Foretop - CI-native drift scanners for AI systems

by
Foretop catches changes outside your repository that can still break it. Four Apache-2.0 scanners run locally or in CI with no Foretop account: Ebb checks model retirements, Telltale maps OpenAPI telemetry gaps, Charter reviews MCP capability changes, and Lading traces AI asset licence obligations. Every result carries evidence; unknown is never reported as clear. The optional Hub adds shared history, policies, ownership and exports—free for 3 repositories, with Team for up to 10.

Add a comment

Replies

Best
Hi Product Hunt — I’m Nicolas, the maker of Foretop. I built Foretop after noticing that some of the most consequential changes in an AI system happen outside its repository. A provider retires a model, an API route ships without declared telemetry, an MCP server gains a capability, a dependency brings a licence obligation, or a vendor changes its subprocessors. Ordinary linters cannot see those changes. Foretop turns them into one evidence-backed CI workflow: - Ebb — model retirements: `uvx foretop-ebb scan .` - Telltale — OpenAPI telemetry coverage: `uvx foretop-telltale check .` - Charter — MCP capability drift: `uvx foretop-charter scan .` - Lading — AI asset licence obligations: `uvx foretop-lading scan .` Four Apache-2.0 scanners run locally or in CI with no account, and source stays local. Undertow is scheduled monitoring for vendor subprocessor changes rather than an installable CLI. Every result carries evidence, and a check that could not establish an answer stays unknown instead of becoming clear. The public reports are independent analyses of real open-source repositories at pinned commits, not endorsements, and the same commands reproduce them. Foretop Hub is the optional shared layer for teams that want run history, repository policies, ownership, expiring suppressions, comparisons, and evidence exports. Sending finding metadata is explicit; repository source bodies are not uploaded. Free supports 3 repositories with 30 days of finding detail. Team supports 10 repositories with 365 days of finding detail for €39/month or €390/year, including tax. Run history remains available on both plans. I’d especially value feedback on which kind of external drift is hardest to catch in your stack, whether Foretop’s findings make the next action clear, and what would stop you adding one of the checks to CI.
What became possible in your product with Astra that was not practical before?
Before Astra, Charter could verify what an MCP server declares. Astra adds something fundamentally different: reasoning over those declarations to uncover risks no predefined rule explicitly describes. Charter extracts a sanitised manifest of tool descriptions, schemas and capabilities. Astra interprets that evidence as a whole understanding intent, comparing what tools claim to do with what their inputs enable, and reasoning across tools to identify unexpected capability chains. It returns structured concerns with cited evidence and verification steps, while deterministic findings remain authoritative. Astra makes this open-ended semantic analysis practical: Charter no longer needs a rule written in advance for every novel tool, wording or capability combination it encounters.