Vestral enforces your software's constitutional rules on every commit — before the code merges, before the damage is done.
Architecture decisions get made in Slack. Enforced nowhere. Dead within weeks. AI coding agents have no memory of what the system is constitutionally permitted to do.
ADRs are documents, not enforcement. Every sprint introduces drift that no existing tool catches until production breaks or an audit fails.
Each coding session begins with zero awareness of your governance doctrine. The agent generates — your constitution is invisible to it.
EU AI Act, SOC 2, ISO 27001 require provable architectural lineage. Most teams have spreadsheets. Auditors have billable hours.
Answer questions about your system. Vestral synthesises the full 8-layer constitutional model, wires it into your CI pipeline, and enforces it on every commit.
Fill in the setup wizard — domain, roles, workflow states, economic model, threat model, integrations. Upload specs or regulations if you have them.
~10 minutesVestral generates an 8-layer doctrine model, pre-configured analysis server, project knowledge base, and governance context file for your AI coding agent.
AI-synthesised · ~90 secondsStart node serve.mjs. Vestral extracts your code's live topology and reconciles it against your constitutional doctrine. Findings appear in the browser.
A pre-commit hook and CI gate block the merge of code to the repository when there are findings pending fix.
GitHub · GitLab · Bitbucket · Azure DevOpsVestral reconciles observed code topology against your doctrine. Below: two live layer graphs from an actual project.
walletGate middleware on this path — not wired up.notifications/ not declared in doctrine. Outbound calls from delivery/ are outside constitutional scope.Answer 7 questions about your system. Vestral reads your answers — and any documents you upload — and generates the full constitutional package using AI.
No code reading required at this stage. You describe the intent; Vestral enforces it.
All plans include the full 8-layer engine, AI fix generation, CI gate, and knowledge base. No per-seat fees.
Everything you need to know before you generate your first constitutional package.
MISSING, EXCESS, or MISMATCH and blocked at the pre-commit hook before they reach production. No existing linter or static analysis tool makes the distinction between "what the code does" and "what the code is constitutionally allowed to do."
node serve.mjs, and the 8-layer graph is computed from your existing dependency tree, routes, middleware, and event handlers. The only code you touch is adding a pre-commit hook (one line) and a CI step (one job). Existing code is read, never modified.
serve.mjs), all extractors, and the doctrine evaluation pipeline execute locally. No source code, graph data, or diff results are ever transmitted to Vestral's servers during normal operation. The only outbound calls are: (1) license key validation at activation (sends only your license key and a machine fingerprint), and (2) the AI fix generation feature, which sends a short excerpt of the specific violating code to the Anthropic API over TLS — and only when you explicitly click "Generate fix." Both can be disabled. Enterprises may deploy in fully air-gapped environments.
diff.json before writing any code, confirm findings before proceeding, and treat invariant violations as hard blockers. The AI assistant effectively internalises your constitutional doctrine and enforces it before suggesting or writing changes — not just after a commit. Every generated context file also includes the Vestral consultation protocol: the agent must print [Vestral] Reading <artifact> — <reason> on screen before any read from the package, giving you visible, auditable evidence in every session that the constitution was in the loop.
localhost:8082/install. Licenses are annual; they are tied to the organisation, not the developer seat count.
authMiddleware, Vestral classifies it as a trust-boundary EXCESS violation and blocks the commit. The adversarial propagation layer models known attack vectors — privilege escalation, replay, IDOR, injection — and verifies that the declared mitigations remain in the graph. It is not a CVE scanner; it is a constitutional guarantee that your security architecture cannot structurally regress.
Vestral separates normative topology — what your code is constitutionally permitted to do — from descriptive topology — what it actually does. No existing tool makes this distinction.
Vestral is the first tool that enforces what software is constitutionally permitted to do — not just what it currently does. We operate at the intersection of governance, AI coding, and enterprise compliance, in a space no existing tool addresses.
Developer tooling has three layers: syntax (linters), behaviour (static analysis), and now — for the first time — constitutional governance. Vestral owns this third layer: the enforcement of what a system is architecturally allowed to do, expressed as a machine-readable doctrine and verified at every commit.
At scale, architecture decays silently. Rules live in PDFs, wikis, and Notion pages that no tool reads. Every pull request is a trust decision made by a human who may not know the full doctrine. Vestral replaces that trust gap with a gate: no commit that violates declared architecture reaches production, regardless of who wrote it — human or AI agent.
By 2026, the majority of production code is written by AI agents — Claude Code, Copilot, Cursor, Codex. These agents are fast, capable, and constitutionally blind. They have no awareness of trust boundaries, economic-state rules, or governance invariants. Every enterprise adopting AI coding now needs a constitutional layer. Vestral is that layer.
The EU AI Act (fully applicable August 2026) requires high-risk AI systems to maintain technical documentation proving architectural consistency with declared design. Vestral produces that evidence automatically at every commit — a machine-readable audit trail no compliance team can generate manually. For enterprises subject to the Act, Vestral moves from useful to necessary.
The patent application covers three claim families: (1) the 8-layer constitutional graph as a data structure and extraction method — the core architecture no competitor can replicate without infringing; (2) governance-constrained reachability analysis — the specific algorithm that reconciles observed code topology against a constitutional doctrine to produce typed violation findings; and (3) the AI governance gate — the method of injecting constitutional context into an AI coding session to enforce doctrine at suggestion time, not just at commit time. The application is under examination. Pending status provides provisional protection from the filing date and puts any would-be competitor on constructive notice. No comparable system exists in prior art.
We're open to conversations with seed and pre-seed investors, strategic partners, and enterprise design partners. Deck and data room available on request.
By accessing vestral.io, using the Vestral setup wizard at app.vestral.io, downloading or installing any Vestral software package, or activating a license key, you ("Customer") agree to be bound by these Terms of Service ("Terms") on behalf of yourself and, where applicable, the organisation you represent. If you do not agree to these Terms, you must not use any part of the Service. Use of the Service constitutes acceptance. If you are accepting on behalf of an organisation, you represent and warrant that you have the authority to bind that organisation.
Vestral provides a software tool (the "Engine") that extracts an 8-layer semantic graph from source code repositories, evaluates that graph against user-authored constitutional doctrine rules, and produces findings classifying architectural discrepancies. The Engine includes: the local analysis server (serve.mjs), source code extractors, the doctrine evaluation engine, a setup wizard hosted at app.vestral.io, an AI fix suggestion feature, a CI gate integration, and a knowledge base reader. The Service is provided as software delivered to the Customer's local environment (on-premise execution model) with a cloud-hosted wizard for initial package generation.
Subject to your payment of applicable fees and compliance with these Terms, Vestral grants you a limited, non-exclusive, non-transferable, non-sublicensable licence to: (a) install and run the Vestral software on systems owned or controlled by your organisation; (b) use the setup wizard to generate constitutional packages for projects within your licensed tier; and (c) allow your developers to interact with the locally running Vestral server. This licence is granted per organisation, not per seat. The licence term is annual unless otherwise stated on your order.
You must not: (a) sublicence, resell, redistribute, or transfer the Vestral software or any generated package to any third party without Vestral's prior written consent; (b) reverse engineer, decompile, or disassemble any component of the Vestral software to the extent prohibited by applicable law; (c) remove or obscure any proprietary notices, patent markings, or attribution text from any component; (d) use the Service to develop a competing product or service; (e) circumvent, disable, or tamper with any licence enforcement mechanism, trial expiry logic, or activation system; (f) use the setup wizard or API in an automated or bulk manner to generate packages for resale or distribution; or (g) share, publish, or expose your license key to third parties.
The Vestral software, including the 8-layer constitutional graph architecture, the governance-constrained reachability algorithm, the AI governance gate method, all source code, engine components, doctrine templates, and generated package structures, are and remain the exclusive intellectual property of Vestral. One or more patent applications covering these systems and methods are pending. Nothing in these Terms transfers any ownership interest to the Customer. The Customer owns the doctrine YAML files and invariant documents they author through the setup wizard; Vestral retains no claim over Customer-authored doctrine content.
Vestral offers a free 3-day trial, subject to eligibility (one trial per organisation per 60-day period). During the trial you receive full access to all features of your applicable tier with no restrictions. At the end of the trial period, the locally running Vestral server automatically enters read-only mode. Read-only mode permits viewing of previously computed findings but disables new analysis runs. Activating a paid license restores full functionality. Trial eligibility is determined by email domain and network identifiers. Vestral reserves the right to decline trial access at its sole discretion.
Paid licenses are billed annually in advance. All fees are non-refundable except as required by applicable law or expressly stated in a separate order. Fees are exclusive of all taxes, levies, and duties imposed by taxing authorities, which are the Customer's sole responsibility. Vestral reserves the right to change pricing with 60 days' prior written notice. Continued use of the Service after a price change takes effect constitutes acceptance of the new pricing. Unpaid invoices may result in suspension of license activation.
The Customer agrees to indemnify, defend, and hold harmless Vestral and its officers, directors, employees, and contractors from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) the Customer's use of the Service, including reliance on any finding; (b) any architectural, engineering, security, or business decision made by the Customer in connection with the Service; (c) the Customer's breach of these Terms; or (d) the Customer's violation of any applicable law or regulation in connection with its use of the Service.
The Vestral analysis engine runs locally on the Customer's systems. Vestral does not receive or store source code, graph data, or findings during normal operation. The AI fix generation feature transmits short, user-selected excerpts of source code to the Anthropic API over encrypted HTTPS solely for the purpose of generating a remediation suggestion; these excerpts are processed in real time and are not retained by Vestral. The setup wizard at app.vestral.io receives the Customer's questionnaire answers or pasted specification text solely to generate the constitutional package; this data is not stored after package generation is complete. Vestral may retain anonymised, aggregated usage metrics for product improvement.
Either party may terminate these Terms with 30 days' written notice. Vestral may terminate or suspend the Customer's access immediately and without notice if the Customer breaches Sections 4 or 5, or engages in conduct that Vestral reasonably determines to be harmful to the Service, other customers, or Vestral's intellectual property. Upon termination, the licence granted herein ceases and the Customer must cease all use of the Vestral software. Sections 5, 8, 9, 10, 13, and 14 survive termination.
Nothing in the Service or its output constitutes legal advice, regulatory advice, security certification, audit opinion, or engineering certification. Vestral findings are informational tools to assist engineering teams in maintaining architectural consistency. The Customer is solely responsible for obtaining appropriate professional advice regarding legal, regulatory, security, and compliance obligations.
These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which Vestral is incorporated, without regard to its conflict-of-law provisions. Any dispute arising out of or related to these Terms that cannot be resolved through good-faith negotiation shall be submitted to binding arbitration in accordance with the rules of a mutually agreed arbitration body, or, where arbitration is not available, to the courts of competent jurisdiction in Vestral's domicile. Customers in the European Union retain the right to seek relief from competent national courts where mandatory consumer protection law so requires.
Vestral may update these Terms from time to time. Material changes will be communicated by email or by a notice on vestral.io at least 30 days before taking effect. Continued use of the Service after the effective date of the revised Terms constitutes acceptance. If the Customer does not agree to the revised Terms, they must cease using the Service before the effective date.
These Terms, together with any applicable order form, constitute the entire agreement between the parties with respect to the Service and supersede all prior negotiations, representations, and agreements. No modification of these Terms is effective unless in writing and signed by an authorised representative of Vestral. If any provision of these Terms is found unenforceable, the remaining provisions continue in full force and effect.
Questions about these Terms? Contact nabil-5@live.com.