Deterministic structural verification for code from ChatGPT, Claude, Cursor, Copilot, and Gemini. Signed certificates. Proof packs you can independently replay.
Public GitHub, GitLab, and Bitbucket repositories. Results in ~15 seconds.
Paste the full AI response including code blocks. Nucleus will extract the code and verify the implementation against your claims.
Submit your code
Provide a public repository URL, upload a ZIP archive, or paste source code directly. Nucleus Verify clones the repository, indexes every file, and builds a complete artifact map before analysis begins.
Five verification gates
Every submission passes through 5 deterministic gates: Artifact Integrity (file tree hashing), Determinism (triple-ordering reproducibility), Contract Adherence (dependency and licence checks), Build Validation (config and manifest analysis), and Structural Integrity (architecture and complexity scoring). Each gate produces a pass/fail result with detailed evidence.
424 operators across 31 families
After gates pass, Nucleus runs its full operator suite — scanning for security vulnerabilities, supply chain risks, compliance violations, code quality issues, and AI/LLM-specific risks. Each operator is a focused detection rule that produces structured findings with severity, location, and remediation guidance. Enterprise customers can request custom operators tailored to their specific compliance frameworks, internal policies, or industry regulations.
Signed certificate and proof pack
You receive a cryptographically signed verification certificate and a downloadable proof pack containing all gate results, operator findings, deterministic hashes, and scope disclosures. Anyone can independently replay the verification to confirm the result — no trust required.
Every repository passes through the same deterministic verification pipeline.
What Nucleus Verify does not check: runtime correctness, security vulnerabilities, business logic, performance, accessibility.
Real result from a public repository verification. All values are deterministic and reproducible.
Every verification run produces the same cryptographic hashes for the same input. You can independently replay any proof pack to confirm the result.
Same repository, same seed, same hashes. Always.
When AI claims it built something, Nucleus Verify checks if the structural evidence actually exists in the code.
Real finding from a verification run. The AI claimed it implemented file upload, but the code contained no upload handling, multipart parsing, or file storage logic.
915 public repositories. Python and JavaScript ecosystems. Zero consistency errors.
A system that verifies 41% of real-world repositories is honest. A system that verifies 90% is lying.
Every certificate explicitly lists what was not verified. Honest disclosure is a core design principle.
Verify AI-generated code before it ships. Certificate in every PR. Know exactly what was built vs what was claimed.
Structural gaps caught before production. Audit trail for every decision. Trust scores you can track over time.
SOC 2 ready. PostgreSQL audit log. Ed25519 signed. Independently replayable. Full chain of custody.
Start free. Scale when you're ready.
Need just one certificate? $3 one-time per verification. Available on the result page.
For enterprise enquiries, custom plans, or volume pricing contact contact@altermenta.com