Check what you install
rdv CLI
The checker. It re-runs a package's hidden tests on your machine, offline and free, and confirms nothing was swapped. It also shows how many packages npm really installed.
npm i -g rederive rdv check node_modules/@rederive/colors --lang js rdv audit
rdv guard & rdv init CLI
rdv guard gates the new dependencies in a pull request: green, yellow or red. rdv init sets a project up for the rederive way of working: agent rules, hooks and a commit seal.
rdv guard base.lock head.lock --reporter github uses: rederive/dep-guard@v1 rdv init . --dry-run
Review pull requests
SIR review GitHub Action
Reviews every change to a SIR contract in plain English, right on the pull request. It fails like a test when a tested change comes without a test change, or when a hidden answer is quietly rewritten. The Action's own code went through the same verification it enforces.
- uses: actions/checkout@v4
with: { fetch-depth: 0 }
- uses: rederive/sir-review@v1
rdv review any CI
The same review on GitLab, Jenkins, Azure DevOps or your laptop. It prints the review as Markdown, a per-contract table, annotations or JSON, and exits 1 on a Stop.
npx -p rederive rdv review --base origin/main npx -p rederive rdv review --base origin/main --format summary
Read and write SIR
SIR for VS Code extension
Colors, live checks (the same ones rdv check runs), binding and test status above each contract, hover for any rule, go to definition, an outline, and a formatter that can't break a binding. Open VSX covers Cursor, Windsurf and VSCodium.
VS Code Marketplace: rederive.sir-lang Open VSX: rederive.sir-lang
rdv lsp any editor
The same checks as a standard language server, with no dependencies, for Neovim, Helix, Emacs, Sublime or anything else that speaks LSP.
rdv lsp --stdio
The SIR spec spec
The contract format: one language-neutral contract per unit, per-language files beside it, and tests nobody upstream can move.
Build verified code
sir-factory CLI
The factory that turns a package into a verified bundle. It stamps tests from the original, grades independent rebuilds against tests the builders never saw, and packs only what passes.
npm i -g sir-factory
Claude Code plugin plugin
Runs the loop from Claude Code: verify a package, rebuild one from its contract, or check a change before you make it.
/plugin marketplace add rederive/rederive /plugin install rederive@rederive
Verified bundles
@rederive/colors verified
The first catalog bundle: strip from colors.js, in JavaScript, TypeScript and Rust, all checked against the same hidden tests.
npm i @rederive/colors
rederive-core & review-core verified
rederive put its own code through the loop. 42 parts of the checker itself and the 12 parts of the pull-request review were re-derived blind and verified. Along the way the loop found real bugs in both, including in the checker's own grader.