HARRRO
HARRRO
All work
Case 01 / 04·Open source · monorepo in active build

Deployment Safety · Go

IRONCLAD.

A deployment gate that evaluates deploy intent using live dependencies, incident history, and semantic risk scoring — preventing risky pushes before they ship.

SWE / SDEDevOpsSystems

License

Apache 2.0

Decision

ALLOW / WARN / BLOCK

Latency

P95 goal < 2s

Layout

Monorepo services + dashboard

Interactive lens

PROBLEM → SOLUTION

Drag the handle right to reveal the solution over the problem.

← ProblemSolution →

Problem

Modern CI pipelines answer whether code compiles, tests pass, and lint is clean. They rarely ask whether a change is semantically dangerous for current production conditions — blast radius, reversibility, or historically bad deploy windows.

Solution

IRONCLAD sits in front of CI/CD promotion as a semantic deployment risk engine. For each candidate it maps affected services, correlates incident/deploy history, scores risk across blast radius, reversibility, and timing, then returns ALLOW, WARN, or BLOCK with a plain-English explanation and mitigation.

Drag right to reveal the solution · 12%

01Result

Validates safety of deployment intent — not just correctness of code

02Result

Scores blast radius, reversibility, and timing risk as first-class axes

03Result

Emits ALLOW / WARN / BLOCK with actionable explanations for operators

Execution flow

HOW IT RUNS

End-to-end flow from trigger to decision output.

  1. 01

    Step 1 of 5

    Ingest deploy request + diff metadata from CI/CD

  2. 02

    Step 2 of 5

    Classify change intent (functional, infra, migration, rollout)

  3. 03

    Step 3 of 5

    Resolve impact graph from changed components

  4. 04

    Step 4 of 5

    Score risk axes and consult historical failure grammar / incidents

  5. 05

    Step 5 of 5

    Output

    Emit decision + explanation; log outcome for learning

Capabilities

WHAT IT CATCHES

Signal 01

Blast radius

how many downstream services and journeys are exposed if the change fails

Signal 02

Reversibility

can the deploy be rolled back within an org-defined SLO (e.g. under 60 seconds)

Signal 03

Timing risk

peak traffic, post-migration windows, thin on-call coverage

Signal 04

Immutable decision explanations for audit and post-mortems

Pin a layer

STACK MATRIX

Click a layer to isolate it — Apache 2.0 · Go · Python · TypeScript

Live signal

CORE LOGIC

ironclad.corestreaming…
1 

IRONCLAD is a semantic production risk gate: it asks whether what the code is trying to do matches what the system can safely absorb right now. Traditional pipelines validate correctness; IRONCLAD validates deploy intent against dependency topology, incident history, and timing intelligence.

[ VERIFY ]

Open the
source.

Claims should survive a read of the repo.

BRIEF0%Source