Merge gates and safety checks for AI coding agents. Works with Claude Code, Cursor, Windsurf, Codex via MCP. Detect scope violations, missing tests, and risks before merge.

Agent Guardrails

🇨🇳 中文版 | 🇬🇧 English

agent-guardrails is a merge gate for AI-generated code. It checks that AI changes match expectations before you merge.

• 🎯 Scope validation — AI only touches allowed files
• ✅ Test verification — tests must pass
• 🔍 Drift detection — catches parallel abstractions, interface changes
• 🛡 Protected paths — critical files stay untouched
• 🔒 Security hygiene — warns on hardcoded secrets, unsafe patterns, sensitive file changes
• 📊 Trust score — 0-100 composite score with graduated verdicts
• 🔧 Auto-fix — Tier-1 issues fixed automatically, zero side effects
• 🧬 Mutation testing — optional lightweight built-in slice catches vacuous tests (config-gated, default-disabled)

Who it is for

agent-guardrails is aimed first at solo developers and small teams already using AI coding tools.

• solo founders shipping real product code with Claude Code, Cursor, Codex, Cursor, or OpenCode
• small product teams that want the same repo guardrails even when each developer uses a different agent
• consultants and agencies that need safer AI-assisted changes across multiple client repos

It is not primarily for one-off toy prompts or teams looking to replace their coding agent entirely.

Prerequisites

• Node.js 18+
• Git — your project must be a git repository (git init). All change detection relies on git diff.

Quick Start

# 1. Install
npm install -g agent-guardrails

# 2. Set up in your project (must be a git repo)
cd your-repo
agent-guardrails setup --agent claude-code

# 3. Enforce rules (recommended)
agent-guardrails enforce --all

Supports 5 agents: claude-code, cursor, opencode, codex, cursor.

How It Works

Core Workflow