Everything we ship

rederive tools

One checker, and everything around it: a review that runs on your pull requests, editor support, the factory that builds verified code, and the bundles it has built. All free and open source.

Check what you install

rdv CLI

The checker. It re-runs a package's hidden tests on your machine, offline and free, and confirms nothing was swapped. It also shows how many packages npm really installed.

npm i -g rederive
rdv check node_modules/@rederive/colors --lang js
rdv audit

rdv guard & rdv init CLI

rdv guard gates the new dependencies in a pull request: green, yellow or red. rdv init sets a project up for the rederive way of working: agent rules, hooks and a commit seal.

rdv guard base.lock head.lock --reporter github
uses: rederive/dep-guard@v1
rdv init . --dry-run

Review pull requests

SIR review GitHub Action

Reviews every change to a SIR contract in plain English, right on the pull request. It fails like a test when a tested change comes without a test change, or when a hidden answer is quietly rewritten. The Action's own code went through the same verification it enforces.

- uses: actions/checkout@v4
  with: { fetch-depth: 0 }
- uses: rederive/sir-review@v1

rdv review any CI

The same review on GitLab, Jenkins, Azure DevOps or your laptop. It prints the review as Markdown, a per-contract table, annotations or JSON, and exits 1 on a Stop.

npx -p rederive rdv review --base origin/main
npx -p rederive rdv review --base origin/main --format summary

Read and write SIR

SIR for VS Code extension

Colors, live checks (the same ones rdv check runs), binding and test status above each contract, hover for any rule, go to definition, an outline, and a formatter that can't break a binding. Open VSX covers Cursor, Windsurf and VSCodium.

VS Code Marketplace: rederive.sir-lang
Open VSX: rederive.sir-lang

rdv lsp any editor

The same checks as a standard language server, with no dependencies, for Neovim, Helix, Emacs, Sublime or anything else that speaks LSP.

rdv lsp --stdio

The SIR spec spec

The contract format: one language-neutral contract per unit, per-language files beside it, and tests nobody upstream can move.

Build verified code

sir-factory CLI

The factory that turns a package into a verified bundle. It stamps tests from the original, grades independent rebuilds against tests the builders never saw, and packs only what passes.

npm i -g sir-factory

Claude Code plugin plugin

Runs the loop from Claude Code: verify a package, rebuild one from its contract, or check a change before you make it.

/plugin marketplace add rederive/rederive
/plugin install rederive@rederive

Verified bundles

@rederive/colors verified

The first catalog bundle: strip from colors.js, in JavaScript, TypeScript and Rust, all checked against the same hidden tests.

npm i @rederive/colors

rederive-core & review-core verified

rederive put its own code through the loop. 42 parts of the checker itself and the 12 parts of the pull-request review were re-derived blind and verified. Along the way the loop found real bugs in both, including in the checker's own grader.

For AI agents

Agent setup prompt docs

The whole workflow, written for an agent: install, a zero-footprint demo, then ask before touching your project.