The YAML is valid.
The runtime path still broke.

I built a local compiler that renders GitOps sources, reconstructs relationships, and proves what a PR changes before a cluster sees it.

Render
Map
Review
Plan
Simulate
Prove

Engineering evidence

Evidence receiptReview

VALID YAMLObjects render
GRAPH002targetPort missing
BLOCKNew path is broken

Not a policy-engine replacement

20 / 20 fresh PR-review gatePrivate beta

Swipe through the evidence03 / 06

Helm and Kustomize are rendered before the tool reasons about objects.
SOURCERaw YAML / chart / overlay
RENDERNative tool boundary
OBJECTSMaterialized resources
YAMLHelmKustomize
Use the project’s real renderer and keep source attribution on every materialized object.
Renderer contracts
Local tools are truth
Workloads, Services, ports, secrets, volumes, routes, and policies become typed relationships.
WORKLOADPods + controllers
NETWORKServices + ports
STATESecrets + volumes
Object nodesTyped edgesBroken paths
Explain operational topology before scoring the diff that changed it.
31 / 31 graph mutation gate
Local consequence graph
Changed operational paths are separated from baseline debt and promoted into a merge receipt.
VALID YAMLObjects render
GRAPH002targetPort missing
BLOCKNew path is broken
Baseline terrainGraph deltaPass / warn / block
Answer what this PR introduced without hiding old debt or unmapped evidence.
20 / 20 fresh PR-review gate
Not a policy-engine replacement
Task text becomes a recipe, typed slots, desired graph delta, and validation plan before editing.
TASKRequested change
RECIPESupported family
SLOTSResolved from graph
IntentTyped slotsSafe boundary
Make the plan inspectable and non-mutating until every required slot is resolved.
Planner benchmark
Plan does not edit
Patch IR runs only in a temporary workspace, then render and graph checks decide whether to keep, repair, or refuse.
IRSemantic operation
TEMPIsolated workspace
VALIDATEYAML + render + graph
KEEP / REFUSEEvidence decision
Patch IRTemporary copyGuarded repair
Validate every semantic selector against the original object and retain at most one improving repair.
Dry-run patch receipts
Bounded recipe families
Registered capability and mutation gates define exactly what each claim supports.
31 / 31Graph mutations
123Real-diff recipe cases
BLOCKEDBroader Plan V1
31 / 31 graph123 recipe casesPlan V1 gaps visible
Keep strong covered-recipe evidence separate from the still-blocked broader Plan V1 claim.
Fresh mutation and real-diff gates
Claim level: benchmark

System viewA PR is a graph delta, not a collection of changed linesNew breakage, touched debt, hidden baseline debt, and unmapped evidence receive different review treatment.

The YAML is valid.The runtime path still broke.

The YAML is valid.
The runtime path still broke.