Governance for AI-built software. Without slowing anyone down.

Your teams already run agents. Artifact puts what the software is supposed to be on the record, briefs every agent from it, and checks every result against it. Read-only on your code, inside the tools your engineers already use.

Agents work at a scale people don't.

That's the advantage, and it's the problem. Across many teams and many agents, the questions get harder, not easier.

  • "Which team's agent changed this, and who approved it?"
  • "Our standards live in forty CLAUDE.md files, all different."
  • "Nobody can review what fifty agents wrote this week."
  • "Is any of this secure enough to ship to a customer?"

One truth per product. One rule set per organization.

  1. 01

    Standards at organization scale.

    Coding standards, security baseline, design system, and the judgment calls that don't fit a linter, held once and compiled per tool into every agent session. Project overrides where a team needs them. Zero footprint on the repos.

  2. 02

    A record per product, connected to the code.

    Connect existing systems read-only and get an evidence-based, confidence-scored map of what they actually do, including the rules your longest-tenured people carry in their heads. Gaps are reported as gaps. Nothing is invented.

  3. 03

    A check after every run.

    Every result is compared against everything the product is supposed to be, not just the diff. Drift is shown with the intent it violates. A person decides: regression to fix, or intent that changed and should be updated.

  4. 04

    An audit trail you can hand to anyone.

    Every decision is attributed. What you decide about drift is recorded with its reason. When a customer, an auditor, or a new engineering lead asks why the software does what it does, the answer is a link.

  5. 05

    Inside the tools you already run.

    GitHub, read-only. Claude Code, Cursor, and Codex over MCP. Model inference stays on your own subscriptions; Artifact's server does deterministic work only. Nothing to migrate, nothing to roll out to every desk.

Governance
Northline Dispatch / Features / Assign a load to a driver

Assign a load to a driver

4 rules · 5 acceptance criteria · 3 decisions · last checked against code 14 min ago

  • Eligible drivers first Decided Aug 4 — checked on every change
    Matches intent
  • A driver over hours is never offered a load Built: a warning only. The build stopped matching what you meant.
    Drifted
  • Driver runs out of hours mid-route You haven't decided: re-assign automatically, or a dispatcher's call?
    Open question
  • Assignment is attributed Decided Jul 22 — checked on every change
    Matches intent

What engineering leadership sees for every product: health, drift with the violated intent attached, builds, and the standards each project carries.

Your code stays yours. That's a design decision, not a setting.

Never writes to a repo

Read-only, always. Your engineers and your agents ship the code. Artifact reads, maps, briefs, and checks.

Never holds a copy of your code

Your agent reads in its own session and posts diffs. The server judges them, keeps an index and a citation, and discards the rest. No mirror, no git objects, no source at rest.

No server-side model calls

Anything that needs a model runs through the subscriptions you already control. Artifact's server does deterministic work only.

Never learns from your record

Artifact improves from how agents use the record, never from what anyone wrote in it. Your product's truth is not training data.

The requirements archaeology, in one session.

Every modernization stalls in the same place: months of working out what the old system actually does before anyone can write the new one. Connect the legacy codebase read-only and Artifact produces a reviewable map: features, flows, business rules, with evidence pointers and a confidence on each claim.

Your team or your vendor then builds from the record, and what they build is checked against it. The documentation keeps governing the rebuild instead of going stale on day two.

artifact › work_packet FEA-0001
Assign a load to a driver
4 requirements · 5 acceptance · 4 what-ifs
REQ-0004 a driver over hours is never offered a load
ACR-0002 over-hours drivers never selectable
EDG-0004 driver out of hours mid-route → QST-0001, open
boundary FEA-0002 today's board must hold
guardrails the board is the truth · attributable, always
rules no load to a driver over hours
✓ bundle ready — this is the whole context

Start with one team.

One product, one repo, the agents that team already runs. We connect it together and you see the first governance view in a working session. Engagements are shaped in the conversation, not on a pricing page.

The product harness →