What we will never do to you.
A git host earns trust by what it refuses to do. These are written down, and the first list is enforced by the codebase itself — every item has a test that fails the build if it stops being true.
Enforced by code
Each of these has a test in src/__tests__/guarantees.test.ts.
Nothing we write into your repository is an advertisement.
AI review comments, triage notes, changelogs and repair PRs contain no upsell, no pricing links, no sponsored text. Every AI-authored comment is marked as AI so you can tell it apart from a person.
A test scans every AI comment builder in src/lib for pricing/upgrade/sponsor strings and fails the build if one appears; AI comments carry a marker and the isAiReview flag.
Every automated AI action can be switched off, per repository.
Settings → Automation has an off position for AI review, PR triage, issue triage, auto-merge, CI auto-fix, auto-repair, auto-issues and doc-drift. Off means the trigger returns before any model is called — nothing is merely hidden. AI actions you invoke by hand (chat, spec-to-PR) run only when you ask.
src/lib/ai-review.ts returns early on aiReviewMode 'off'; every other trigger consults the same per-repo settings (src/lib/automation-settings.ts) — pinned by a coverage test.
We never train models on your code.
Gluecron has no training or fine-tuning pipeline of any kind. AI features send the minimum context to the Anthropic API under its commercial terms, which do not use API inputs to train models.
A test asserts the codebase contains no fine-tune / training endpoint calls.
Your repositories are plain git. Clone them and leave whenever you like.
Every repository is a standard bare git repository served over Smart HTTP. There is no proprietary storage format and no export fee. Issues, pull requests and comments are readable through the REST API v2; a one-click full export ships with general availability.
src/routes/git.ts serves git-upload-pack for every repository; the API v2 issue/PR endpoints are public in the docs.
Self-hosting is free, and stays free.
The source is licensed MIT today and moves to AGPL-3.0 at v1.0 — both let you run Gluecron on your own hardware for nothing, forever. Runners you host yourself are never metered.
LICENSE is MIT; LICENSE-CHANGE-NOTICE.md documents the AGPL cutover; no code path bills for self-hosted runner minutes.
Status is computed, never hand-painted green.
The status page derives from recorded incidents and live probes. Surfaces we cannot see say 'Not monitored' — they are never counted as up.
src/routes/status.tsx renders 'Not monitored' for unprobed rows and only claims 'All monitored systems operational'.
While we are pre-launch, every page says so.
Until general availability, a visible 'Preview · GA 2026–27' label sits beside the wordmark on every page. We will not present a preview as a launched product.
src/views/prelaunch-label.tsx renders by default; the flag to remove it is the launch switch.
Commitments we are making in writing
Policy, not code — labelled honestly so you know the difference.
Thirty days' written notice before any price increase.
No overnight metering changes. If a price goes up, you hear about it a month before it applies, and you can leave with your data first.
Policy. Enforced by us, checkable by you against the changelog and your inbox.
We do not sunset core features to push you into another product.
Issues, wikis, pull requests, CI, packages and pages are the product. They will not be retired to sell you a separate tool.
Policy — written commitment, checkable against the changelog.
No silent account or organisation suspension.
A human reviews any org-wide suspension before it happens; you are told the reason; read-only access to export your data remains available; there is a named appeal path.
Policy today; the product states and appeal flow are on the GA roadmap.
If you find any statement on this page to be untrue, that is a bug: open an issue on the platform's own repository and it is treated with the same priority as a security report.