Partial / experimental. There is no shipped axguard diff CLI command in v0.2.0. Do not document or script axguard diff as a product command. Prefer full audit / MCP axguard_security_review / axguard_analyze_change_risk for change review.

What exists today

1. axguard paths --diff

Compare two saved attack-paths artifacts:
This diffs path graphs already produced by axguard paths / audit — it is not a general source-tree security diff product.

2. Local API route

With the API extra installed (pip install -e '.[api]', axguard api start):
Body expects usable base_path / head_path (scan-based delta). Treat as experimental: check /openapi.json on http://127.0.0.1:8787 for the live contract.

What to use instead (shipped)

Related: Attack paths · API · Predictive security.