Reinhard BonkeTricreta
Websites

GuardAIOps

A control-gated review platform that catches what AI-written infrastructure breaks, before it merges.

GuardAIOps — A control-gated review platform that catches what AI-written infrastructure breaks, before it merges.
The problem

Teams now generate a month of Terraform, GitHub Actions and Kubernetes YAML in an afternoon with Claude or Copilot, but nobody reads all of it — and the destroy is always on line 190. Manual review does not scale to that volume, compliance evidence gets reconstructed by hand for every audit and questionnaire, and console drift goes unnoticed until it is a production incident or a finding on the next audit.

What I built

Built a phase-gate check that runs on the pull request itself: every resource in the plan reviewed against named controls mapped to CIS, NIST 800-53, NIST CSF, PCI DSS, HIPAA, SOC 2, FedRAMP and SLSA, each finding returned with a code, the control it belongs to and the framework clause behind it. It runs on the customer’s own runners and in their own accounts, so no infrastructure code ever leaves their perimeter, and it drops into the same GitHub check flow teams already use — no new dashboard, no standing agent in production.

The outcome

Clean changes merge untouched with the evidence recorded automatically; changes that break a control are blocked with an exact reason instead of surfacing as an incident or an audit finding later. Reviews that used to depend on someone reading a diff line by line on a Thursday afternoon now happen the same way, every time, in under a minute.

What the client said

“I keep bringing TriCreta back because they deliver, project after project — automation, Blue Horizon Estates, GuardAIOps, ValueHomePros. Every one of them was built right, on time, and exactly how I needed it.”
Prashant Chawla·Founder, GuardAIOps
Open GuardAIOps

Source is private — the owner does not permit public access to this codebase. A walkthrough is available on request.

More websites work