Skip to content
AnnouncementInitial release: self-hosted on Ubuntu 24.04 and 26.04 LTS. More platforms planned; Cloud and managed services are outside this release.First release: self-hosted on Ubuntu LTS.Release status
Register Cloud interest
Governed workflow

Operate in a regulated development environment

Apply defined identity, access, validation, retention, and approval controls without treating tooling as certification.

Availability and deployment fit are confirmed before commitment.

What does this governed workflow workflow cover?

Apply defined identity, access, validation, retention, and approval controls without treating tooling as certification.

What should an evaluator inspect?

Inspect the stated requirements, workspace boundary, validation evidence, approval points, and stated deployment scope rather than inferring results from an example workflow.

Is this customer proof?

No. Workflow pages describe an evaluation model and may use fictional product artifacts. They do not assert customer adoption, outcome, or availability evidence.

Can we run this workflow today?

A released self-managed artifact and tested quickstart are not published. Review the self-hosted requirements or register interest in future Cloud or Enterprise offerings.

What is the next step?

Use the ungated sample run and pilot scorecard to frame the evaluation, then choose a request path only if the operating model fits.

Starting condition and desired outcome

A change must follow documented controls and produce attributable evidence. The outcome is a run record mapped to your control procedure; BranchRunner does not itself make the deployment compliant or certified.

The current manual workflow

1Collect approvals across tickets, chat, and CI
2Use shared development environments with unclear attribution
3Export evidence manually after delivery
4Discover retention gaps during audit preparation

The BranchRunner workflow

  1. 01
    Map the procedure

    Translate your approved control procedure into roles, checks, approvals, and retention needs.

  2. 02
    Enforce the boundary

    Run with named identity, minimum access, and an isolated workspace.

  3. 03
    Collect evidence

    Attach validation, findings, exceptions, and decisions as the run progresses.

  4. 04
    Export and retain

    Approve delivery and export evidence to the system of record under your policy.

Evidence produced

The run keeps claims separate from checks and decisions. The evidence below describes the record, not a guaranteed outcome.

RecordedMapped requirements and control steps
RecordedIdentity, access, and approval events
RecordedValidation results and exception decisions
RecordedExportable delivery record

Product example. Repository, checks, and identities are illustrative; configure them for your system.

Where a person stays in control

Control ownership

Your organization defines and approves the procedure.

Segregation of duties

Role and approval mapping reflects your identity policy.

Exception handling

Failed checks and overrides require attributable decisions.

Retention

Evidence export and deletion follow your documented schedule.

What the workflow can produce

·Mapped requirements and control steps
·Identity, access, and approval events
·Validation results and exception decisions
·Exportable delivery record
Results depend on the task definition, repository, tools, model providers, and checks selected by your team.

Integrations, deployment, and edition fit

Integrations
Identity provider, Git host, SIEM, ticketing, evidence archive, private model endpoints
Deployment
Self-hosted or managed, subject to required network and data boundaries
Edition
Enterprise; specific controls and deployment are assessed case by case
Human authority
Scope, sensitive actions, and delivery remain explicit decisions

Validate the workflow against one real repository

Bring the starting condition, required checks, and approval boundaries. We will identify what can be configured today and what remains deployment work.

Contact the teamAll use cases