Shoalcheck is a Kubernetes audit engine that finds what will break, stops it in CI and files the ticket. Read-only, nothing installed in the cluster. ▸ Audit engine: 104 rules across reliability, security, cost, upgrade readiness and CIS compliance coverage. Every finding is tied to the object it rests on. One self-contained HTML report, plus JSON, SARIF and JUnit. ▸ Preflight before a change: drain a node, lose a zone, upgrade the version. It names what stops the change (a PodDisruptionBudget at zero, a bare pod, a pinned volume, a removed API) in seconds, and the exit code is the answer. ▸ CI/CD gate: fails the build on new high findings and regressions, and judges a pull request's manifests before they land. Ready-made jobs for GitHub Actions, GitLab CI, Azure DevOps, Jenkins, Bitbucket Pipelines and CircleCI; SARIF goes straight into GitHub code scanning. ▸ Tickets: pushes the findings you pick to Jira or Linear and tracks where each one stands. ▸ Fleet and drift: many clusters in one report, and signed readings kept over time, so the next reading says what changed. CLI and desktop app for macOS, Windows and Linux. get and list only; an RBAC denial is shown as "not read", never as a pass. Preflight is free. shoalcheck.com