BUILD. REVIEW. PROVE.
PROVE THE MERGE.
Exact-state evidence for the change you’re about to merge.
Build, fix and review with the tools you choose. Merge Proof independently establishes what the available evidence proves about the exact change. No LLM makes the proof decision.
Use free local CLI / GitHub Action ↗Hosted Pro is in production preparation. Customer installation and purchases are not open yet.
VERIFIED
Available evidence satisfies the implemented checks for the stated scope and observed state. It is not a bug-free guarantee.
NOT_PROVEN
The available evidence does not establish the claim. The receipt explains the gap and next action.
FAIL
The analysis could not reliably complete. No hosted proof debit.
The receipt changes when reality changes.
The original receipt remains immutable. When the PR changes, it becomes STALE / RE-PROOF REQUIRED. A new proof evaluates the new head. Saved evidence without a fresh observation shows CURRENTNESS UNAVAILABLE / REFRESH REQUIRED.
Illustrative example — not a customer result: NOT_PROVEN · STALE. This PR changed. The earlier receipt is stale. Re-proof required.
Free local
Free forever. MIT local CLI and existing GitHub Action. Deterministic analysis and offline local operation.
Use free localHosted taste
5 hosted proofs + 1 bounded historical scan.
Coming after production verification.
Pro
$29/month per active developer. 50 hosted proofs per active developer per month.
Automatic re-proof on PR changes, GitHub Checks, immutable receipt history, HTML/JSON evidence.
Additional proofs: $5 for 5, explicitly purchased. No automatic overage charge.
Clear usage and billing
Count distinct human GitHub IDs opening covered PRs or pushing covered commits; exclude bots and inactive organization members. One human counts once across the paying account’s installations. Review your count before checkout. Quantity increases require customer confirmation; no proration. Decreases apply at renewal.
Included allowance is pooled at the paying-account level and resets at monthly renewal without rollover. Purchased top-ups remain until used, after included proofs. Same-head retrieval, refresh and retry do not debit again. A completed applicable new-head VERIFIED or NOT_PROVEN proof uses one unit.
Look back at what evidence can establish.
The free scan covers up to 5 merged PRs among the 30 most recently updated closed PRs. Unsupported history stays unavailable. Current rules cannot establish historical approval validity. This scan uses no live-proof allowance and does not count bugs prevented.
Trust and access
No AI model decides your proof. Hosted processing accesses GitHub evidence; we do not claim it never sees code. Private receipts require current authorized repository access. Production permissions and access controls must pass acceptance before customer launch.