# SprintLoop Assurance

> SprintLoop Assurance is the independent release-assurance layer for agent-built software. It binds approved intent, the exact candidate, receiver-trusted evidence, independently owned verification, and named finite authorization into one portable release record.

Canonical product URL: https://assurance.sprintloop.ai/
Publisher: LockedIn Labs
Product category: Agentic Delivery Assurance
Open Assurance Kit: https://github.com/SamSnead85/SprintLoop-Assurance-Kit
Paid FDE pilot: https://lockedinlabs.ai/contact/?utm_source=sprintloop-assurance&utm_medium=product&utm_campaign=fde-pilot

## What it owns

- Exact-candidate evidence and risk-specific obligation standing
- Independent verifier results and identity separation
- Named, finite human release dispositions
- Revocation, recertification, and reconstructable dossiers
- Read-only posture projections for SCM, SprintLoop, and SprintLoop FDE

## What it does not own

- Project backlogs, issue tracking, or sprint planning
- Coding agents, models, IDEs, or execution sandboxes
- Source control, CI/CD, deployment execution, or secrets custody
- Autonomous release authorization
- A proprietary model or model-dependent trust decision

## Current availability

The hosted interface is a product tour and deterministic Assurance Lab. Its Developer Setup workbench generates receiver-bound GitHub, CLI, API, and reviewed source-pinned local-MCP scaffolds without contacting a provider or granting authority. The private source also includes an authenticated tenant-isolated hosted-shadow composition, write-disabled GitHub ingress, receiver-authenticated ecosystem gateway, a pinned evidence-only public-Kit bridge, disabled required-check worker contract, and non-publishing image assessment lane. The read-only MCP boundary is part of the published v0.2.0 GitHub prerelease and remains pinned here to an immutable reviewed source commit; the Kit is not published to the npm registry. Production enforcement still requires approved live identity/provider composition, managed storage and recovery, trusted external roots, a reviewed GitHub transport, staged reconciliation/canaries, and a reversible SCM gate.

## Related properties

- AISDLC method: https://aisdlc.ai/
- SprintLoop: https://sprintloop.ai/
- LockedIn Labs: https://lockedinlabs.ai/