Deterministic test-policy enforcement and AI-proof containment for source repo quality gates. Hash-pins engineer-owned testing config so AI-proposed threshold weakening is blocked at pre-commit. Includes escape-scan, CRAP, architecture, bias, and Gherkin-lint gates.
Deterministic Stop-gate and code-graph context for AI coding agents: blocks only net-new findings and gives the loop a structural map of the codebase, locally, with no model in the gate.
Two-layer enforcement (pre-commit hook + CI mirror) for small teams using AI agents. Catches debug leaks, file growth, secrets, and forbidden patterns before they merge, and scaffold-doctor tells you when a guardrail is installed but not actually running.