Swazona Gate

A release gate for AI-written code.

A GitHub Action that checks every pull request with deterministic rules, posts the swazona-gate check, and writes an evidence file you can verify without us. Start in shadow mode; switch to enforce when you trust it.

Install the gate See pricing Read the docs

Runs in your CI

The gate runs inside your own GitHub Actions job, and your code is never sent to Swazona. Model review is optional: it uses your own provider key and stops at a per-run spend cap, USD 2.00 by default.

Evidence, not warranty

Each completed run writes swazona-evidence.json, bound to the exact head and base commits. On public repositories GitHub can attest it, so anyone can check it with gh attestation verify, no Swazona account needed.

Rules block. Models advise.

Deterministic rules decide the check. Model findings stay advisory unless you opt in to let them block. Shadow mode is the default: findings are reported and nothing is blocked.

Fails closed

An unreadable ruleset, a missing diff or a GitHub API error is a failure, never a silent pass. A pull request cannot edit the rules that check it.

Install in one file

Add this workflow to your repository as .github/workflows/swazona-gate.yml. Public repositories on github.com run free with no license. Private and internal repositories add their license as the SWAZONA_LICENSE secret.

name: swazona-gate
on:
  pull_request:
    types: [opened, synchronize, reopened]
permissions:
  contents: read
  checks: write
  pull-requests: write
  id-token: write
  attestations: write
jobs:
  gate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
      - uses: swazona/gate@4ed9fd1fe3544f2d3fa740123bbe915f1a72a021 # v1.0.0
        with:
          license: ${{ secrets.SWAZONA_LICENSE }}

What each pull request gets

Success: evidence verified and published; the verdict was clean or its findings were advisory.
Failure: blocking findings in enforce mode, a license or tampering problem in any mode, or, in enforce mode, anything that stops the gate from checking. Never a silent pass.
Neutral: in shadow mode, blocking findings, or a problem that stops the check, are reported without blocking.

Plans

Free
Public repositories on github.com, whoever owns them. No license needed. Every rule, the evidence file, shadow and enforce modes.
No charge
Install the gate
Enterprise
GitHub Enterprise Server, several organisations, or terms agreed in writing.
Contact us
Email us

Evidence, not warranty: each run records what the gate checked and what it did not.