Pull Request cost regression scanner that analyzes Dockerfile bloat, unindexed DB query loops (N+1), and unbacked LLM retry loops, commenting on PRs with estimated AWS/cloud monthly cost increases.
Cloud bills rarely explode from intentional architectural changes—they explode from sneaky 3-line regressions in PRs:
- Dockerfile Layer Invalidation:
COPY . .placed beforeRUN npm installbusts Docker cache on every commit, turning 30-second builds into 12-minute runner rebuilds and ballooning container registry storage (+$65/month). - Database N+1 Query Storms: An ORM call (
db.query(),prisma.findMany()) slipped into a loop spikes RDS IOPS, forcing an unbudgeted database tier upgrade (+$140/month). - Unbounded LLM Retry Loops: Autonomous agent retry loops without exponential backoff or caching hammering OpenAI / Anthropic APIs (
+$220/month).
pr-cost-firewall catches these regressions before merge in CI, calculates the estimated dollar impact, and comments directly on the PR.
pip install pr-cost-firewall# Scan current repository
pr-cost-firewall scan
# Enforce a maximum $100/mo cost delta threshold (fails CI if exceeded)
pr-cost-firewall scan --path . --threshold 100.0
# Export PR Markdown comment table
pr-cost-firewall comment --path . > pr_comment.md
# View license & zero-fee wallet payment details
pr-cost-firewall license- name: Cloud Cost Regression Firewall
uses: OrderStream/pr-cost-firewall@v1
with:
path: "."
threshold: "75.0"
comment_on_pr: true| Tier | Price | Repositories | Core Capabilities |
|---|---|---|---|
| Community Free | **** | Unlimited | Standalone CLI runner and single-repo GitHub Action |
| Starter Suite | ** / mo** | Up to 10 Repos | Automated CI PR gates, 500 CI runs/mo, standard email support |
| Team Platform | ,499 / mo | Up to 50 Repos | Full 10-tool OrderStream suite, flaky test quarantine deterministic replay, zero-downtime shadow DB migration guard, 24/7 telemetry alarms |
| Enterprise Platform | ,999 / mo | Unlimited | Multi-repo speculative merge engine, zero-downtime migration orchestrator, WASM sandbox gate, dedicated 24/7 cloud keeper, custom SLA |
| M&A IP & Security Audit | ,000 one-time | Whole Organization | Comprehensive copyleft AST fuzzy fingerprint audit, snippet license sheriff certification, formal invariant verification, and executive forensic IP Cleanliness Certificate |
Support this project or purchase enterprise cloud tariff modeling with 0 platform fees:
- Polar Subscription & Sponsorship: https://polar.sh/orderstream
- Stellar Network (Native XLM / USDC):
- Public Key:
GABFQIK63R2NETJM7T673EAMZN4RJLLGP3OFUEJU5ZVTGWUKULZJNL6 - Memo (Required):
400566831
- Public Key:
- EVM (Base / Arbitrum / Ethereum USDT & USDC):
- Address:
0x5de2b62434754bfd39ef350a3a867ed3eced5074
- Address: