Reviewer-ready evidence foryour riskiest merge requests.
A fixed-price audit of one risky or AI-generated GitLab merge request. We run your own tests and lint, review the diff, and hand you a signed evidence report — what's tested, what isn't, and the residual risk your reviewer needs to decide.
Proof delivered. Quiet confidence. Q.E.D.
How an evidence audit works
One risky merge request, independently checked, with the evidence to back every claim.
The Process
Send us one risky or AI-generated GitLab merge request.
Read-only access, or run our checks on your own runner — your code stays yours.
We run your own tests and lint, scan the diff, and a senior reviewer digs into the risk: auth, secrets, dependencies, data access, test gaps.
You get a reviewer-ready evidence report: what's proven, what's only tested, what's not checked, and the residual risk — signed.
Evidence over promises
Every claim backed by verifiable output. No "trust us" required.
Verified outcomes per run
Lint output, test results, and diff summary included.
Tamper-evident evidence trail
RFC8785-JCS integrity chain validated.
Human control by design
Review-only token, branch-only push policy.
Execution Receipts
Every execution produces verifiable evidence. This is what you get.
Where does it run?
Two execution options. Both governed. Both transparent. Choose based on your compliance needs.
Managed Runner
Fastest path to pilot
Data Handling
No training on your code. Ephemeral workspaces. Configurable log retention.
Permissions
Read-only repo access. Branch push only. No protected branch writes.
Control
Policy configuration via GitLab. Full audit logs.
Self-Hosted Runner
Full control, your infrastructure
Data Handling
All data stays in your network. Zero external data egress.
Permissions
You define access boundaries. Full IAM integration.
Control
Custom policy rules. Private LLM endpoints. Compliance-ready.
Both options support configurable retention for logs and artifacts. No absolute "zero retention" claims—you decide what to keep and for how long.
Engineering is logic. Logic requires proof.
In classical science, every conclusive proof ended with the words Quod Erat Demonstrandum. We bring that standard to modern software development. We deliver not just code; we deliver proof that it works.
This is not a place to collect ideas
This is an execution pipeline: you commit to a decision, we deliver verified output with receipts. If you need to think through options, do that elsewhere—then come here to execute. We don't manage ideas. We make sure the right ones get executed — and nothing important gets lost.
Ready to pilot?
First audit free in exchange for a case study. After that, €199 per merge request.
Two-day response time. Zero auto-merge risk.