rigour

概述

Rigour 作为 AI 编码代理的免疫系统，实时防止危险的代码提交。它使用基于 AST（抽象语法树）的检测方法，而非启发式算法，分析多种编程语言（TypeScript、JavaScript、Python、Go、Ruby、C#、Java、Kotlin、Rust）的代码。系统从每次扫描中学习，创建特定于您代码库的模式并随时间增强。当检测到违规行为时，Rigour 提供 JSON 格式的精确修复指令，AI 代理可以消费这些指令来自我修复问题，无需人工干预。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• rigour_check

  Performs security and structural analysis of code files

  试试:Check this code for security vulnerabilities试试:Analyze the current file for AI drift patterns试试:Run a governance check on the codebase
• fix_packet

  Provides JSON-formatted instructions for fixing code violations

  试试:Generate fix instructions for these violations试试:Show me exactly how to fix these security issues试试:Provide actionable fixes for the code problems found
• list_violations

  Lists all detected violations in the codebase

  试试:Show me all violations in the project试试:List security issues in the code试试:What structural problems were found?
• check_security

  Specifically checks for security vulnerabilities and hardcoded secrets

  试试:Check for AWS secrets in the code试试:Look for SQL injection vulnerabilities试试:Scan for hardcoded credentials
• check_ast

  Performs AST-based analysis of code structure

  试试:Analyze the code structure for complexity issues试试:Check for high cyclomatic complexity试试:Find methods with too many parameters
• check_ai_drift

  Detects AI-related issues like hallucinated imports and context drift

  试试:Check for phantom APIs in the code试试:Look for hallucinated imports试试:Detect any AI drift patterns
• get_dashboard_data

  Provides real-time governance dashboard data

  试试:Show me the current dashboard score试试:Get recent governance metrics试试:What's the current AI health score?
• get_patterns

  Retrieves patterns learned by the Rigour Brain

  试试:Show me the patterns the system has learned试试:What are the strongest patterns detected?试试:List all learned patterns

可对比工具

安装

npm install -g @rigour-labs/mcp

{ "mcpServers": { "rigour": { "command": "npx", "args": ["-y", "@rigour-labs/mcp"] } } }

npx rigour-scan

FAQ

Rigour 与传统 linter（如 ESLint）有何不同？

Rigour 是 AI 原生的，学习您的代码库模式，提供直接给代理的自愈修复包，并能检测传统 linter 会遗漏的特定于 AI 的问题，如幻觉导入和上下文偏差。

Rigour 支持哪些编程语言？

Rigour 通过基于 AST 的分析而非模式匹配，支持 TypeScript、JavaScript、Python、Go、Ruby、C#、Java、Kotlin 和 Rust。

rigour 对比