I build open-source guardrails for software delivery: the checks between a commit and a release, whether a person or an AI agent wrote the code.
Blog · About · X · LinkedIn · RSS · Sponsor
commit commit-check: checks commit messages, branch names and AI attribution, in CI or as a pre-commit hook. About 55,000 downloads a month.
review cpp-linter: runs clang-format and clang-tidy on every pull request. More than 1,000 repositories depend on it, including projects from:
Apache
Samsung
Qualcomm
Bloomberg
LLNL
Stanford SSI
Nextcloud
build explain-error: explains failed Jenkins builds with AI. Agent8 keeps Java 8 build hosts (AIX, Solaris, HP-UX) on a current Jenkins.
release release-ledger: attaches an SBOM, signs provenance and checks every supported version against known exploited vulnerabilities.
Also: Conventional Branch · gitstats · Keelhaven · mkdocs-ng · merged PRs in Python and PyPA
- After OVHcloud's Release Was Swapped: Three in Four Popular CLIs Could Be Too - Oct 24, 2026
- Jira Is Moving to the Cloud. What Happens to Jenkins and Bitbucket? - Oct 24, 2026
- Open-Source AI Attribution Index, 2026 Q3: Only 13.2% of Commits Disclose AI, and That Is Too Low - Oct 24, 2026
More on the blog. 中文读者请关注公众号「沈显鹏」。






