Platform / Foixar.Govern / Code Guard
Code Guard · PR Governance

Rules that actually block.

Watch it happen: an AI assistant writes raw SQL into your data layer. Code Guard catches it at the line, blocks the merge, and suggests the governed fix — before any human reviewer opens the PR.

The merge gate

Every PR goes through. Not every PR comes out.

Required checks in Azure DevOps and GitHub — human-written and AI-generated code face the same gate.

232governed merges this month 23blockers caught before review 0rules bypassed
Codebase intelligence

It doesn't just know the rules.
It knows your codebase.

A linter matches syntax. Code Guard reads the same intelligence the rest of Foixar runs on — the sealed boundary, your pattern index, your decisions, your test evidence — so every verdict comes with how your codebase already does it.

Sealed boundary

the approved slice · Δ f04b7a

Pattern index

619 chunks · how you write code

Decision Memory

ADRs cited in verdicts

Test evidence

proof linked to every check

error SQL_RAW_001: raw SQL detectedgeneric linter
vs
FoixarCODE GUARDPaymentsRepository.cs · L218
This query skips the tenant filter. Every other repository method in this codebase scopes by tenant — .Where(p => p.TenantId == _tenant.Id), 14 examples. It also conflicts with ADR-009 (tenant isolation, decided Feb 2026) and sits inside your sealed boundary, so the fix stays in this file. Suggested change attached.
pattern · 14 matching files ADR-009 · tenant isolation within boundary Δ f04b7a 2 tests will cover it
verdict grounded in your codebase · not generic lint
Three layers, one verdict

28 rules on every pull request.

Foixar's governed registry, the domain starters you forked, and your own tenant rules — one stack, full provenance.

Foixar registry
12

Governed core — architecture, security, tests

Forked starters
16

Domain packs, frozen at your fork version

Your rules
0+

Tenant-specific — tighten or add anything

On every PR
28 rules
23 blockers3 warnings2 info
Foixar registry

The governed core — boundary enforcement, secret hygiene, test evidence. Locked by Foixar, versioned, identical for every tenant.

can be tightened · never silently weakened
Forked starters

Domain packs frozen at your fork version. Upgrades are explicit diffs — you see which rule got promoted to blocker, and why, before accepting.

immutable forks · explicit upgrades
Your rules

Anything your tenant needs — scoped by repo and glob, with severity you choose. Overrides of starter rules are allowed, and always on the record.

tenant-owned · provenance logged

Put 28 rules on your next PR.

Connect a repo in the demo and watch the first governed check run live.