CAIN-42 MCPGateAGENTIC AI 75 · #24
Coding agents inside native development tools
Apple integrated Claude Agent and Codex into Xcode workflows, including builds and visual previews.
Last reviewed 2026-11-11
Agentic AI 75 / #24
2026 status: Release-candidate announcement · Category: Developer tooling
The 2026 development
Apple integrated Claude Agent and Codex into Xcode workflows, including builds and visual previews.
The governance gap
An agent inside the IDE inherits the developer's build, signing and repository access. The boundary has to distinguish read, build, test and release, because they are not the same authority.
Where CAIN-42 fits: Moat 4 — Execution Provenance & Attestation
Core question: Can we prove what actually happened? Hash-chained, signed records binding decision to execution to observable effect.
Gate the agent at the tool boundary, not at the chat boundary. CAIN's codeguard and KEYSTONE repo paths classify build, test and write actions, and require a proved test before a change is called verified.
How the wiring works
- Give the agent read and build authority without release or signing authority.
- Require a separate grant for any write to the repository.
- Run the build and the reference test in an isolated worktree.
- Sign the patch and its test result; never sign the model's own claim.
What is real today
LIVE A public route in this deployment exercises this mechanism today, within its stated scope.
The hosted gate evaluates fixed coding-agent actions. It is not an Xcode plugin and has no Apple integration.
| Component in this repository | What the module says it is |
|---|---|
keystone/codeguard.py | CODEGUARD KEYSTONE: AI coding-agent actions checked before they run, Claude proposes a safer action, proved, signed. |
keystone/repo.py | The loop at repository scale: scan a tree, and prove a proposed fix with the project's own tests. |
keystone/guard.py | Fix-safety checks: the fix may repair the defect, but it may not break the code around it. |
keystone/sandbox.py | Run a module's tests inside a bubblewrap sandbox: no network, read-only system, only its own files, time-boxed. |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Run the live coding-agent gate
/codeguard-keystone - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Coding-Agent Action Gate |
|---|---|
| Buyer | IDE vendors and engineering organisations |
| Price (proposal) | $2,500–$5,000 per review |
| Bundle | Code & Proof — Prove the fix, not just the diff. |
| Operator stream | Stream 2 of the 10-stream operator playbook |
Platform engineering, AI coding-tool vendors, security engineering is the bundle buyer. The entry offer for this bundle is Fabrication audit or long-run engineering attestation; the range is $1,500–$6,000 per audit; $2,500–$4,000/month retainer. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-024 — Coding-Agent Action Gate DELIVERABLE
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Kind: Assessment · Price (proposal): $2,500–$5,000 per review · Lead time: 5 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.