AI-agent
readiness, scored.
Charter scans any repository and returns a 0–100 readiness score in under two seconds — 18 rules across nine categories. Completely offline.
No network. No LLM calls. No data leaves your machine.
Repos fail readiness for boring, fixable reasons
Missing AGENTS.md, secrets visible to agents, an unpinned MCP server, no discoverable verify command. Charter checks the nine things that decide whether an agent helps or flails — and every finding carries a rule ID and a fix.
A small, sharp command surface
No dashboard, no account, no telemetry. Everything runs from your shell — and from CI.
charter doctor
Scan the repo and print a 0–100 readiness score with a per-category breakdown. Exit 0 = pass, 1 = below threshold, 2 = error.
charter init
Scaffold the context files an agent needs — AGENTS.md, charter.yaml, .gitignore — so the next scan starts from a clean baseline.
charter fix
Diff-first auto-repair for supported rules. Nothing is written until you approve the unified diff. Secrets rules are never auto-touched.
charter suppress
Record a governed waiver with a reason, owner, and optional expiry — an audit trail, not a mute button.
charter explain
Print the catalog metadata for any rule: id, name, category, severity impact, summary, and docs URL.
charter report
Write a self-contained, offline single-file HTML report — fonts and data inlined, opens from file:// with zero network.
charter version
Print the version, build provenance, commit SHA, and supply-chain verification status. Useful in CI logs and bug reports.
From first scan to a gate that holds
Readiness isn't a one-time cleanup. Charter takes a repo from an honest baseline to ship-ready — then makes the score a wall every pull request has to clear.
charter init Scaffold the baseline
baseline readyCreates the context files an agent needs — AGENTS.md, charter.yaml, .gitignore — only what's missing.
charter doctor Get your number
A static scan in under 2s scores the repo across 9 categories. Most repos land in the 40–60 range.
charter fix Repair, diff-first
Approve unified diffs for the four safe fixers. Secrets and dangerous commands are never auto-touched.
charter suppress Govern the exceptions
1 waived · 90dLog an accepted risk with a reason, an owner and an expiry. An audit trail that re-surfaces — not a mute button.
charter-action@v1 Gate every PR
threshold ≥ 80CI re-scores each pull request and blocks merges below threshold. Readiness stops drifting and only ratchets up.
Gate every PR on readiness
The action downloads the signed binary, runs charter doctor --format sarif, and uploads to GitHub Code Scanning — so findings show up natively on the PR and merges below your threshold are blocked.
# .github/workflows/charter.yml
name: Charter
on:
pull_request:
permissions:
contents: read
security-events: write
jobs:
charter:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: use-charter/charter-action@v1
with:
threshold: "80"
verify: true It respects your machine and your data
Completely offline
No network calls. No LLM calls. No telemetry. Charter reads your files and nothing leaves the machine.
Apache-2.0, free forever
Open source and permissively licensed. Vendor it, fork it, ship it inside your own tooling.
SLSA Level 3 signed
Every release is supply-chain signed with verifiable provenance. Trust the binary you install.
SARIF 2.1.0 output
Standard static-analysis output that drops straight into GitHub Code Scanning and your existing tools.