Validates safety of deployment intent — not just correctness of code
Deployment Safety · Go
A deployment gate that evaluates deploy intent using live dependencies, incident history, and semantic risk scoring — preventing risky pushes before they ship.
License
Apache 2.0
Decision
ALLOW / WARN / BLOCK
Latency
P95 goal < 2s
Layout
Monorepo services + dashboard
Interactive lens
Drag the handle right to reveal the solution over the problem.
Problem
Modern CI pipelines answer whether code compiles, tests pass, and lint is clean. They rarely ask whether a change is semantically dangerous for current production conditions — blast radius, reversibility, or historically bad deploy windows.
Solution
IRONCLAD sits in front of CI/CD promotion as a semantic deployment risk engine. For each candidate it maps affected services, correlates incident/deploy history, scores risk across blast radius, reversibility, and timing, then returns ALLOW, WARN, or BLOCK with a plain-English explanation and mitigation.
Drag right to reveal the solution · 12%
Validates safety of deployment intent — not just correctness of code
Scores blast radius, reversibility, and timing risk as first-class axes
Emits ALLOW / WARN / BLOCK with actionable explanations for operators
Execution flow
End-to-end flow from trigger to decision output.
Step 1 of 5
Ingest deploy request + diff metadata from CI/CD
Step 2 of 5
Classify change intent (functional, infra, migration, rollout)
Step 3 of 5
Resolve impact graph from changed components
Step 4 of 5
Score risk axes and consult historical failure grammar / incidents
Step 5 of 5
OutputEmit decision + explanation; log outcome for learning
Capabilities
how many downstream services and journeys are exposed if the change fails
can the deploy be rolled back within an org-defined SLO (e.g. under 60 seconds)
peak traffic, post-migration windows, thin on-call coverage
Immutable decision explanations for audit and post-mortems
Pin a layer
Click a layer to isolate it — Apache 2.0 · Go · Python · TypeScript
Live signal
1 IRONCLAD is a semantic production risk gate: it asks whether what the code is trying to do matches what the system can safely absorb right now. Traditional pipelines validate correctness; IRONCLAD validates deploy intent against dependency topology, incident history, and timing intelligence.
[ VERIFY ]
Claims should survive a read of the repo.