The starting point
Coding agents are fast, but by default nothing stops them from skipping a test, reading a secret or pushing to the main branch. We wanted every new project to start with these guardrails already in place, whatever the technology.
What was built
- One command that creates a project (SvelteKit, Go, Rust, Expo, Android, iOS) or equips an existing one
- Hooks that block dangerous commands: force pushes, history rewrites, skipping git hooks
- A quality gate that refuses to end a task until lint, types and tests are green
- Four security scans on every change: secrets, code, workflows, vulnerabilities
- Always up-to-date versions, but a new dependency waits several days before it gets in
- The same checks on GitHub or GitLab
Technologies
In-house tool: its code is not public.