Open-source database & API access governance platform A SQL, NoSQL, and API proxy that puts review, approval, and audit between your team and production data and services.
Six read-only agents that explain a change and give it a second opinion. They are dispatched by impl-gh-issue at step 5b (and add-engine at step 13) before a change becomes a PR, and by review-gh-pr against a PR that already exists: af-reviewer and af-security-reviewer always run; the stack specialists run when their…
Frontend/e2e code specialist reviewer for an AccessFlow change. Reads the frontend/ and e2e/ portion of a branch cold and checks it against the frontend non-negotiables and the frontend-page / frontend-form / e2e-spec pattern checklists — strict types, t() i18n, TanStack Query, token handling, selector drift, test…
Backend/engine code specialist reviewer for an AccessFlow change. Reads the backend/ and engines/ portion of a branch cold and checks it against CLAUDE.md's backend rules and the backend/engine pattern checklists — Modulith boundaries, Java idioms, Flyway, scheduled jobs, the Security Rules, test parity. Returns…
Explains what an AccessFlow change actually does. Reads a branch or PR diff cold and returns a structured briefing — the one-paragraph what, the why, a per-area breakdown of the real changes, the interface surface it moves (endpoints, enums, migrations, config knobs, events), and where a reviewer should look hardest.…
Adversarial reviewer for an AccessFlow change. Reads a branch or diff cold and checks it against the .claude/patterns/ acceptance checklists, the fan-out completeness tables, CLAUDE.md's non-negotiables, and the "same commit set" drift rules — returning Blockers / Concerns / Nits with file:line evidence and a verdict.…
Security specialist reviewer for an AccessFlow change. Reads a branch or PR diff cold through a security lens only — proxy bypass, row-security failing open, self-approval and tenant scoping, credential handling, the auth surface, SSRF, audit tamper-evidence, plugin supply chain — and returns Blockers / Concerns /…
Runs AccessFlow's real quality gates against a working tree or branch and reports exactly what passed, what failed, and what was not checked. Maps the set of touched paths onto the gates that actually apply, so a docs-only change does not pay for a full Maven verify. Deliberately has no Edit or Write tool — it can…