Proof

We run this product on our own code. Here is the record.

Everything below is our own code. Where a repository is public, every claim links to the thing that checks it. Where it is private, we say so — and claim less.

cursor-enterprise-skills · enterpriseskills-site

The platform that governs its own merges

No pull request merges into this product or this website without passing the same Release Governor we sell. A pull request here needs its evidence rewritten for that exact change, bound to the change's content by digest, and scored. The gate has said no to its own makers — the FAIL count below includes merges we had to stop.

883
release decisions recorded

release_decisions

54
FAIL verdicts — the gate said no

release_decisions

9
repositories with recorded decisions

release_decisions

416
CI-attested ledger entries

es_evidence_transparency_log

Counted live from the named tables when this page was rendered. "CI-attested" means the CI run that reproduced the check signed the entry.

Every decision on our two public repositories is replayable — open one and see exactly what the governor saw. The counts above also include our private repository; its decisions appear in the numbers but not the replay.

Identifi — another platform we own · Rails + JS · governor wired in on August 5, 2026

A second codebase as a measuring instrument

Identifi is not an independent test: it is another platform we own. It is not a customer and it pays us nothing. What it adds is narrower and real — a production Rails and JavaScript codebase with its own CI and conventions that predate this product, where wiring in the governor measured genuine friction: three adoption cliffs in a single day. The governed sync consumed a CI seat per run, a squash-merged pull request's decision could vanish behind a synthetic merge commit, and our own plan's repository cap landed exactly at the third repository.

What happened next is the record worth reading. The squash-merge trap is fixed in the shipped CLI, and the changelog entry names the very pull request that exposed it — the changelog is public; the pull request it names lives in the private repository. The seat burn defined a new requirement: CI credentials that do not spend a person's seat. And the third cliff was our own plan's limit doing its job — Pro governs three repositories, the cap applies to us like anyone else, and more than three is what the Team tier's ten are for.

Identifi's repository is private, so we won't show you its dashboard. Its pull requests gate on the same governor check yours would.

Disclosures

On August 8, 2026, the governor check on one of Identifi's open pull requests was red because we had not rotated a CI key — the gate does not bend when the party being inconvenienced is us.

No customer logos or quotes appear on this page because we do not have customers to quote yet, and we have no third-party records to show. If a third-party deployment ships and its owner agrees to be named, it will appear here under the same standard — every claim carrying the link that checks it.

Get started