Scyvera open-sources agent governance: scan repos, score blast radius, auto-draft contracts

Trout_dev · reddit · 2026-11-06

Developer Troutdev released Scyvera v1.3.0, an open-source agent governance tool born from repeated irreversible agent accidents (force-pushes, wrongly closed issues, lost production records). scyvera audit . scans executable contexts (scripts, Dockerfiles, workflow run: blocks) in 10 seconds and scores a 0-100 Blast Radius. Flags auto-draft a governance contract (--generate), merge policy baselines (--pack github-safe), and gate CI (--fail-under 90). Unlike prompts, the deterministic Python enforcer (no LLM in the governance path) raises ContractViolationError for undeclared actions, ApprovalPendingError for approvals needed, and keeps an append-only audit log bound to contract hashes - answering the authorization question MCP/A2A leave open.

Original post →

More from coding & agent

coding & agent channel →