agent-code-guard 0.1.0__tar.gz

agent_code_guard-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stef Karyotidis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agent_code_guard-0.1.0/MANIFEST.in

@@ -0,0 +1,13 @@
+include LICENSE
+include README.md
+include pyproject.toml
+graft src
+
+prune .github
+prune docs
+prune examples
+prune research
+graft skills/code-guard
+prune skills/code-guard/scripts
+prune tests
+global-exclude *.py[cod]

agent_code_guard-0.1.0/PKG-INFO

@@ -0,0 +1,206 @@
+Metadata-Version: 2.4
+Name: agent-code-guard
+Version: 0.1.0
+Summary: Deterministic cross-language guardrails for agent-assisted development
+License-Expression: MIT
+Project-URL: Source, https://github.com/stef-k/agent-code-guard
+Project-URL: Issues, https://github.com/stef-k/agent-code-guard/issues
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: tree-sitter==0.26.0
+Requires-Dist: tree-sitter-language-pack==1.14.3
+Dynamic: license-file
+
+# Agent Code Guard
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/stef-k/agent-code-guard/main/assets/agent-code-guard-mark.svg" width="180" alt="Agent Code Guard project mark">
+</p>
+
+Deterministic guardrails for agent-assisted software development.
+
+[![Production Analysis](https://github.com/stef-k/agent-code-guard/actions/workflows/analysis.yml/badge.svg)](https://github.com/stef-k/agent-code-guard/actions/workflows/analysis.yml)
+[![Python 3.10–3.14](https://img.shields.io/badge/Python-3.10%E2%80%933.14-3776AB?logo=python&logoColor=white)](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/stef-k/agent-code-guard/blob/main/LICENSE)
+
+Code Guard gives coding agents objective measurements and **PASS / REVIEW /
+FAIL** signals while leaving design decisions to agent and user judgment.
+
+```text
+deterministic measurement
+        ↓
+PASS / REVIEW / FAIL
+        ↓
+agent judgment
+```
+
+## Installation
+
+[pipx](https://pipx.pypa.io/) keeps the command isolated from project
+environments:
+
+```bash
+pipx install agent-code-guard
+```
+
+See the [usage guide](https://github.com/stef-k/agent-code-guard/blob/main/docs/usage.md)
+for a virtual-environment alternative and developer installation.
+
+## Quick start
+
+Run all enabled, applicable guards over your current Git work:
+
+```bash
+code-guard . --changed-only
+```
+
+Git determines the edited-file candidates, Code Guard applies every enabled
+and applicable guard, and project or user exclusions remain authoritative. No
+configuration file is required.
+
+## Result model
+
+- **PASS** — no special action.
+- **REVIEW** — inspect the finding and decide whether meaningful improvement is
+  warranted. REVIEW is not automatic refactoring.
+- **FAIL** — blocks normal completion until fixed or an explicitly authorized
+  exception applies.
+
+**Never game the metric.** Preserve clarity and useful structure; do not create
+artificial helpers, files, abstractions, formatting, or exclusions merely to
+lower a measurement.
+
+## Default guards
+
+| Guard | Default |
+| --- | --- |
+| File LOC | REVIEW >400, FAIL >600 |
+| Callable size | REVIEW >80 physical LOC |
+| Structural nesting | REVIEW >4 |
+| Cyclomatic complexity | REVIEW >15 |
+| Markdown document size | REVIEW >800 physical lines |
+| Markdown direct-section size | REVIEW >200 physical lines |
+
+Comparisons are strictly greater-than, so equality passes. All guards except
+file LOC are REVIEW-only; only file LOC can FAIL.
+
+Agent Code Guard intentionally remains small. A new guard must provide distinct,
+deterministic agent-guardrail value rather than merely duplicate mature
+conventional tooling. See [Guard admission](https://github.com/stef-k/agent-code-guard/blob/main/docs/guard-admission.md).
+
+## Common workflows
+
+Normal Git work:
+
+```bash
+code-guard . --changed-only
+```
+
+Explicit agent-owned scope without Git:
+
+```bash
+code-guard src/Foo.py src/Bar.ts docs/guide.md
+```
+
+Pull request or branch comparison:
+
+```bash
+code-guard . --base-ref origin/main --ci
+```
+
+The actual base ref must exist or be fetched correctly in the chosen CI
+environment.
+
+Deliberate full audit:
+
+```bash
+code-guard .
+```
+
+Changed work is not a full audit. Use Git selection during normal development;
+do not repeatedly scan unrelated repository history after every edit.
+
+## Supported languages and formats
+
+Syntax guards support Python, Go, Kotlin, C#, Java, JavaScript, TypeScript, JSX,
+TSX, Vue JavaScript/TypeScript script regions, C++, Rust, PHP, Swift, and Dart.
+Markdown guards apply to `.md` files.
+
+Important boundaries:
+
+- Generic `.h` files are not syntax-dispatched because their language context
+  is ambiguous.
+- `.markdown` is not currently enabled for Markdown guards.
+- Vue template and style regions are not executable syntax input.
+- Unsupported artifacts are simply inapplicable.
+- Malformed applicable syntax or a required provider failure is a fail-closed
+  tool error, never heuristic partial analysis.
+
+See [Language support](https://github.com/stef-k/agent-code-guard/blob/main/docs/language-support.md)
+for extension and mixed-content details.
+
+## Agent integration
+
+CLI-only use requires no skill export. Each installed distribution also carries
+a version-matched Code Guard skill payload for agent workflows:
+
+```bash
+code-guard --skill-path
+code-guard --export-skill <target-directory>
+```
+
+See [Skill distribution](https://github.com/stef-k/agent-code-guard/blob/main/docs/skill-distribution.md)
+for discovery, export, and integration guarantees. The checkout compatibility
+runner is for repository and skill compatibility, not primary end-user
+installation.
+
+## Configuration
+
+Built-in defaults require no config. A minimal project configuration is:
+
+```json
+{
+  "version": 1
+}
+```
+
+Use configuration only when a project has a concrete policy reason to change a
+guard or scope. See the [Configuration guide](https://github.com/stef-k/agent-code-guard/blob/main/docs/configuration.md).
+
+## Documentation
+
+- [Documentation index](https://github.com/stef-k/agent-code-guard/blob/main/docs/README.md)
+- [Usage](https://github.com/stef-k/agent-code-guard/blob/main/docs/usage.md)
+- [Configuration](https://github.com/stef-k/agent-code-guard/blob/main/docs/configuration.md)
+- [Language support](https://github.com/stef-k/agent-code-guard/blob/main/docs/language-support.md)
+- [Platform support](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+- [Skill distribution](https://github.com/stef-k/agent-code-guard/blob/main/docs/skill-distribution.md)
+
+## Platform support
+
+The maintained interpreter range is **CPython 3.10–3.14**. The normal binary
+installation envelope is:
+
+- Windows x86-64 and ARM64;
+- macOS x86-64 and ARM64;
+- Linux glibc 2.34 or newer on x86-64 and ARM64.
+
+Source builds outside that binary envelope are best effort and are not
+release-supported. See [Platform support](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+for exact wheel and deployment boundaries.
+
+## Feedback and security
+
+Report normal defects through the [bug report form](https://github.com/stef-k/agent-code-guard/issues/new?template=bug-report.md)
+and propose new measurements through the [Candidate guard form](https://github.com/stef-k/agent-code-guard/issues/new?template=candidate-guard.md).
+For vulnerability reporting, follow the repository [Security policy](https://github.com/stef-k/agent-code-guard/blob/main/SECURITY.md).
+
+## Background and license
+
+Agent Code Guard grew from the Agent LOC Guard prototype and is now the
+canonical implementation. It remains focused on deterministic measurements
+that complement—not replace—tests, compilers, formatters, linters, security
+tools, or design judgment.
+
+Licensed under the [MIT License](https://github.com/stef-k/agent-code-guard/blob/main/LICENSE).

agent_code_guard-0.1.0/README.md

@@ -0,0 +1,192 @@
+# Agent Code Guard
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/stef-k/agent-code-guard/main/assets/agent-code-guard-mark.svg" width="180" alt="Agent Code Guard project mark">
+</p>
+
+Deterministic guardrails for agent-assisted software development.
+
+[![Production Analysis](https://github.com/stef-k/agent-code-guard/actions/workflows/analysis.yml/badge.svg)](https://github.com/stef-k/agent-code-guard/actions/workflows/analysis.yml)
+[![Python 3.10–3.14](https://img.shields.io/badge/Python-3.10%E2%80%933.14-3776AB?logo=python&logoColor=white)](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/stef-k/agent-code-guard/blob/main/LICENSE)
+
+Code Guard gives coding agents objective measurements and **PASS / REVIEW /
+FAIL** signals while leaving design decisions to agent and user judgment.
+
+```text
+deterministic measurement
+        ↓
+PASS / REVIEW / FAIL
+        ↓
+agent judgment
+```
+
+## Installation
+
+[pipx](https://pipx.pypa.io/) keeps the command isolated from project
+environments:
+
+```bash
+pipx install agent-code-guard
+```
+
+See the [usage guide](https://github.com/stef-k/agent-code-guard/blob/main/docs/usage.md)
+for a virtual-environment alternative and developer installation.
+
+## Quick start
+
+Run all enabled, applicable guards over your current Git work:
+
+```bash
+code-guard . --changed-only
+```
+
+Git determines the edited-file candidates, Code Guard applies every enabled
+and applicable guard, and project or user exclusions remain authoritative. No
+configuration file is required.
+
+## Result model
+
+- **PASS** — no special action.
+- **REVIEW** — inspect the finding and decide whether meaningful improvement is
+  warranted. REVIEW is not automatic refactoring.
+- **FAIL** — blocks normal completion until fixed or an explicitly authorized
+  exception applies.
+
+**Never game the metric.** Preserve clarity and useful structure; do not create
+artificial helpers, files, abstractions, formatting, or exclusions merely to
+lower a measurement.
+
+## Default guards
+
+| Guard | Default |
+| --- | --- |
+| File LOC | REVIEW >400, FAIL >600 |
+| Callable size | REVIEW >80 physical LOC |
+| Structural nesting | REVIEW >4 |
+| Cyclomatic complexity | REVIEW >15 |
+| Markdown document size | REVIEW >800 physical lines |
+| Markdown direct-section size | REVIEW >200 physical lines |
+
+Comparisons are strictly greater-than, so equality passes. All guards except
+file LOC are REVIEW-only; only file LOC can FAIL.
+
+Agent Code Guard intentionally remains small. A new guard must provide distinct,
+deterministic agent-guardrail value rather than merely duplicate mature
+conventional tooling. See [Guard admission](https://github.com/stef-k/agent-code-guard/blob/main/docs/guard-admission.md).
+
+## Common workflows
+
+Normal Git work:
+
+```bash
+code-guard . --changed-only
+```
+
+Explicit agent-owned scope without Git:
+
+```bash
+code-guard src/Foo.py src/Bar.ts docs/guide.md
+```
+
+Pull request or branch comparison:
+
+```bash
+code-guard . --base-ref origin/main --ci
+```
+
+The actual base ref must exist or be fetched correctly in the chosen CI
+environment.
+
+Deliberate full audit:
+
+```bash
+code-guard .
+```
+
+Changed work is not a full audit. Use Git selection during normal development;
+do not repeatedly scan unrelated repository history after every edit.
+
+## Supported languages and formats
+
+Syntax guards support Python, Go, Kotlin, C#, Java, JavaScript, TypeScript, JSX,
+TSX, Vue JavaScript/TypeScript script regions, C++, Rust, PHP, Swift, and Dart.
+Markdown guards apply to `.md` files.
+
+Important boundaries:
+
+- Generic `.h` files are not syntax-dispatched because their language context
+  is ambiguous.
+- `.markdown` is not currently enabled for Markdown guards.
+- Vue template and style regions are not executable syntax input.
+- Unsupported artifacts are simply inapplicable.
+- Malformed applicable syntax or a required provider failure is a fail-closed
+  tool error, never heuristic partial analysis.
+
+See [Language support](https://github.com/stef-k/agent-code-guard/blob/main/docs/language-support.md)
+for extension and mixed-content details.
+
+## Agent integration
+
+CLI-only use requires no skill export. Each installed distribution also carries
+a version-matched Code Guard skill payload for agent workflows:
+
+```bash
+code-guard --skill-path
+code-guard --export-skill <target-directory>
+```
+
+See [Skill distribution](https://github.com/stef-k/agent-code-guard/blob/main/docs/skill-distribution.md)
+for discovery, export, and integration guarantees. The checkout compatibility
+runner is for repository and skill compatibility, not primary end-user
+installation.
+
+## Configuration
+
+Built-in defaults require no config. A minimal project configuration is:
+
+```json
+{
+  "version": 1
+}
+```
+
+Use configuration only when a project has a concrete policy reason to change a
+guard or scope. See the [Configuration guide](https://github.com/stef-k/agent-code-guard/blob/main/docs/configuration.md).
+
+## Documentation
+
+- [Documentation index](https://github.com/stef-k/agent-code-guard/blob/main/docs/README.md)
+- [Usage](https://github.com/stef-k/agent-code-guard/blob/main/docs/usage.md)
+- [Configuration](https://github.com/stef-k/agent-code-guard/blob/main/docs/configuration.md)
+- [Language support](https://github.com/stef-k/agent-code-guard/blob/main/docs/language-support.md)
+- [Platform support](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+- [Skill distribution](https://github.com/stef-k/agent-code-guard/blob/main/docs/skill-distribution.md)
+
+## Platform support
+
+The maintained interpreter range is **CPython 3.10–3.14**. The normal binary
+installation envelope is:
+
+- Windows x86-64 and ARM64;
+- macOS x86-64 and ARM64;
+- Linux glibc 2.34 or newer on x86-64 and ARM64.
+
+Source builds outside that binary envelope are best effort and are not
+release-supported. See [Platform support](https://github.com/stef-k/agent-code-guard/blob/main/docs/platform-support.md)
+for exact wheel and deployment boundaries.
+
+## Feedback and security
+
+Report normal defects through the [bug report form](https://github.com/stef-k/agent-code-guard/issues/new?template=bug-report.md)
+and propose new measurements through the [Candidate guard form](https://github.com/stef-k/agent-code-guard/issues/new?template=candidate-guard.md).
+For vulnerability reporting, follow the repository [Security policy](https://github.com/stef-k/agent-code-guard/blob/main/SECURITY.md).
+
+## Background and license
+
+Agent Code Guard grew from the Agent LOC Guard prototype and is now the
+canonical implementation. It remains focused on deterministic measurements
+that complement—not replace—tests, compilers, formatters, linters, security
+tools, or design judgment.
+
+Licensed under the [MIT License](https://github.com/stef-k/agent-code-guard/blob/main/LICENSE).

agent_code_guard-0.1.0/pyproject.toml

@@ -0,0 +1,33 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "agent-code-guard"
+version = "0.1.0"
+description = "Deterministic cross-language guardrails for agent-assisted development"
+readme = "README.md"
+requires-python = ">=3.10"
+license = "MIT"
+dependencies = [
+    "tree-sitter==0.26.0",
+    "tree-sitter-language-pack==1.14.3",
+]
+
+[project.urls]
+Source = "https://github.com/stef-k/agent-code-guard"
+Issues = "https://github.com/stef-k/agent-code-guard/issues"
+
+[project.scripts]
+code-guard = "agent_code_guard.code_guard:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.data-files]
+"share/agent-code-guard/skill" = [
+    "skills/code-guard/SKILL.md",
+    "skills/code-guard/LICENSE.txt",
+]
+"share/agent-code-guard/skill/agents" = ["skills/code-guard/agents/openai.yaml"]
+"share/agent-code-guard/skill/references" = ["skills/code-guard/references/*.md"]

agent_code_guard-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

agent_code_guard-0.1.0/skills/code-guard/LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Stef Karyotidis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

agent_code_guard-0.1.0/skills/code-guard/SKILL.md

@@ -0,0 +1,138 @@
+---
+name: code-guard
+description: Use when creating, editing, reviewing, or refactoring supported code or Markdown documentation to run deterministic guardrails and load only the policy guidance required by triggered findings.
+license: Complete terms in LICENSE.txt
+---
+
+# Code Guard
+
+Use this skill whenever supported code or Markdown documentation artifacts are created, edited, reviewed, or refactored.
+
+Code Guard provides deterministic measurements that act as anchors for agent judgment. The measurement is objective; the response to a `REVIEW` finding still requires design judgment.
+
+## Result states
+
+- `PASS` — no special action is required.
+- `REVIEW` — inspect the finding and either accept it with a meaningful justification or improve the code when doing so improves real clarity, cohesion, or boundaries.
+- `FAIL` — do not declare normal completion until the condition is fixed or an explicitly permitted/user-approved exception applies.
+
+## Universal rules
+
+1. Never game a metric.
+2. Preserve readability and the repository's normal formatting/style conventions.
+3. Do not compress independent statements, remove useful structure/comments, obscure control flow, or minify handwritten source to lower a measurement.
+4. Do not create meaningless helpers, artificial files, unnecessary abstractions, or indirection mainly to reduce a metric.
+5. `REVIEW` is not an automatic refactor instruction.
+6. Refactor only when the change improves the code rather than merely improving the score.
+7. Do not create, broaden, or alter policy exceptions/configuration solely to make Code Guard pass without explicit user approval.
+8. Do not expand the current task to unrelated pre-existing debt. Normal development checks changed/current-work files; full-repository audit is separate.
+
+## Workflow
+
+With Git, run the installed Code Guard command after supported code or Markdown documentation edits:
+
+```bash
+code-guard . --changed-only
+```
+
+An installed Agent Code Guard distribution provides both the command and this
+version-matched skill payload. The skill's normal execution route is always the
+installed `code-guard` command.
+
+For repository development only, the compatibility runner remains available
+directly from a checkout. It is not part of the externally installed skill
+payload or the normal end-user execution route:
+
+```bash
+python3 skills/code-guard/scripts/code_guard.py . --changed-only
+```
+
+`pyproject.toml` canonically owns the production pins. Tree-sitter remains
+dormant during LOC-only execution; failure to load a required provider or
+grammar is a deterministic tool error during normal zero-config syntax analysis.
+Disabling every syntax guard preserves the lazy no-Tree-sitter path. A strictly
+LOC-only result also requires both Markdown guards to be explicitly disabled.
+
+Without Git or another VCS that can provide changed scope, pass exactly the files you created or modified. You are responsible for supplying the complete edited-file set:
+
+```bash
+code-guard src/Foo.py src/Bar.ts docs/guide.md
+```
+
+Do not create a manifest or temporary scope file. Specific positional files mean “inspect these artifacts.” A directory or `.` means a deliberate recursive audit when no Git selector is used. Positional files/directories bound the candidates selected by `--changed-only`, `--staged`, or `--base-ref`; Git selection fails outside a Git repository and never falls back to an audit.
+
+Recursive directory discovery does not follow symlinks. An explicitly supplied
+file symlink is treated as caller intent; an explicit directory symlink is
+rejected rather than recursively traversed.
+
+Prefer normal zero-config scope and respect project `scope.exclude`; do not
+remove or alter exclusions merely to silence findings. Repeated
+`--scope-exclude` is caller-supplied all-guard scope policy and composes with
+project exclusions. LOC `--exclude` remains LOC-specific. Explicit files may
+intentionally inspect Git-ignored or built-in-pruned artifacts, unless Code
+Guard `scope.exclude` or `--scope-exclude` removes them.
+
+When all guards return `PASS`, no detailed policy file needs to be loaded.
+
+When a guard returns `REVIEW` or `FAIL`, read only the policy file named by that finding. The runner returns required policy identifiers/files in both human-readable and JSON output.
+
+Policy references:
+
+- file LOC: `references/loc-policy.md`
+- callable size: `references/callable-size-policy.md`
+- nesting depth: `references/nesting-policy.md`
+- cyclomatic complexity: `references/complexity-policy.md`
+- Markdown document/section size: `references/markdown-size-policy.md`
+
+Do not load unrelated guard policies merely because they exist.
+
+## Scope
+
+Code Guard is intentionally limited to deterministic concerns that are broadly applicable across conventional programming languages.
+
+Guards:
+
+- file LOC (implemented and enabled by default);
+- source/container and syntax facts (production infrastructure, not a guard);
+- callable LOC (implemented and enabled by default; REVIEW greater than 80);
+- structural nesting (implemented and enabled by default; REVIEW greater than 4);
+- cyclomatic complexity (implemented and enabled by default; REVIEW greater than 15).
+- Markdown document physical size (implemented for `.md` and enabled by default; REVIEW greater than 800);
+- Markdown direct-section physical size (implemented for `.md` and enabled by default; REVIEW greater than 200).
+
+Callable LOC needs no invented configuration to activate it. Omission or
+`enabled: true` uses 80; an authorized positive-integer `reviewAt` overrides it,
+and `enabled: false` disables it. Exactly the effective threshold passes;
+larger callables review and never fail. Load
+`references/callable-size-policy.md` only when `callableSize` appears in
+`requiredPolicies`.
+
+Structural nesting is executable control-flow depth, not visual, markup, brace,
+or indentation depth. Omission or `enabled: true` uses 4; an authorized
+positive-integer `reviewAt` overrides it, and `enabled: false` disables it.
+Exactly the effective depth passes; greater depth reviews and never fails. Load `references/nesting-policy.md` only when `nesting`
+appears in `requiredPolicies`.
+
+Cyclomatic complexity is baseline 1 plus normalized decisions owned by the
+callable. Omission or `enabled: true` uses 15; an authorized positive-integer
+`reviewAt` overrides it, and `enabled: false` disables it. Short-circuit
+booleans and fallback/null-aware constructs contribute zero. Lambda boundaries
+are independent. Exactly the effective threshold passes; greater complexity
+reviews and never fails. Load `references/complexity-policy.md` only when
+`complexity` appears in `requiredPolicies`.
+
+Markdown document and direct-section size count all physical lines. Sections
+run from a supported heading through the line before the next heading of any
+level, or EOF. Exact effective thresholds pass; greater measurements review and
+never fail. Load `references/markdown-size-policy.md` when either
+`markdownDocumentSize` or `markdownSectionSize` appears in `requiredPolicies`.
+Review navigation and responsibility without mechanically splitting coherent
+specifications or gaming headings/formatting.
+
+Do not invent configuration, disable a guard, or raise its threshold
+merely to silence a finding. Respect built-ins and only project/user-authorized overrides.
+REVIEW requires inspection and justification, not mandatory refactoring.
+
+Agent Code Guard is the canonical LOC implementation. Agent LOC Guard is the completed prototype/reference whose mature behavior was migrated from commit `75ab39d261dbc65f78815836fac90add16d265d1`.
+
+Project-specific architecture rules, framework-specific checks, arbitrary style preferences, security scanners, and dependency auditing are outside the universal core.

agent_code_guard-0.1.0/skills/code-guard/agents/openai.yaml

@@ -0,0 +1,8 @@
+interface:
+  display_name: "Code Guard"
+  short_description: "Deterministic code guardrails for agents"
+  brand_color: "#2563EB"
+  default_prompt: "Use $code-guard to check changed supported code and Markdown documentation, then load only the policies required by triggered findings."
+
+policy:
+  allow_implicit_invocation: true