Wizeri Delivery Platform
Every role on a delivery team, played by an agent — separation of duties by design, with a human kept at only the two decisions that matter.
Six stages, one pipeline
Every role on a delivery team, encoded as a gate the work has to clear — never a single agent deciding it's done.
- 1
Spec & architecture
Turns a plain-English ask into a structured spec with checkable acceptance criteria, informed by the actual codebase. Pauses for sign-off.
- 2
Build & review
Implements against the spec in the project's own style, then an independent agent reviews every diff like a strict senior engineer — logic, edge cases, conventions.
- 3
Security & audit
Runs unconditionally on every change — auth gaps, data-isolation leaks, injection risks — the cheapest bug to prevent, the most expensive to ship.
- 4
Test & end-to-end
Writes unit and integration tests, then stands up the real app and drives it through a browser — the way a human QA engineer validates a release.
- 5
Adversarial bug-hunt
A final independent pass looking for what the other gates don't prove absent: race conditions, abandoned state, boundary bugs, silent regressions.
- 6
Deploy — on your word
Pre-flight checks, a stated plan, and a deliberate stop. Deploy is a confirmed human action, never a side-effect of the tests passing.
How an engagement starts
Nothing to install, nothing to run on the client's side. One minimal grant of access, and the rest is ours to operate.
- 1
A scoped GitHub token
A fine-grained token limited to a single repository, with exactly two permissions: Contents and Pull requests, both read/write.
- 2
A structured spec
Each engagement starts from a code-aware spec with checkable acceptance criteria — proposed first, implemented only after sign-off.
- 3
Pull Requests in your own repo
Every change lands as a reviewed Pull Request in the client's own repository — never a direct push, never an auto-merge.
- 4
The client keeps the merge button
Review and merge stay a client decision, on the client's own timeline.
- 5
Production deploy — optional
Available as a per-engagement mode. When it's on, a merged change goes live only after a separate, explicit, human-approved deploy action — never automatically.
Security by construction
Every claim below maps to a mechanism, not a certificate.
Instance-per-client isolation
Every client runs on a dedicated, single-tenant instance — its own container, its own database, its own configuration. No shared database, no tenant IDs, no cross-client data path.
PR-only delivery, no auto-merge
Every change lands as a Pull Request in the client's own repo — never a direct push to the main branch, never an auto-merge.
ip-guard screens every diff
Before anything is pushed, a dedicated filter scans the full diff being delivered and blocks it if it finds our own tooling files or a token value in the content.
Minimal, fine-grained GitHub token
Scoped to Contents (read/write) and Pull requests (read/write) on a single repository — nothing broader, no org-wide or account-wide access.
Human-attributed approvals
Approval decisions are never auto-decided by code — each one is an explicit human action, recorded with a timestamped approval event.
EU-region backups
Nightly backups are stored in EU-region object storage only — never routed outside the EU.
Not a coding assistant — a team. Not sold as a subscription product; shown here as Wizeri's own proof of capability.
See it live →