Rigour v4.2 — DLP + Governance + Quality Gates

AI Agent Governance.
One command.

Block credential leaks before they happen. Enforce quality gates on every file write. Control what agents remember. Works with Claude, Cursor, Cline, Windsurf, and Copilot.

$npx @rigour-labs/cli init
$brew tap rigour-labs/tap && brew install rigour
rigour demo --cinematic
Rigour demo — AI agent writes code, hooks catch issues in real time, agent self-corrects

Three layers of protection.

Every agent interaction passes through DLP, quality gates, and governance — before a single line ships.

Input DLP

Block credential leaks

29 patterns scan every agent input for AWS keys, API tokens, database URLs, private keys, and more. Shannon entropy detection catches encoded secrets. Unicode normalization defeats zero-width character bypasses.

✓29 credential patterns
✓Entropy detection
✓Anti-evasion hardening
✓OWASP LLM 10/10

Quality Gates

Enforce standards on every write

Real-time hooks fire on every file write across all agents. Deterministic PASS/FAIL gates for file size, complexity, security patterns, hallucinated imports, and AI drift. Deep LLM analysis across 40+ categories.

✓Real-time hooks
✓AST-level analysis
✓Drift detection
✓6 languages

Memory Governance

Control what agents remember

Block writes to native agent memory files (.cursorrules, CLAUDE.md, .clinerules). Force all persistence through governed channels with DLP scanning. Separate memory and skills enforcement with granular overrides.

✓Memory path blocking
✓Skills governance
✓DLP on recall
✓Configurable via YAML
Real-time hooks for Claude, Cursor, Cline, Windsurf, Copilot
Multi-agent governance with scope conflict detection
Industry presets for HIPAA, SOC2, FedRAMP compliance

Proof of concept

We audited OpenClaw — 180K stars, acqui-hired by OpenAI.

Score: 0/100. 2,080 violations. 7 security vectors. The scan took 3.9 seconds.

✗ File Size✗ AST Analysis✗ Content Check✗ Context Drift✓ Environment✓ Dependencies✓ Safety Rail

Open source.
No signup. No telemetry.

Your code never leaves your machine. MIT licensed. Built by engineers who believe governance should be a feature, not a product.

MIT
License
100%
Local
29+
DLP Patterns
6
Languages