Spinal
Start free

Production-aware trust layer for agentic SDLC

Trust
AI‑written code
before it ships.

Spinal captures intent, reviews AI-written changes, and validates risky PRs against production signals before merge.

Start free

No credit card required

Coding agents
Claude CodeCodexCursorMCP
SpinalTrust layer
Intentcapture
Reviewvs intent
Validateprod-shaped
Evidencepreserved
OutputMerge backed by evidence
Production signals
DatadogGrafanaPrometheusSentry

The trust layer between your agents and production

Trusted by teams shipping production software
InviaHomeToGoFlüge.deAb-in-den-UrlaubInviaHomeToGoFlüge.deAb-in-den-Urlaub

The shift

The bottleneck moved from writing code to trusting change.

Coding agents make change cheap. Spinal makes trust repeatable: capture intent, review the change, and validate risk with production evidence.

Intent
Know what the agent meant

Capture the plan before the diff hardens.

CLIClaude skill
Review
Check locally and at PR

Compare the change against intent, repo rules, and context.

GitHubGitLab
Validate
Test the risky part

Use production signals to generate a focused check before merge.

DatadogGrafanaPrometheus
01 / INTENT

See what the agent plans before the diff exists.

  • →
    Block-level plans
    Inputs, components, data stores, systems, outputs, validation.
  • →
    Agent feedback loop
    Comment on a plan or block; revised intent stays in the record.
  • →
    Lightweight sign-off
    Capture human confidence without hard-gating every step.
spinal · intent session
checkout-web · rev 2
Add one-click checkout
Signed off · rev 2 · Claude Code live
3 need review
CLIClaude skillplan intent
inputCheckout request

Validate cart and payment token before placing the order.

componentOrder service

Reuse the existing order path; do not add a separate pricing path.

datastoreInventory store

Preserve stock reservation, audit fields, and release behavior.

validationRegression checks

Verify one-click flow, stock reservation, and failed-payment audit logging.

Feedback reflected — duplicate pricing path removed from plan.sign-off saved
02 / VERIFY

Review locally, then again at PR time.

  • →
    Local CLI review
    Catch mismatches while the branch is still easy to change.
  • →
    Intent-aware PR review
    Find behavior the agent added, missed, or contradicted.
  • →
    What Spinal Knew
    Show the evidence pack behind the review.
spinal · pr verification
checkout-web · PR #2741
One-click checkout implementation
feat/one-click-checkout → main
Verifying
GitHubGitLabCI
41async function checkout(req) {
42 const order = await validateCartAndPayment(req);
43 return placeExistingOrder(order);
44 // manual stock check removed
45}
Stock reservation not preserved
The signed plan says to preserve the existing stock reservation. Checkout traces show items selling near zero stock, so changing the order path needs a production-shaped validation.
intent · rev 2traces · checkoutSLO · oversell
DatadogGrafanaPrometheus
Generating production-informed validation…spinal/validate
03 / VALIDATE

Turn production signals into a validation test.

  • →
    Observability-aware risk
    Use logs, metrics, traces, errors, SLOs, and history.
  • →
    Production-shaped tests
    Simulate the real scenario behind the risk.
  • →
    CI or sandbox execution
    Run the check and feed the result back into review.
spinal · validation
runner verified
DatadogGrafanaPrometheusSentry
Servicecheckout-web
Sourcecheckout traces + inventory SLO
Behaviorstock reservation is preserved
Production shapeone-click checkout on low-stock item
Runtimecustomer CI or sandbox
Generated teststests/spinal/stock-reservation.test.ts
npm test -- tests/spinal/stock-reservation.test.ts
Risk reproduced — fix before merge.spinal/validate ✓
04 / EVIDENCE

Every change leaves evidence for the next human or agent.

  • →
    Context packs
    Intent, session, telemetry, prior review, repo memory, references.
  • →
    Final quality signal
    What passed, what failed, and why it matters.
  • →
    Agent handoff
    Future agents inherit constraints and outcomes.
spinal · what spinal knew
context pack
logsmetricstracesSLOstests
  • IncludedIntent & Ticketsone-click checkout · sign-off rev 2
  • IncludedSession ContextClaude Code · local tests 14 passed
  • IncludedObservabilitylogs, metrics, traces, SLOs, auth error rates
  • IncludedValidation Resultstock-reservation test reproduced risk
  • MemoryFinal Reviewfix required before merge · evidence saved

Governance

Bring your own agents. Keep your controls.

Spinal wraps your SDLC. Each repo gets its own instructions, evidence sources, validation runner, tools, and privacy boundaries.

01 · Review
Repo-specific behavior
Auto-review, on-mention, summaries, inline comments, standing rules.
02 · Evidence
Observability sources
Logs, metrics, traces, SLOs, deploy info, schemas, trusted APIs.
03 · Privacy
Data boundaries
Ignored paths, redaction, PII detection, RBAC, SSO, SCIM, self-hosting.

Integrations

Observability is part of the validation loop.

Spinal connects source control, CI, observability, tickets, deploys, and internal tools so production signals shape validation.

Claude
Claude Code
Coding agent
Codex
Codex
Coding agent
Cursor
Cursor
Coding agent
MCP
MCP servers
Agent tools
GitHub
Source control
GitLab
Source control
Datadog
Production evidence
Sentry
Production evidence
Grafana
Observability
Prometheus
Metrics
Jira
Work context
Argo CD
Deploy context

Enterprise

Built for regulated agentic engineering.

Run Spinal inside your perimeter with controls across intent, review, validation, and audit history.

01 · Deployment
Self-hosted
VPC or on-prem. Code, telemetry, and credentials stay inside.
02 · Identity
SSO & SCIM
SAML/OIDC for Okta, Azure AD, and Google Workspace.
03 · Audit
Evidence trail
Tool calls, findings, validation, sign-off, and decisions logged.

Transparent pricing

Choose the right trust layer for your team.

Bring your own model for unlimited reviews, or go fully managed. SSO/SAML included in every plan.

MonthlyYearlySave up to 25%
› Your Model

Unlimited reviews with your own model.

€20/ developer / month
billed yearly
  • ✓Unlimited local and PR reviews
  • ✓Bring your own model or API key
  • ✓SSO/SAML included
  • ✓Custom rules and repo instructions
Start with Your Model
Recommended
› Fully Managed

Hosted AI reviews — no model keys to manage.

€30/ developer / month
billed yearly
  • ✓50 reviews per developer/month, then €0.50 each
  • ✓Model access included — no setup
  • ✓SSO/SAML included
  • ✓Spend caps and usage controls
Start with Fully Managed
› Enterprise

Private deployment, compliance, and dedicated support.

Custom
Volume & deployment-based pricing

Everything in Managed, plus:

  • ✓VPC, on-premise, or self-deployment
  • ✓SCIM, RBAC, and audit logs
  • ✓Data residency and retention controls
  • ✓SLA, DPA, and dedicated support
Contact sales

View-only stakeholders are free · Billed per active developer

Frequently asked

Questions about agentic SDLC trust.

Spinal is the production-aware trust layer for agentic SDLC. It captures intent, reviews changes locally and at PR time, validates risk with observability, and preserves the evidence.
No. Developers keep using Claude Code, Codex, Cursor, Copilot, or human workflows. Spinal sits around them as the evidence layer.
Yes, but it is broader than most AI code review tools. Spinal supports local review and AI PR review, then ties findings to intent, production signals, validation, and evidence memory.
Platform teams, AI engineering leads, staff engineers, engineering managers, and developers shipping more code with agents.
AI makes code cheap to produce. Spinal makes trust repeatable by recording intent, review findings, production evidence, validation results, and memory.
No. Spinal connects to source control, agents, CI, observability, tickets, knowledge systems, MCP servers, and internal APIs.

Intent · Local Review · PR Review · Observability · Validation

Put a trust layer
around your agents.

Connect a repo, capture intent, and validate the next AI-assisted PR with evidence your team can inspect.

Book a demoStart free