soundings

Take soundings before you ship. Point it at one or more GitHub/GitLab compare URLs and get a clear release verdict - release, manual review, or no-go - computed from the severities of the risks found and saying what drove it, plus a report specific enough to act on: named files and functions, concrete pre-release checks, and compound-risk detection across repositories in multi-service deployments. No external LLM API, no service-account key, no Docker image - the Claude agent already in your session does the analysis in an isolated read-only stage hardened against prompt injection, a small Go helper does the fetching, and a normal run needs no permission prompts.