MergeWarden
The change-control gate for AI-agent pull requests
6 followers
The change-control gate for AI-agent pull requests
6 followers
AI coding agents open PRs all day. Who checks they stayed in bounds? MergeWarden is a checkout-free GitHub Action and CLI that gates AI-agent PRs against your repo's boundaries: declared scope, agent-control-plane drift (AGENTS.md,mcp.json), and workflow permission escalation. No checkout, no LLM, deterministic replayable evidence. See what it catches in one command, no token or repo: npx mergewarden demo. Built after scanning 2,204 merged agent PRs: zero declared their scope. MIT.
Hi Product Hunt 👋 I'm Jinhyuk, maker of MergeWarden.
Coding agents (Devin, Copilot, Codex, Claude Code, Cursor) now open and merge pull requests at scale. But when an agent PR lands, a reviewer has exactly what they'd have for a human PR: the diff. The agent knew precisely what task it was given — none of that intent survives into the PR in a form anything can check.
So I scanned 2,204 recently merged agent PRs to see what actually happens. 0 of 2,204 declared a machine-checkable scope. Of the ones that touched CI workflows, ~13% escalated GitHub Actions permissions, and 3.9% edited the files that steer future agents (AGENTS.md, .mcp.json).
MergeWarden is the change-control gate I built for exactly this: a checkout-free GitHub Action + CLI that checks each agent PR against your repo's boundaries — declared scope, agent-control-plane drift, and workflow permission escalation. It never checks out PR code, never calls an LLM, and every finding is deterministic and replayable. MIT-licensed.
See exactly what it reports in one command — no token, no repo, no signup:
npx mergewarden demo
That runs a bundled example PR on the default policy, so what you see is what a zero-config install actually reports. Then point it at a real public PR:
npx mergewarden scan owner/repo#123
Would love your feedback — especially on false positives and which boundaries you'd want checked. Happy to answer anything about the data or the detection rules.