rule-audit

To audit AGENTS.md invariant compliance, run rule-audit against your service directory to scan code, infrastructure manifests, and CI pipelines for deviations across invariants D-01 through D-27. It generates a structured PASS/FAIL report with precise file:line evidence.

The governance audit does not automatically fix invariant violations. It is a READ-ONLY tool that identifies deviations and produces an auditable remediation plan for human approval, ensuring you maintain control over all codebase changes.

Yes, you can use conftest and Rego-based policies to validate Kubernetes manifests. The audit integrates with these tools to evaluate infrastructure configurations and CI pipelines against the defined D-01 through D-27 invariants.

To scan a specific subset of invariants, use the selective scope subset flags provided by the tool. This allows you to target particular checks within the D-01 through D-27 suite rather than running the full compliance audit.

The best way to generate an auditable remediation plan for CI pipeline deviations is to run rule-audit across your repository. It surfaces invariant violations with precise file:line evidence and proposes structured remediation actions for human consultation.