Delimit

What is Delimit?

Delimit is a merge gate for AI-written code that wraps any AI coding assistant (Claude Code, Codex, Cursor, Gemini CLI) with a governance chain. It runs gates, records changes, and signs replayable, HMAC-signed attestations for every merge. Designed for teams that want to govern and audit AI-assisted code contributions.

How to use Delimit?

Install via npx delimit-cli. For a full merge gate, run delimit wrap -- <ai-command> to pipe any AI invocation through signed governance. For a zero-config safety gate, run delimit check on staged or modified files. Use delimit init to set up a merge-gate config. No account or API keys are required for basic usage. Commands like delimit lint, delimit diff, delimit simulate, and delimit scan provide specific gate capabilities.

Key features of Delimit

• Signed, replayable attestations (HMAC-SHA256) per merge
• Zero-config PR safety gate (delimit check)
• Wraps any AI coding assistant with a governance chain
• Cross-model context persistence (memory, ledger)
• Offline-verifiable receipts with public replay URLs
• Multi-model deliberation and autonomous builds (delimit think, delimit build)

Use cases of Delimit

• Protect an API from breaking changes before each merge
• Detect spec drift and unreviewed changes automatically
• Run governance gates on every pull request via a GitHub Action
• Gate all AI-assisted invocations across different CLIs and models
• Keep decision context and task lists across sessions and AI assistants

FAQ from Delimit

What does delimit wrap do?

It pipes an AI-assisted CLI command through a governance gate: snapshots the git diff, runs lint and tests, HMAC-signs an attestation, and emits a replay URL. Advisory by default; --enforce blocks on policy violations.

Does Delimit require an account or API keys for basic usage?

No. Commands like delimit check, delimit scan, delimit init, and delimit wrap work without any account, API keys, or configuration files. Some features (e.g., delimit deliberate with custom models) may require a key.

How are receipts verified?

Receipts are offline-verifiable: run npx delimit-cli seal-verify <receipt.json> or open the unique replay URL at delimit.ai/att/<id>. No external service needed for verification.

What is the difference between delimit check and delimit wrap?

delimit check is a zero-config PR safety gate that applies deterministic checks (breaking API changes, leaked secrets) to staged or modified files. delimit wrap is a full governance gate for AI-assisted invocations that produces a signed, replayable attestation with git diff, gate results, and a public URL.

What does the --record option do on delimit check?

It writes a content-pinned record of the check to .delimit/records/check-<ts>.json. This record is the precursor to a signed, replayable Seal attestation.