Skip to content

Releases: Rosentic/rosentic-action

Rosentic v1.8.0 - 13 Languages, Reachability, Enforced Gate, Audit Trail

Choose a tag to compare

@coachescritique coachescritique released this 10 Jul 18:23

Catches when AI-agent branches break each other's contracts before merge. 13 languages, AST-level, runs on your CI runners. The engine goes to the code; the code never goes to the engine unless you send it.

What's new since 1.7.0

  • Dart is the 13th language - L1 signature analysis (free functions and class methods; named, optional-positional, and required parameters).
  • Reachability - every UNSAFE finding now says whether the broken contract is actually reachable from an entrypoint or export (or test-only / unreachable / unknown), with the shortest path. unreachable requires closed-world proof; uncertainty degrades to unknown, never suppresses.
  • Enforced merge gate - policy-driven exit codes in CI. The gate fetches your effective policy at scan time; advisory fails open, blocking fails closed, never silent.
  • Agent-facing next steps - when the gate blocks, the output and the PR comment tell a coding agent exactly how to fetch the SHA-keyed verdict JSON and how to load the Rosentic MCP tools, so an agent can act on a block without a human.
  • Tamper-evident audit trail - hash-chained, append-only ledger of every gate verdict, replayable, JSON/CSV export. verify-chain recomputes from genesis.
  • Govern - versioned per-repo/org policy (gate mode, severity, per-layer enforce/advisory); overrides require who + reason and land in the ledger.
  • Agent attribution - which agent authored each branch, multi-signal (branch + commit identity + trailers + .rosentic/agents.yml), with confidence tiers.
  • MCP server - six in-loop tools (check before the write, check before the push) for Cursor / Windsurf / Claude Code / Codex and more. Offline-capable. pip install rosentic-mcp.
  • Anonymized telemetry contract - branch names and commit SHAs are hashed on your runner; raw names/SHAs never leave in no-key mode.
  • Cross-repo drift (experimental) - detects the same contract drifting across your repos (proto lane). Standalone; not yet in the default scan.

No workflow changes required. @v1 users get everything automatically.

Rosentic v1.1.0 - 12 Languages, Fewer False Positives, Dashboard

Choose a tag to compare

@coachescritique coachescritique released this 16 May 16:12

Catches when changes across branches break each other before merge. 12 languages. AST-level detection. Runs in your CI pipeline.

What's new since v1.0.0

  • 12 languages - added PHP support
  • Fewer false positives - smarter matching reduces noise across OOP languages
  • Faster scans - parsing optimizations across all languages
  • Agent attribution - see which AI agent authored each branch. Set ROSENTIC_AGENT env var or let Rosentic auto-detect
  • Dashboard - free tier tracks findings across PRs, shows trends, Merge Index
  • Better PR comments - deduped, with finding counts and dashboard links

1,250+ scans across 10 organizations and 21 repos.

No workflow changes required. Users on @v1 get everything automatically.

Rosentic v1.0.0 - Cross-Branch Compatibility Check

Choose a tag to compare

@coachescritique coachescritique released this 06 Apr 14:13

Catches when changes across branches break each other before merge. 11 languages. AST-level detection. Runs in your CI pipeline.
Every branch passes CI. Every PR looks clean. But when multiple agents push changes in parallel, they create invisible compatibility conflicts. Rosentic checks every active branch pair and flags the breaks before they hit production.
Add the workflow YAML, open a PR, see results. Results posted directly on your PR.