Know before you ship.

Paste any public GitHub repo URL — release-gate scans for 7 deployment safeguards and shows you exactly what's in place and what's missing. Takes 10 seconds. No install needed.

release-gate starts as a 10-second repo audit, then becomes a CI gate that blocks unsafe AI releases before they reach production.

🔒 Scanning a private repo? Install the release-gate-ai App to grant read access — public repos work without it.

Running audit…

Sample output

        
        
        
        $ release-gate audit myorg/my-ai-agent
      
Scanning myorg/my-ai-agent · 7 checks · code analysis…
AI Release Readiness: 42/100 — HOLD
Safeguards:
  ✗ governance config  project.name still a placeholder
  ✗ eval evidence  no evals.yaml found
  ✗ budget ceiling  max_daily_cost still # TODO
  ✗ kill switch  location path does not exist
  ✓ team owner
  ✓ auth & rate limiting
  ✓ trace policy
  ⚠ 1 high-severity code risk: LLM call inside unbounded loop (agent.py:42)
  Run release-gate audit . --fix to scaffold missing governance files

Why these 7 checks?

Every check maps to a real production failure. No checkbox theater.

🏛️

Governance config

Governance lives in heads, not docs. Knowledge walks out the door.

📊

Eval evidence

No tests = no signal. You're guessing in prod.

🔍

Trace / tool policy

Silent tool misuse. No audit trail when something goes wrong.

💰

Budget ceiling

One prompt injection → $10k overnight. No ceiling = no floor.

🔴

Kill switch / fallback

Agent misbehaves at 2am. No kill switch = 45-min deploy to fix it.

👤

Team owner

Incident at 3am. Who do you page? "The team" is not an answer.

🔐

Auth & rate limiting

Unprotected endpoint = denial-of-wallet attack in minutes.

Who it's for

Built for every team shipping AI into production

Whether you're a solo engineer or a platform team governing dozens of agents — release-gate fits into how you already work.

🤖

AI / ML Engineers

Teams shipping AI agents

You built a LangChain, CrewAI, or Agents SDK app and you're about to push it to prod. release-gate checks that budget ceilings, fallback logic, and eval evidence are actually in place — not just planned.

Catch missing safeguards before your manager does

💬

Product & Platform Teams

LLM-powered apps & copilots

Your app calls GPT-4 or Claude on every user request. One bad prompt, one rate-limit gap, or one missing kill switch and you're dealing with a public incident. release-gate makes the checklist automatic.

Ship with confidence, not crossed fingers

🔧

Backend Engineers

Tool-calling & agentic systems

Your agent reads files, calls APIs, writes to databases. Without a declared tool policy and rate limits, one loop bug costs you real money and real data. release-gate surfaces those gaps before deploy.

Know which tools are allowed before they're abused

🏢

Enterprise & Security Teams

Internal copilots & assistants

You're deploying an internal AI assistant to thousands of employees. Legal wants an audit trail. Security wants auth enforced. release-gate gives you a machine-readable evidence pack for every release.

Audit trail ready for compliance review

⚙️

Infrastructure & MLOps

Self-hosted & open-weight models

You're running Llama, Mistral, or a fine-tuned model on your own infra. No managed guardrails, no built-in cost control. release-gate checks that you've declared your own — because nobody else will.

Governance that works without a cloud provider

📊

Data Science & Analytics

Prediction & scoring models

Your model scores loan applications, flags fraud, or ranks candidates. release-gate checks for eval evidence and team ownership — the two things regulators ask about first when something goes wrong.

Evidence pack ready before the auditor asks

Zero extra infrastructure

One pip install. Works in your terminal, your CI, or via API. No cloud containers, no agents to host, no SaaS dependency for the core tool.

💻 CLI (Terminal)

$ pip install release-gate $ release-gate audit https://github.com/org/agent Score 60/100 HOLD ✗ governance_file ✓ budget_ceiling ... $ release-gate audit . --emit-config -o governance.yaml

Your machine. Your terminal. No account needed.

⚙️ GitHub Actions

- uses: VamsiSudhakaran1/release-gate@v0.7.3 with: command: audit path: . # Exit 0=PROMOTE · 10=HOLD · 1=BLOCK

5 lines in your workflow. Score appears in PR summary.

🌐 SaaS API

POST /api/audit { "url": "https://github.com/org/agent" } → { score: 60, decision: "HOLD", safeguards: { ... } }

Use from any language. Full history + dashboard for teams.

The Verify phase for agent loops

Every agent loop needs a checker that isn’t the same model that wrote the output. Release Gate owns the Verify step — returning CONTINUE, SHIP, or ROLLBACK after each iteration.

Discover → Plan → Execute → ✓ Release Gate Verify → Iterate

💻 CLI (local loops)

$ release-gate verify governance.yaml \ --iteration 3 --cost 0.12 \ --trace trace.jsonl --json { "decision": "SHIP", "cost_remaining": 0.88 } # exit 0=SHIP 10=CONTINUE 1=ROLLBACK

Works in any shell loop. No account needed.

🌐 API (live loops)

POST /api/verify { "iteration": 3, "cost_so_far": 0.12, "trace": { "steps": [...] }, "loop_id": "my-loop-001" } → { "decision": "CONTINUE", "warnings": ["8/10 iterations used"] }

Call from any language. Each iteration is persisted.

📋 Governance

# governance.yaml loop: max_iterations: 10 total_cost_limit: 1.00 cost_per_iteration_limit: 0.15 maker_model: claude-opus-4-8 checker_model: claude-haiku-4-5

Declare the policy once. Release Gate enforces it every iteration.

🧪 Try the Loop Verifier

ITERATION

COST SO FAR ($)

MAX ITERATIONS

TOTAL COST LIMIT ($)

LOOP ID (optional)

Runs against the live /api/verify endpoint — requires a free account and API token. Without auth the result is a local simulation.

After a loop completes, pull the full iteration history:

GET /api/loop/my-loop-001 → { "iterations": 4, "final_decision": "SHIP", "history": [ ... ] }

Built for teams, not just individuals

The CLI is always 100% free and unlimited — no scan caps, no account required, works in any CI pipeline. The platform adds what CLI can’t: persistent history, team visibility, and compliance audit trail.

Scan limits below apply only to hosted web scans. Local CLI and CI usage is always unlimited.

Visitor

no account needed

3 playground scans/day

Score & decision
2 safeguards visible
No history
Partial results only

No sign-up needed

Starter

free account

10 scans/month

Why pay if CLI is free? History & full results in the browser.

Full safeguard detail
Last 5 runs history
1 repo tracked
Dashboard access

Pro

$29

per month

Unlimited scans

Why pay if CLI is free? Score trends, team API tokens, email alerts when score drops.

Everything in Starter
50 runs history
5 repos tracked
API tokens for CI
Badge embed
Score trend charts
Email alerts

Join waitlist →

Enterprise

Custom pricing

talk to us about your team size

Unlimited scans & repos

Why pay if CLI is free? Org-wide governance policy, compliance audit trail, SSO.

Everything in Pro
Unlimited repos & members
Org policy (min score)
PDF compliance reports
SSO / SAML
Slack alerts
Audit trail
GitHub App org-wide

Security & privacy

We audit your repo — we don’t store your code. Here’s exactly how access works.

🔓

Public repos — no login

Public GitHub repos are scanned via the GitHub API with no authentication. No account or token needed — just paste the URL.

🔐

Private repos — read-only GitHub App

Private repo access uses a GitHub App installation token with read-only repository contents scope. The App cannot write code, open issues, or modify settings.

🧠

No training on your code

Source code scanned by release-gate is never used to train models. Static analysis runs in-process and results are stored as structured findings — not raw code.

💻

CLI runs 100% locally

The open-source CLI never phones home. It reads only the local directory you point it at. Your code stays on your machine, in your CI, or behind your firewall.

🏗️

Self-hostable

Run release-gate entirely in your own CI pipeline using the CLI — no cloud dependency, no data leaves your network. Enterprise users can also self-host the dashboard.

📄

Open-source core

The scanning engine, safeguard checks, and governance schema are fully open-source. Audit the code that audits your code.