Synthetic demo report — no fake customer claim
Sample AI-Agent Change Risk Audit Report
A buyer-facing example of what the kit produces: risk level, findings, recommended action, and CI policy guidance.
Executive summary
Risk level: HIGH
Recommended action: Block merge until the high-risk findings are reviewed.
The proposed AI-agent change touches dependency definitions, authentication-adjacent code, and runtime configuration. Even if the code compiles, this combination can create hidden supply-chain, secret-handling, and deployment risks.
Risk findings
1. Dependency change without owner review
Severity: High
New dependencies can introduce supply-chain risk, licensing issues, bundle bloat, or abandoned packages.
2. Secret-looking literal detected
Severity: High
Tokens, API keys, or credentials can be accidentally committed by an agent. Remove literals and rotate if any value may be real.
3. Source changed without tests
Severity: Medium
Agent-generated changes can look correct but miss edge cases. Add tests for changed behavior and negative paths.
Merge recommendation
BLOCK MERGE
Reason: one or more high-risk categories were detected. The change should be reviewed by a human maintainer before merge.
Suggested CI policy
- Low risk: allow merge after normal checks.
- Medium risk: require reviewer acknowledgement.
- High risk: block merge until reviewed and documented.
Buyer value
Get the kit
Start with Basic for a local risk gate, or Pro for agency/team workflows.
Manual delivery MVP. No fake automation claims. PayPal hosted checkout.