Requirements youcan specify
Turn raw stakeholder text into a complete requirements specification — in IEEE 830, ISO 29148, Volere, or Agile PRD format — drafted, reviewed, and refined by a multi-agent AI pipeline, then verified against your real codebase.
From stakeholder text
to verified specification.
Multi-Format SRS Generation
Raw stakeholder text becomes a full specification in the standard you pick — IEEE 830, ISO/IEC/IEEE 29148, Volere, or Agile PRD. The chosen format drives the real structure end-to-end, drafted by a Product Owner, Architect, and Developer agent chain.
Quality Reflection Loop
A Reviewer and a Critic agent grade every draft against a 6-dimension quality rubric and send it back for surgical refinement — up to two passes — before it ever reaches you.
Bring Your Own LLM Key
Choose Gemini, OpenAI, Claude, or Grok and generate on your own API key — encrypted at rest and used only for your analyses. Keys stay yours; the platform key is reserved for embeddings.
Live Diagrams
Data-flow and sequence diagrams render live from Mermaid, with AI self-repair for broken syntax before they're ever shown to you.
Code Traceability CLI
The sra CLI pulls your finalized spec, checks which functional requirements have real files backing them in your source tree, and pushes verification results back to the platform.
Three steps.
One verified spec.
1POST /api/analysis23{4 "projectName": "Inventory Manager",5 "rawText": "Warehouse staff need to scan6 incoming stock, flag low quantities,7 and generate reorder reports..."8}
Grounded by
design.
Every draft is grounded in retrieved context, not just model guesswork — and gated by a reflection loop before it reaches you. Nothing ships without passing the quality bar.
A pipeline you
can inspect.
Real infrastructure.
No smoke and mirrors.
The providers and services SRA actually talks to, end to end.
Your keys.
Your data.
You bring the API key, we handle it carefully. Encryption, session security, and rate limiting are built into every layer of the platform — not bolted on after the fact.
Encrypted provider keys
Your OpenAI, Claude, Grok, or Gemini API key is encrypted at rest with AES-256-GCM and never returned in plaintext.
OAuth + JWT sessions
Sign in with Google or GitHub through a CSRF-protected, one-time exchange-code flow — no tokens ever land in a redirect URL.
Distributed rate limiting
A Redis-backed sliding-window limiter protects auth and AI endpoints across every backend replica.
Full audit trail
Sensitive actions are recorded through dedicated audit-logging middleware for traceability.
Specs shouldn't
go stale.
The sra CLI closes the loop between the spec and your repo — sync the finalized requirements, check what's actually implemented, and push the results back.
Zero-config init
sra init writes a gitignored config file for you — no manual setup.
Existence-checked
check confirms each requirement's referenced files exist — an honest, fast signal, not a claim of correctness.
Round-trips results
push sends verification status back so it's visible on the analysis timeline.
doctor built in
One command to diagnose env and connectivity issues before you file a bug.
npm install -g @sra-srs/sra-cli# verify it's on your PATHsra doctor
Ready to turn notes
into a real spec?
Paste your stakeholder text, pick a provider and format, and watch the pipeline draft, review, and refine a standards-compliant spec you can verify against real code.