docs-guide/policies/infrastructure-principles.mdxdocs-guide/policies/quality-gates.mdxdocs-guide/policies/root-allowlist-governance.mdxdocs-guide/policies/agent-governance-framework.mdx
Install / Verify
Enforcement Boundaries
Pre-commit (.githooks/pre-commit)
- fast staged local/offline checks only
- structure/style/static checks + staged generator sync
- fail-fast when cheap blocking violations already exist
- reuses the expensive staged validation result when staged content and hook inputs are unchanged
- enforces pre-commit runtime budget (default
<= 60s)
Pre-push (.githooks/pre-push)
- codex governance checks on
codex/* - contract + issue readiness + lock/stash policy
- non-fast-forward guard on codex branches
CI
- owns heavy and broad checks (browser/page/link/openapi sweeps)
Overrides
If a human explicitly approves an override, follow:ai-tools/ai-rules/HUMAN-OVERRIDE-POLICY.md