# TraceAxiom

> TraceAxiom builds Verify, a GitHub Action in development that runs AI-written pull requests, checks their claims, and posts one verdict. It is not installable yet.

On a pull request, Verify checks out the base and the head, detects the stack (Node and TypeScript first), runs the repository's existing tests on both, runs claim checks, and posts one comment with a verdict and its reasons. The verdicts are accept, needs review, reject, and couldn't run. The claim checks ask whether a change only bumps dependency versions, whether it touches what the tests depend on, and whether every newly added npm dependency exists.

## Canonical source

- Website: https://traceaxiom.com/
- Verify, the product: https://traceaxiom.com/verify
- Vision and roadmap: https://traceaxiom.com/vision
- Pricing and the waitlist: https://traceaxiom.com/pricing
- Verify compared with AI review bots: https://traceaxiom.com/compare/ai-code-review-bots
- Glossary of AI code verification terms: https://traceaxiom.com/glossary
- Security and vulnerability reporting: https://traceaxiom.com/security
- Public trust record: https://traceaxiom.com/trust
- Website release record: https://traceaxiom.com/release-record
- Machine-readable verification record: https://traceaxiom.com/.well-known/traceaxiom-verification.json
- About: https://traceaxiom.com/about
- Engineering field guides: https://traceaxiom.com/guides
- Privacy notice: https://traceaxiom.com/privacy
- Website terms: https://traceaxiom.com/terms
- Contact: https://traceaxiom.com/contact
- Sitemap: https://traceaxiom.com/sitemap.xml
- Complete public corpus: https://traceaxiom.com/llms-full.txt
- Machine-readable page index: https://traceaxiom.com/ai-index.json
- Engineering guide feed: https://traceaxiom.com/feed.xml

## Page guide

- `/` explains the problem and Verify, and shows one explicitly illustrative example verdict on an example pull request.
- `/verify` is the product page: how Verify runs, its control tests, mutation testing of the changed lines, its three claim checks, its four verdicts, and what is built and not built yet.
- `/vision` is where TraceAxiom is going: a neutral referee issuing a checkable receipt for every AI-written change, the staged road there (Verify now; signed receipts and independent tests next; an open receipt standard later; beyond code), and which stages are plans.
- `/pricing` explains how Verify will be priced: planned free for open source, half of list price for design partners, a list price published before launch, and running on the customer's own CI runners. Nobody pays today.
- `/compare/ai-code-review-bots` compares running a change (Verify) with reading it (AI review bots).
- `/glossary` defines the terms behind trusting AI-written code, one page per term, each stating how Verify uses it and whether that part is built.
- `/security` is the vulnerability-reporting policy named by security.txt, plus where Verify runs and which security claims are not made.
- `/trust` is the public trust center for identity, product status, data handling, security boundaries, and evidence authority.
- `/release-record` publishes the current website release scope, source binding, checks, limitations, and machine-readable verification record.
- `/about` identifies founder and lead engineer Arhan Canli, states the pre-incorporation status, and explains why Verify exists.
- `/guides` is the canonical index for TraceAxiom's engineering field guides on reviewing and verifying coding-agent work.
- `/privacy` names the design-partner form fields, purposes, processors, retention boundary, and user choices.
- `/terms` defines the public website terms without substituting for a customer agreement.
- `/contact` provides the founder, design-partner, privacy, and security-reporting routes.

## Current claim boundary

Verify is being built and is not installable. Since 3 October 2026 it posts its verdict as a comment on real pull requests in TraceAxiom's own repository. Built: tests on base and head, control tests planted in every test file, a separate user for the pull request's code on GitHub's runners, three claim checks, mutation testing of the changed lines, the verdict comment, and npm, pnpm and Yarn 2+ support. 444 automated tests pass on Verify's main version. Not built yet: signed receipts end to end, independent tests written by AI, and the install flow. TraceAxiom publishes no usage, customer, accuracy, or speed figures.

## Identity and contact

- Founder and lead engineer: Arhan Canli
- Canonical founder profile: https://github.com/arhancanli
- Founded: 2026
- Current status: independent, pre-incorporation product project
- Contact: access@traceaxiom.com
- Security reporting: https://traceaxiom.com/security

## Core concepts

- Verifying AI-written pull requests by running them
- Tests on base and head of a pull request
- Claim checks: dependency-bump-only changes, test-surface changes, non-existent npm dependencies
- Verdicts: accept, needs review, reject, couldn't run
- Mutation testing of the changed lines in CI
- Control tests that expose switched-off or forged test results
- Stating plainly which checks did not run