How it works
Stoney observes your production API, generates contract tests automatically, links each test to the Jira ticket that defined the requirement, and blocks merges the moment code drifts from spec.
Install one middleware package. Stoney observes every route your app serves in production — method, path, status code, response shape, request frequency. No test suite. No manual setup. No instrumentation.
After observing enough traffic, Stoney's AI generates a structured contract for each route and stores it in your dashboard. It then scans your GitHub PR history for Jira ticket keys and matches each contract to the PR — and ticket — that introduced it. 94% match rate in practice.
Drop stoney-action into your pipeline. It runs every active contract against your staging environment on every PR. When a requirement is violated — a permission check removed, a restriction silently broken — the merge is blocked before production.
When a contract fails, Stoney posts a comment directly on the Jira ticket that defined the requirement. The engineer, the PM, and the security team all see the same thing: which rule broke, which PR broke it, and what the fix needs to be.
Tag contracts with feature domains and Stoney builds a real-time compliance map — which domain is drifting, which team owns it, what the pass rate looks like over time. Engineers, PMs, and security all share the same source of truth.
Every CI verification is logged: contract, repo, actor, Jira ticket, timestamp. Export a structured evidence report for any date range as CSV or JSON. SOC 2 prep goes from weeks to one click.
Install the recorder, watch contracts generate themselves, and run your first CI gate in under 20 minutes.