Contract-change authorization for AI agents

On every pull request that changes an API contract, CodeRifts decides whether the change may proceed — and once your branch protection requires the check, it stays red without a grant.

• Only a granted change proceeds: one grant binds authorize, consume, and the target-state transition
• Signed, offline-verifiable receipts: verify it yourself, no key and no call back to us
• Every decision names its limits: what it proves, and what it does not
• Tool-description drift: a schema that did not change can still carry a new instruction
• Bound to the head, the diff and the issuer: a new commit needs a new decision; a check with the same name from another app does not satisfy it

One-click install. Enforcement is a branch-protection setting, not a default: require CodeRifts / issuer (posted by this App) and CodeRifts / contract-gate (posted by the contract-gate Action). .coderifts.yml names the contract artifacts to track.

🚀 Free during beta.

📎 Verify a decision yourself · Docs · Install