project reached its current state.
- Queue follow-up prompts while a run is in progress; they execute in order.
- Edit an earlier message to branch from that point in the conversation.
- Revert to an earlier run when a change goes the wrong way.
Engines
You choose which model family handles a run. ScodyX Advanced routes each task to the engine best suited to it — long-context reasoning, refactoring, or fast iteration — and falls back to the managed Core engine if a provider is unavailable mid-run.
Engine choice affects style and speed more than capability. If a run stalls or a provider errors, the run continues on Core rather than failing outright.
Data and authentication
Generated apps can use the built-in managed backend for tables, rows and email sign-in, or you can connect your own database from the workspace settings. Connection settings are validated — reachability, credentials and row-level access — before they are saved.
Protected routes, sign-in screens and per-user data scoping are generated together so a preview behaves like the deployed app.
Export and deployment
Every project can be downloaded as a plain source archive with no runtime dependency on ScodyX. Connect a GitHub account to push the project to a repository and keep committing from the builder.
Connect a hosting provider in Settings → Integrations to deploy. Each attempt is recorded on the deployments page with its status, provider response and failure reason if any.
Credits and billing
Credits are consumed when an engine performs a run; reading, browsing and exporting are free. Plan credits are granted at each renewal and do not roll over. Credit packs you buy separately do not expire.
The credit ledger lists every grant and debit with a timestamp and request ID, so spend can be reconciled line by line. Retries and engine fallbacks within one run are de-duplicated and charged once.
Teams and roles
Invite members to a workspace and assign roles to control who can build, who can manage billing and who can change integrations. Audit records show who changed what and when.
Need something not covered here?
Email support@ischolarx.com with your workspace name and, where relevant, the request ID shown on the failing run — it makes tracing much faster.
What is evidenced, and what is only alignment
Evidenced items are produced by checks that run against the live system and can be exported. Alignment-only items describe how our practices map to a published standard — they are not certifications, audits or attestations by any third party.
- Tenant isolation
- Row-level security tests run against the live database and are reported in your workspace assurance page.
- Audit trail & credit ledger
- Every run, deploy and credit movement is recorded with a timestamp and request ID you can export.
- Encryption in transit
- HTTPS/TLS is enforced on all platform and generated-app endpoints, and probed on demand.
- ISO/IEC 27001 & 27701
- Our controls are mapped to these standards. We are not certified by an accredited body, and we do not claim to be.
- SOC 2 Trust Services Criteria
- Practices mapped to the criteria. No SOC 2 report has been issued for ScodyX.
- WCAG 2.2 AA
- We build to the guidelines and test key flows. No independent accessibility audit yet.
Full control register and framework mappings: Compliance & standards · Security overview