GauntletCI is a static analysis tool designed to identify behavioral changes in pull request diffs that may not be properly validated. It runs deterministic rules over diffs to flag risks such as concurrency issues and missing error handling, ensuring code analysis remains local without external service involvement. Installable via winget, GauntletCI seamlessly integrates into development workflows.
Ideal for developers and teams prioritizing application reliability and security, GauntletCI identifies risky behavior early, enhancing code quality and reducing post-deployment issues. By maintaining data privacy through local analysis, it helps prevent hidden regressions, ensuring robust and secure software development.
README
GauntletCI
Your tests passed. Your PR was approved. Your change still broke production.
Tests confirm existing behavior. Code review confirms intent. Neither validates what your change actually does.
GauntletCI detects Behavioral Change Risk in pull request diffs: logic shifts, missing validations, and hidden regressions that compile cleanly, pass every test, and survive code review — before the commit is created.
LLM explanations are available as an opt-in layer. The detection logic itself never involves one.
See It Live
The GauntletCI-Demo repo contains 36 scenarios across 3 tiers — each compiling cleanly, passing all tests, and passing traditional SAST gates, while introducing behavioral risk only visible at the diff level.