A workflow review.
One repository, read properly.
What your required checks establish, what they do not, and a record you can recheck offline without trusting us.
A source-bound record, not a slide.
Every finding names the file, the job and the line it came from, and carries a checked counterexample: one concrete combination of results in which the check passes and the thing it is named for did not happen. If no counterexample exists, no finding is made.
The package includes a self-contained verifier. You run it against your own copy of the workflow and it recomputes every claim, so the question is never whether you believe our analysis.
A first read is an afternoon, not a procurement cycle. The sample package is the same shape you would receive.
Six answers, and no files on this page.
Send these to review@arcifact.io, which opens a message with the questions already in it.
1 · your company
2 · is the repository public or private
3 · if public, the URL, and we can start without anything else
4 · roughly how many workflow files
5 · which checks are required, if you know
6 · do you need an NDA or a secure transfer link
Do not attach private workflow files to that email. If the repository is private we will send a Tresorit upload link, so your configuration never sits in a mailbox. That is a smaller ask than it sounds: we need the workflow directory, not your source.
You do not have to ask us at all.
The analyser runs on any public repository with no installation and no account: arcifact.io/r/<org>/<repo>. The same analysis, the same embargo, no conversation required.
A review is worth asking for when the repository is private, when the estate is large enough that one repository is not the question, or when you want the reasoning explained by the person who wrote it.
From £2,500 for one private repository.
Credited in full against an annual subscription taken within sixty days, so a review that leads somewhere costs nothing in the end and a review that does not is still yours to keep.
Public repositories are analysed free, permanently, and installing the App is free for the first five committers. The review exists for teams who want proof before permissions, not as a gate in front of the product. Full pricing.
Publish anything about you, at any point.
A finding about your repository is yours. Nothing we compute is published, aggregated into a public statistic that could identify you, or shown to another customer. If we ever want to describe the pattern in general terms we will ask first, and a refusal ends it.
We will also tell you what we could not check. A review that reports only what it found, and stays quiet about what it could not read, is worth less than it looks.