Some rules should never be touched.

Every codebase has hidden business rules. Touchwarden helps you find and approve them, then checks changes against protected contracts and selected proof-backed decisions.

Your agent changes hundreds of files. Our proof catches the one line that breaks your business.

Tests check the cases someone thought to write. Touchwarden proves your rule holds for every input, and blocks the merge the moment the proof fails.

“Clean up the refund flow. It's grown messy; simplify the amount handling.”

Proof failed

Proven rule

For every refund: $0 is refused.

Counterexample

Refund $0refunds the whole order

payment/payment-module.ts+ if (!amount) amount = captured

Approve a rule once. Our proof checks every change against it.

We check every pull request against the rules on main, so your agent can't rewrite the rule it's checked against.

  1. 1

    We find your rules

    We read the repo you already have and propose the rules we find, each linked to the code behind it.

  2. 2

    You approve them

    Accept, edit or reject each one. Each one you approve becomes a proven rule in your repo.

  3. 3

    Our proof checks every change

    Ships, Blocked, or Owner signs. Every pull request gets one answer.

$ touchwarden check --run-verified
Ships

The proof still holds. Every proven rule is kept.

Blocked

The proof fails. Your agent fixes it before it merges.

Owner signs

Your agent tries to change a rule. Its owner decides.

Proofs for the TypeScript and React you already ship.

Set $500 a month. Your agent can't raise it.

We prove every Pulumi change keeps a cap on every paid resource, inside the budget you set.

Prompt“Training runs are too slow. Spin up a GPU box and get them done tonight.”

BlockedThe GPU box has no budget.

Owner signsYour agent asks for a bigger limit. You sign or say no.

infra/index.tsPulumi · TypeScript
Resize the web server$450 of $500
Raise the web budget to $450$600 of $500
Fire the actions at 200%$900 of $500

Black line: the $500 approved on main

Free on your machine. Paid for your team.

For your repository

Free

  • Rule discovery and guided approval
  • Proofs run on your machine, with readable reports
  • Proofs for your business rules
  • Proven rules that live in your repo
Get in touch

FAQ

Does my code leave my machine?

No. Proofs run on your machine. No AI model sees your code unless you turn on rule discovery.

Can the agent change the rule in its own pull request?

It can edit the file. Our proof still uses the rule on main, so the change waits for the rule's owner.

What if a rule really does need to change?

Change it in a pull request and have its owner review the exact revision. The approved base-branch contract remains authoritative until the reviewed change is merged.

Does it replace tests or code review?

No. Bend proves the selected kernel laws. Touchwarden can block failed proofs and covered gate violations; application adapters, data freshness and unprotected paths still need tests and review.

What does it work with?

TypeScript apps, Pulumi infrastructure on AWS, and React screens.

Can I use it today?

Not publicly yet. Email [email protected] and we'll send you the CLI when it's released.

Prove the rules your business runs on.

Tell us about your codebase. We'll send you the CLI when it's released, and set up early pilots with teams who want one.

Get in touch

Or write to [email protected]. No repository access needed. Privacy.