Relicta
relicta.tech
What it is
Relicta is an open-source CLI for governing software changes before production. Its release workflow covers commit analysis, semantic version planning, release notes, approval checks, and publishing. A weighted risk calculation uses seven factors and learns from past releases and incidents; governance is disabled by default. Relicta lists OpenAI, Anthropic, Gemini, Azure, and Ollama for AI-assisted release notes, and publishing plugins for GitHub, npm, Docker, Slack, Jira, and Helm. A native MCP server lets AI agents plan, assess risk, approve, and publish releases. The tool can run locally or in CI without a SaaS or cloud dependency, and its maker says data stays in the user's environment. Governance decisions are recorded in an immutable SHA-256 hash chain. Relicta also creates in-toto v1 attestations signed via Sigstore and generates software bills of materials. Plugins run in isolated processes with capability restrictions on filesystem, network, and environment access; API keys and tokens are redacted from output and logs by default. The CLI supports macOS, Linux, and Windows on x86_64 or arm64 and is licensed under MIT.
Spec sheet
- Purpose
- Relicta is a CLI that governs software changes and automates semantic versioning, release notes, approvals, and publishing.Read 4 Oct 2026 · docs.relicta.tech
- Intended users
- The maker identifies platform engineers, release managers, security and compliance teams, and teams adopting AI agents as audiences.Read 4 Oct 2026 · relicta.tech
- Integrations
- The docs describe publishing plugins for GitHub, npm, Slack, Docker, and other channels, plus a GitHub Action for CI/CD.Read 4 Oct 2026 · docs.relicta.tech
- Security
- The maker says Relicta runs locally or in CI without a SaaS or cloud dependency and records governance decisions in an immutable SHA-256 hash chain.Read 4 Oct 2026 · relicta.tech
- License
- The maker describes the CLI as open source under the MIT license.Read 4 Oct 2026 · relicta.tech
- AI agent support
- Relicta provides a native MCP server through which AI agents can plan, assess risk, approve, and publish releases.Read 3 Oct 2026 · relicta.tech
- AI agents
- Relicta provides a native MCP server through which AI agents can plan, assess risk, approve, and publish releases.Read 4 Oct 2026 · relicta.tech
- AI providers
- AI release notes are supported through OpenAI, Anthropic, Gemini, Azure OpenAI, and local Ollama, with provider API keys required for AI features.Read 4 Oct 2026 · docs.relicta.tech
- Attestation
- Relicta says it creates in-toto v1 attestations signed via Sigstore.Read 3 Oct 2026 · relicta.tech
- Audit trail
- Governance decisions are recorded in an immutable SHA-256 hash chain.Read 3 Oct 2026 · relicta.tech
- Plugin security
- The maker says plugins run in isolated processes with capability-based restrictions on filesystem, network, and environment access.Read 4 Oct 2026 · relicta.tech
- Release workflow
- Its release workflow can analyze commits, bump versions, generate release notes, apply approval checks, and publish releases.Read 4 Oct 2026 · relicta.tech
- Risk analysis
- Relicta describes a seven-factor weighted risk calculation that learns from past releases and incidents.Read 3 Oct 2026 · relicta.tech
- Risk assessment
- Its Change Governance Protocol evaluates releases using factors including blast radius, actor trust, and security impact; governance is disabled by default.Read 4 Oct 2026 · docs.relicta.tech
- Secret handling
- The maker says API keys and tokens are automatically redacted from output and logs by default.Read 3 Oct 2026 · relicta.tech
- Supply chain
- Relicta describes in-toto v1 attestations signed via Sigstore and software bill of materials generation.Read 4 Oct 2026 · relicta.tech
- Supply-chain feature
- The maker lists software bill of materials generation for supply-chain transparency and compliance.Read 3 Oct 2026 · relicta.tech
- Supported operating systems
- The CLI requirements list macOS, Linux, and Windows for x86_64 or arm64.Read 4 Oct 2026 · docs.relicta.tech
Strong points and limits
Strong points
- Release workflow includes approvals and publishing
- Seven-factor risk calculation learns from past releases
- Native MCP server supports AI agent release tasks
- Creates signed in-toto v1 attestations
- Redacts API keys and tokens from output and logs
Limits
- Governance is disabled by default
- Supported operating systems are macOS, Linux, and Windows
- Release-note AI providers require provider selection
Who it suits
Relicta is aimed at platform engineers, release managers, security and compliance teams, and teams adopting AI agents. Its local or CI deployment may suit teams that want release governance without a SaaS or cloud dependency.
Verdict
Relicta brings risk assessment, approvals, audit records, and release communication into a CLI workflow. Teams should account for governance being off by default and confirm that its listed operating systems meet their needs.
Where Specifiction places it
- Release Management Software#26 of 387.0
- Release Orchestration Software#20 of 296.9