A coding agent that checks its code, challenges its specs, and flags where they may miss your request.
A coding agent says it's done, and the tests it wrote pass. That proves less than it seems: a test can pass without noticing the change, a contract can allow the wrong code, and nothing compares the work with what you asked.
Tesota doesn't take the agent's word. When the agent finishes, Tesota runs the checks, and a check that fails goes back to the agent with what failed. The work reaches you when the checks pass, or when nothing more can be checked, with a receipt that says which.
curl -fsSL https://raw.githubusercontent.com/sequelcore/tesota/main/install.sh | shOn Windows, in PowerShell:
irm https://raw.githubusercontent.com/sequelcore/tesota/main/install.ps1 | iexThen, in your project, run tesota and type /login. You need Git, and
Dafny 4 to prove contracts. Tesota is in alpha;
Install has the details.
- Tests: your project's own commands, on the change, and whether a new test fails without it.
- Proofs: TypeScript contracts proved with Dafny. A contract that still proves after Tesota changes the code is too weak.
- Design models: TLA+ and Quint, checked with TLC when the change touches the code they cover.
A deleted test, an added .skip or a loosened contract is flagged for you.
The receipt keeps a model's review of your request apart from the
evidence, and never counts it as verified; tesota receipt prints it as
Markdown for a pull request, and --json for CI.
How verification works and
Receipts explain the rest.
Use the model you already pay for: any pi-ai provider, a Claude plan through your own Claude Code, or a ChatGPT plan. See Models.
Get started · Guides · Concepts · Reference · Roadmap · Changelog · Contributing · Security
Tesota proves contracts with LemmaScript and Dafny, checks design models with TLC and Quint, and adapts ClaimCheck's round-trip method. It runs on pi-ai, pi-tui and pi-mcp. NOTICE lists every credit and license.
Named for Olneya tesota, the desert ironwood of the Sonoran Desert, whose wood sinks in water and under whose shelter other plants take root. Licensed under Apache-2.0.