MergeWarden

AI coding agents open PRs all day. Who checks they stayed in bounds? MergeWarden is a checkout-free GitHub Action and CLI that gates AI-agent PRs against your repo's boundaries: declared scope, agent-control-plane drift (AGENTS.md,mcp.json), and workflow permission escalation. No checkout, no LLM, deterministic replayable evidence. See what it catches in one command, no token or repo: npx mergewarden demo. Built after scanning 2,204 merged agent PRs: zero declared their scope. MIT.