human-gated remediation for GitHub & GitLab

Findings are inputs.The fix is the outcome.

Aegis turns signals from the quality tools you already trust into a proposed patch with labeled evidence and cost. You approve the change; Aegis writes it back and tracks whether it merged — or came back.

explicit approval · no auto-merge

aegis · fix review · example

Validate webhook signature before parsing

targeted fix · source-file write scope

  1. finding selectedstatic analysis · checkout.ts:84
  2. patch proposed2 files · +18 −5
  3. evidence attachedpartial · self-attested
  4. run cost recordedmodel + token provenance

Human approval required

no repository write has happened

Approve write-backReject
after approval · branch / PR / MR · merge + revert tracked

the missing last mile

Great analyzers tell you what is wrong. Your team still has to turn the finding into a safe change — then learn whether that change stayed fixed.

one governed lifecycle

From selected finding to durable outcome

Aegis owns the handoff around your existing quality stack. The analyzer remains the authority on detection; the human remains the authority on repository change.

01

Bring the finding

Send coverage, static-analysis, dependency, duplication, or build signals from the CI and tools you already trust.

02

Get a proposed patch

A target-scoped run is claimed by an isolated per-client runner. It returns proposed files, a summary, and any submitted evidence.

03

Review before write-back

Inspect the diff, evidence label and completeness, and run cost. Reject it or explicitly approve the repository change.

04

Track the outcome

Aegis writes only the approved change to a branch or PR/MR, then records whether it merged or was later reverted.

more than a comment

The context to approve — and the record to learn

signals in

Keep the analyzers you trust

Aegis accepts coverage, static-analysis, dependency, duplication, and build results instead of asking you to replace the tools that produced them.

targeted remediation

Fix the selected problem

Dispatch focused work for a failing build, low-coverage file, duplicate block, static finding, or AI-triage suggestion.

evidence

Know what backs the patch

Review submitted reproduction and regression summaries, their completeness, and an honest verification label before approval.

authority

Put a human on the boundary

The runner can propose files. It cannot write them back. A repository change requires explicit human approval.

outcome

Follow the fix past the PR

Aegis reconciles opened changes with provider state so merged and later-reverted outcomes stay visible.

economics

See what each run cost

Model and generation cost stays attributable to the run and repository, next to the change it helped produce.

keep the scanners

Aegis is the governed fix layer, not another analyzer fleet

Sonar-style platforms, security scanners, linters, and coverage tools are valuable finding producers. Aegis adds the review, approval, write-back, cost, and outcome lifecycle around the findings worth fixing.

Your tools

Detect + gate

Rules, locations, severity, coverage, and policy stay upstream.

Aegis

Propose + review

Targeted patch, evidence label, cost, and mandatory approval.

Provider

Merge + observe

Branch or PR/MR write-back with merge and revert reconciliation.

Evidence without the theater

Current runner evidence is shown as self-attested — not as Aegis-verified. Reviewers can see the submitted reproduction and regression summaries, evidence completeness, and run cost before deciding whether the patch may be written back.

Stop counting findings.Start closing the loop.

Connect a repository, keep your current analysis stack, and put a human-governed fix lifecycle behind the issues that matter.