Devrecated SolutionsStandalone product
RiskAuditor One auditor for every code movement.
RiskAuditor scores commits, pull requests, releases, reverts, and ranges with one algorithm: findings, a score, and remediations. Included with Autodevelop. Standalone product coming soon.
What it scores
The unit is a movement, not a skill run.
- Commit and release commit
- One SHA, or a SHA that will land on the production branch.
- Pull request and release PR
- Feature work, or staging → production promote ranges.
- Revert
- A revert commit or revert pull request, scored the same way.
- Range
- Any other base…head movement that needs a report.
Surfaces
Three places, one score.
- MCP
- An agent requests an audit and receives findings. Advice only — it does not block the ship.
- CLI / API
- The same login token posts a movement and prints the report.
- GitHub Check
- A consumer pipeline or App webhook posts a Check that can deny.
Put one auditor on every movement.
Tell us which repositories and which surfaces you want first.