Skip to content
Back to products
Controlled availability

HoyoAI

Governed AI for software delivery and GitOps

Governed AI for software delivery and GitOps.

Discuss a project

What it is

HoyoAI binds automation to immutable inputs, repository policy, isolated credentials, deterministic validation, and human-owned delivery boundaries. Its reviewer analyses exact code revisions today while the broader GitOps change platform develops behind fail-closed controls.

The product has two materially different maturity layers. Hoyo Reviewer is a working governed pull-request reviewer for private trusted runners. The wider GitOps agent is a modular Go foundation whose external writes and production model path are currently disabled or incomplete.

Capabilities

Hoyo Reviewer — available

CLI and signed-webhook operation on a private trusted runner, review of exact pull-request commits, repository-specific policy and skill loading, structured findings with validated comment-level inline output, durable jobs, retries, and review artifacts.

Evaluation and feedback

Offline scoring, feedback, and evaluation workflows, plus a local mode that runs without repository credentials and produces deliberately non-postable output.

Delivery boundaries

Typed intent and deterministic routing and policy, immutable repository context and allowlists, an explicit Git, human, and GitOps boundary, and no execution of target-repository code.

GitOps foundation — in development

A Go modular monolith with bounded review, GitOps change, onboarding, and SRE capabilities, a filesystem spool for durable coordination, and a provider-neutral isolated model-runner foundation.

Who it is for

  • Platform and delivery engineering teams.
  • Engineering leaders responsible for review consistency and change control.
  • Teams operating private or restricted build infrastructure.

These are supported personas and designed audiences, not evidence of current customers.

Technical proof

  • Review is bound to exact pull-request commits, so findings reference an immutable revision.
  • Repository policy and skills are loaded per repository rather than applied globally.
  • A read-only Go operations interface protected through its intended OAuth boundary.
  • Release provenance and artifact verification controls.
  • No merge, deploy, rollback, secret management, or direct cluster mutation.
  • No Kafka, Redis, or PostgreSQL dependency at this stage: durable coordination uses a filesystem spool.

Availability and scope

Controlled availability

Hoyo Reviewer is a working reviewer available under controlled or internal availability, tagged through v0.19.4 with a passing test suite. The wider HoyoAI core is in active development at version 0.8.0 and should be treated as private preview.

Current limitations

  • HoyoAI is not an autonomous production operator and not a general-purpose infrastructure-as-code generator.
  • There is no automatic fix, merge, approval, deployment, or rollback, and no direct cluster or cloud mutation.
  • Reviewer code has not yet been imported into the wider platform: the migration is accepted architecturally but not executed.
  • GitOps Change, Onboarding, and SRE are not executable end-to-end capabilities.
  • The isolated model runner exists but is disabled. No production model configuration or credentials are supplied, and no production caller invokes that path.
  • Subscription and provider adapters are absent, and no external write path is enabled.
  • It is not multi-tenant SaaS and not a horizontally scaled control plane.
  • No high-recall coverage claim is made across an organisation, and reviewer and GitOps workflows are not unified today.