MaruCheck

Coding & DevelopmentTesting & QAFree
Visit website ↗
0Popularity
MaruCheck featured image

About MaruCheck

MaruCheck is an open-source verification tool designed to independently assess AI-generated code changes against predefined contracts. It records approved behavior and flags deviations, ensuring that semantic drift does not go unnoticed. The tool integrates with existing workflows, including CI pipelines and local development, by running verification checks that analyze risk, contract adherence, and historical evidence. MaruCheck produces structured reports and artifacts that document findings, allowing teams to inspect decisions and approve releases with confidence. It operates locally or in CI environments, keeping source code and secrets within the repository or runner. The tool is MIT-licensed and supports integration with agents like Codex, Claude Code, and Cursor via MCP, while maintaining human oversight for final approval.

Key features

  • Independent verification against approved behavior contracts
  • Risk assessment using contract criticality and historical signals
  • Local execution with source and secrets staying in the repository
  • Integration with CI pipelines and MCP-compatible agents
  • Structured evidence generation and artifact storage
  • Semantic change detection for AI-coded software
  • Regression recall for historical bugs
  • Human-approved release gates

Use cases

  • Verifying AI-generated code changes in CI pipelines
  • Ensuring semantic consistency in billing or subscription logic
  • Catching cross-account regressions in invoice access systems

Pros

  • Records and enforces approved behavior independently of AI-generated tests
  • Integrates with CI pipelines and local development environments
  • Produces inspectable evidence and structured reports for decisions
  • Supports risk assessment based on contract criticality and historical signals
  • MIT-licensed and open-source with CLI and MCP compatibility

Cons

  • Requires predefined contracts to function
  • No cloud-hosted version; runs locally or in CI
  • Limited to verification of code changes, not initial generation

Frequently asked questions about MaruCheck

What does MaruCheck do?

MaruCheck independently verifies AI-generated code changes against predefined contracts to detect semantic drift. It records approved behavior and flags deviations, ensuring that changes align with intended functionality before release.

Who should use MaruCheck?

Teams using AI coding assistants like Codex, Claude Code, or Cursor, as well as developers working in CI pipelines or local development environments, benefit from MaruCheck's independent verification to maintain software integrity.

How does MaruCheck integrate with existing workflows?

MaruCheck integrates with CI pipelines and local development by running verification checks that analyze risk, contract adherence, and historical evidence. It produces structured reports and artifacts for inspection and approval.

Can MaruCheck be used with agents like Cursor or Claude Code?

Yes, MaruCheck supports integration with agents such as Codex, Claude Code, and Cursor via the MCP protocol, allowing agents to run verification while keeping approval human-owned.

Does MaruCheck keep source code and secrets secure?

MaruCheck operates locally or in CI environments, ensuring that source code and secrets remain within the repository or runner, producing reviewable evidence under .maru/ without exposing sensitive data.

How do I get started with MaruCheck?

To get started, install MaruCheck via npm as a dev dependency, define contracts for approved behavior, and run verification checks using the CLI to analyze changes and generate evidence for review.

MaruCheck compared

Reviews

Best MaruCheck Alternatives

Finding the closest matches…