Groundrule vs InsurStaq AI

AI agents now write a large share of your code. Your engineering standards didn't come along: they live in wikis, review comments and the heads of a few senior people, and every agent file (AGENTS.md, CLAUDE.md, Cursor rules, Copilot instructions) drifts into its own copy.

Groundrule turns those standards into one rulebook, teaches it to every coding agent, and checks every change against it.

**One rulebook.** Write a standard once: the requirement, why it exists, how to fix a violation, a severity and a stage. Start from curated packs (security baseline, TypeScript/Node, Python, Go, Java/Spring, React, architecture, Docker, Kubernetes, Terraform, GitHub Actions, testing, agent hygiene) and add your own.

**Every agent reads it.** One `groundrule sync` writes AGENTS.md, CLAUDE.md, Cursor rules and Copilot instructions from the same source, and a stop hook plus an MCP server let agents check their own work before they finish.

**Start from what your code already does.** `groundrule scan` reads the rules a repository already keeps (layer boundaries, placement conventions, package gates, imported from your existing docs too) and sends proposals to a review inbox, each with its evidence. Accept, and it's a standard.

**Checked on every pull request.** Deterministic checks run in CI and on commits. Each finding names what failed, which standard, the evidence (file and line) and the fix. Blockers stop the merge; everything else teaches.

**Roll out on evidence.** Every rule moves through observe → teach → advise → enforce, with the data to justify each step. A compliance report shows pass rate, rules in effect, exceptions used and what commits declare about coding agents, exportable as CSV.

The core (CLI, checks, packs, hooks, MCP server) is open source under Apache-2.0 and works with no account. The hosted workspace adds the rulebook, inbox, rollout stages, team and repository settings, and compliance reports. Free for small teams; open-source projects stay free.

Best for: Engineering teams that ship with AI coding agents: platform and staff engineers, tech leads and engineering managers who own code quality, architecture and security standards.

• Standards for coding agents
• AGENTS md generation
• Architecture rule enforcement
• PR compliance checks
• Security baseline enforcement
• Agent file drift detection

See the full listing - Groundrule on ScrollLaunch.

InsurStaq is a private AI security engineer for your Mac. Point it at a repo: it maps routes and auth, finds injection, exposed secrets (Git history too), vulnerable dependencies and IaC risks, and traces attack paths from the internet to the exact line. InsurStaq's own security model, fine-tuned for security work, explains findings and drafts fixes you approve; a rescan verifies them. Readiness evidence for SOC 2, ISO 27001, PCI DSS and OWASP ASVS. Your code never leaves the machine.

Best for: CTOs and engineering teams facing SOC 2 or ISO 27001 audits, AppSec and compliance teams, and security consultancies

See the full listing - InsurStaq AI on ScrollLaunch.