What it does
Fail-closed review gate
A reviewer from a different model family gates every change; a missing or unparseable verdict counts as REVISE — fail-closed — and only a human merges to main.
Written constitution
Rules live in the repo, not in a prompt: an explicit constitution agents must satisfy before code ships.
Any harness, any repo
Rig-lite that drops into Claude Code, Codex, or your own loop — worktree isolation and git-versioned memory included.