Cartographer scans existing codebases, discovers structure, drafts artifacts for Constrain/Pact/Ledger/Arbiter/Baton/Sentinel, and checks compliance. It never makes changes.
Scans source code across 6 languages using AST-based analysis. Detects ORM models, API routes, PACT keys, backend connection hints, and sensitive fields. Produces draft artifacts for every tool in the stack.
Evaluates existing projects against stack requirements with 34 checks across 5 tools. Produces scored reports with ordered recommendations. Works in CI without running services.
AST-based analysis for Python. Regex-based detection for TypeScript, JavaScript, Ruby, Go, and Java.
Extracts model definitions, field types, and relationships from 14 ORM frameworks.
Finds API endpoints and extracts paths, methods, and handler names from 8 frameworks.
Detects existing instrumentation markers matching the PACT key format. Maps keys to source locations for Sentinel manifest generation.
Pattern-based detection of PII, financial, auth, and compliance fields. Classification hints at LOW confidence — always requires human confirmation.
Detects environment variables suggesting database, cache, and queue connections. Produces connection hints for Ledger without exposing credentials.
| Tool | Checks | Validates |
|---|---|---|
| Pact | 11 | Contracts have data_access/authority, source has PACT keys and handlers |
| Baton | 7 | Schema version, nodes have data_access/authority, OpenAPI specs configured |
| Ledger | 8 | Fields classified, no annotation conflicts, GDPR erasure methods present |
| Arbiter | 2 | Access graph and trust ledger present and readable |
| Sentinel | 6 | Manifest entries have paths, source PACT keys match manifest |