Fission AI

OpenSpec Cloud

Know when code and requirements stop agreeing before merge.

Install once. Get a baseline scan, a daily full-repository scan, and one exact-commit check when each pull request becomes reviewable. Use GitHub's Scan again action whenever you want a fresh result.

Example GitHub resultDrift found

Password reset safety

Expected: A password reset invalidates every active session.
Observed: src/auth/reset.ts:42 changes the password but leaves existing refresh tokens valid.
Next: Revoke all sessions during reset and add a regression test. Keep the requirement.
Verified: Exact commit, cited requirement, and implementation line.

Install now

Choose public or private repositories in GitHub. No new account, API key, or setup screen.

Security and data

This App reads repository contents and pull requests, then writes OpenSpec Cloud checks and one concise issue comment. Pull-request scans never open correction pull requests. After a complete installation, daily, or customer-requested full-repository scan, it may create or refresh one gated correction pull request containing only non-narrowing openspec/ edits for human review. It cannot edit implementation code, approve, or merge. Every scan runs in its own temporary worker with short-lived access to one selected repository. Selected requirement text and code excerpts are sent to Fission's managed OpenAI model. The clone is deleted after the scan, and OpenSpec Cloud does not retain repository contents, prompts, or model responses. Checks, comments, and correction pull requests remain in your GitHub repository. Removing a repository or uninstalling revokes future access and deletes its ordinary OpenSpec Cloud history.