TREFT
Independent clearance for agent code

Approve agent work with evidence.

Connect GitHub. Treft re-runs the exact patch in a fresh sandbox, grades the evidence, and shows you where to look before you merge.

Nothing ships without your approval.

No card · start with one repo · no branch-rule changes
The Treft queue on iPhone: five pending decisions with review tiers — a GLANCE-tier EUR price fix, READ-tier webhook and invoice changes from GitHub pull requests, a FULL-tier payment worker change, and a question the agent paused on.
The queue — every change graded before you read it.

Any agent — or a colleague. Same check, same evidence, same approval. The author never grades its own work.

AI change control

Writing code got cheap. Reading it didn’t.

The flood is measured: GitHub’s Copilot coding agent alone created over a million pull requests between May and September 2025 (GitHub Octoverse · 2025).

The queue grew. Your hours didn’t.

A branch opens in the time it takes to phrase the prompt. Reviewing it still costs what it always did — your full attention.

Fired off on a whim, filed unread

Nobody read the change before it reached you. The first human eyes on it belong to the person expected to approve it — you.

Review, allocated

Not every diff deserves the same attention.

Treft stamps every verified change with a review tier — an honest reading of how much of your attention it has earned.

GLANCE

One look at the one thing worth your eyes.

READ ×3

Read the marked hunks. Skip the noise.

FULL REVIEW

Slow down. The card says exactly why it earned the scrutiny.

Every summary line cites the signal that earned it.

No cited signal · no summary
Review tier The top of a Treft decision card: intent 'Add exponential backoff to webhook retry delivery', a plain-words summary, and a READ review-tier banner citing 'large change surface · 3 files real surface'.
Verifier result Provenance and verifier result on the decision card: PR BY ATLAS-AGENT with an AGENT chip, a VIEW PULL REQUEST link, 4 files +89, and TESTS RE-RUN CLEAN-ROOM · L1 — the test suite passed on the exact patch that will merge.
Receipts The evidence block: vitest results for payments-api — 27 pass, 0 fail, 1 skip, 2.8s — and receipts, each citing its oracle: tests pass clean room (†CLEAN ROOM), no test files changed (†PATCH), changes confined to src/webhooks (†PATCH).
Your decision The decision dock: a hazard-striped HOLD TO SHIP control above REQUEST CHANGES and REJECT.
One real decision card — fictional repo, real verifier.
How it works

Three steps to a verified merge.

01

Connect a repository

One GitHub repo is enough. Open pull requests are picked up the moment you connect.

02

Treft verifies independently

Nothing for you to do: Treft sets the change up from scratch, runs your tests, and writes up what happened — in plain words.

03

You decide

Approve, reject, or request changes — from your desk or your lock screen. You approve every merge.

No agent yet? Treft ships with an included engine — its work is graded like every other agent’s.

Independent verification

Don’t trust the agent’s claim. Re-run the work.

Verified, not trusted. When a card says verified, Treft ran the tests itself — clean-room, on a fresh checkout the agent never touched.

  • The diff that merges is the diff that was tested — never the agent’s workspace, never its word.
  • Protected verifier — if the agent edited a test, Treft restores the original and flags it.
  • Unverified is explicit — when tests can’t run, the card says so. Shipping anyway takes recorded consent.

We publish our verifier’s false-pass rate — measured against gold, published with confidence intervals. Find another vendor that does. How often a passing run is still wrong: 15.4%, on a census of 389 verified passes across 38 production JS/TS repositories. Measured where we could measure hardest — the six-language expansion is next to be measured.

Who it’s for

Built for the person still reading.

Reading faster is not the answer. Treft checks the work, weighs what it finds, and routes your attention to the changes that earned it — so the flood becomes a queue again.

The solo builder

“I open more branches before lunch than I can read by Friday.”

Ship at agent pace and sleep anyway — say yes from your phone, and mean it.

The team lead

“My devs fire off agents and file the output unread. I’m the only one still reading — and I can’t.”

You don’t have to read it all, or take anyone’s word — the dev’s or the agent’s. Tiers spend your attention where the risk lives.

The open-source maintainer

“Strangers’ agents fill my queue with confident, untested changes.”

Every open pull request arrives graded before you open a single tab. Nothing merges on vibes.

Trust

Built to be accountable.

Rolling out controls after an incident? The 90-day reset →

Per-repo GitHub access

Treft sees only the repositories you connect, through a GitHub App you can revoke at any time.

Sandboxed execution

Every run rents an isolated sandbox — network locked down, torn down when the run ends. Nothing executes on your machines.

No silent merges

Every merge traces back to a person — a name, a grade, and its evidence, kept in an append-only, tamper-evident record.

Pricing

Start free. Pay for what runs.

Free gets the full product: 50 pull-request verifications a month and $5 of one-time usage credit, no card. Pro is $29.99 a month for the daily review loop. Public repositories: verification is free, forever.

See pricing →

Keep the final say.

Let the agents write the code. You keep the proof, the decision, and your evenings.

No card · choose one repo · disconnect anytime

Sign in with GitHub or Google on the web. The iPhone app is coming to the App Store.