For engineering teams shipping AI-written code

Your agents write the code. Who checked it?

Arrgate puts an independent review crew on every pull request: a reviewer on a different model, a tester, a security red team and a reuse check. You only see what needs a person, and every change leaves a signed evidence record your SOC 2 or ISO 27001 auditor can check.

Built for teams of 5–30 engineers using Claude Code, Cursor or similar agents. Runs in your own GitHub.

arrgate commented on PR #482 · Add invoice exportExample
✓
Reviewer (different model from the author)Logic and design look right. One naming suggestion.
✓
Tester added 4 testsOne fails on the old code, so it really guards the new behaviour.
!
Red team proved a riskAny signed-in user can read another team's invoices via /api/invoices/:id. Sent back to the builder to fix.
↺
Reuse checkformatMoney already exists in lib/money.ts. Use it instead of the new copy.
✓
Evidence record signedTicket, reviews, tests, approver and agent cost: US$1.84.
Needs a person: no. The fix goes back to the agent, and you'll get one short packet if it fails twice.

The problem

AI made writing code fast. Reviewing it didn't keep up.

01

Review is the bottleneck

Agents open pull requests faster than your seniors can read them. Either reviews get thin, or work queues up behind them.

02

The author shouldn't approve its own work

When one model writes the code and the same model reviews it, the same blind spots get waved through.

03

Your auditor will ask

"Show me who reviewed this AI-written change, and how it was tested." An approving click on GitHub isn't a good answer.

How Arrgate works

A review crew on every pull request. You only see what needs you.

Install it in your repository once. From then on, every pull request (from an agent or a person) goes through the same checks, inside your own GitHub Actions.

01Independent reviewer

Runs on a different model from whatever wrote the code, and sees only the diff, the ticket and the tests.

02Tester

Writes tests that protect what already works, and shows them failing where behaviour changed, so you know they catch something.

03Security red team

Tries to break the change and reports proven risks, not a list of maybes.

04Reuse check

Spots code that duplicates something you already have and points to it, before your codebase fills with near-copies.

05Manager

Applies your team's review rules. Findings go back to the agent to fix; a person gets one short packet only when a rule says so.

06Cost per change

Every pull request shows what its agent runs cost, and Arrgate stays inside your plan's limits unless you choose otherwise.

Evidence your auditor can use

Every change leaves a signed record.

Change management is where AI-written code gets awkward in an audit. Arrgate writes one record per pull request and exports them for your SOC 2 (CC8.1) or ISO 27001 (A.8.32) evidence.

  • Who asked for it: the ticket and the request.
  • What checked it: each reviewer, its model, and what it found.
  • How it was tested: the tests added, shown failing before the change.
  • Who approved it, and what the agent runs cost.
  • Signed, so it can't be quietly edited later. Export to CSV in one command.
change PR #482 · Add invoice export ticket ENG-219 written_by agent (Claude Code) · 92% AI reviewed_by reviewer · different model red team · 1 risk, fixed in 3a91f0c tests +4 · failed before change: 1 approved_by j.chen (CODEOWNERS) agent_cost US$1.84 controls SOC 2 CC8.1 · ISO 27001 A.8.32 signature ed25519 ✓ verified

Example record. Field names may change before release.

Built to fit how you already work

No new platform to trust with your code.

Runs in your GitHub

Everything runs in your own GitHub Actions with your own model keys. Your code never passes through us.

Works with your agents

Claude Code, Cursor or anything else that opens pull requests. Arrgate reviews the result, not the tool.

Your rules decide

You set what needs a person and what doesn't. Change the rules any time; they're a file in your repo.

Founding teams

Help shape it, and pay half.

We're starting with a small group of teams in Australia and New Zealand, from January 2027.

  • 50% off your first year.
  • Set up with you, on a call, in your repo.
  • A direct line to the founder, and a real say in what gets built next.
  • Your time zone. Calls during your working day.

We'll reply from hello@arrgate.com within two working days. No newsletter, no sharing your details.

Questions

Before you ask

Can I use it today?

Not yet. Founding teams start in January 2027 with a guided setup. Sign up and we'll tell you as soon as your spot is ready.

Does my code leave my account?

No. Arrgate runs in your GitHub Actions with your model keys. We only ever see usage counts, never code, diffs or prompts.

Which AI providers does it use?

The ones you already pay for. Reviews run on a different model from the one that wrote the code, so blind spots don't repeat.

We use CodeRabbit or similar. Why both?

Review comments are one part. Arrgate adds tests that prove they catch something, a red team, your team's rules about what needs a person, and audit evidence.

What will it cost?

Priced per team, not per seat, in US dollars. Founding teams get 50% off the first year.

Who's behind it?

An engineer in Western Australia building the tool they wanted for their own AI-written code. Email hello@arrgate.com any time.