Activation Surface

Preset Reference

Start with `recommended` for the quiet default, then add `preview`, `threat-review`, or other explicit sidecar lanes only when you want broader review.

Start with `recommended`Use the quiet default first, then add broader review only when you need it.

Add sidecar lanes deliberately`preview`, `threat-review`, `governance`, `compat`, and others are explicit extra review passes.

Use surface presets when scoping matters`skills`, `mcp`, and `claude` focus review on a specific artifact family instead of broad repo coverage.

Preset Group

Start Here

Begin with the quiet default, then add broader review only when you need it.

recommendedQuiet practical default for most teams: curated high-signal checks for AI-native repos.quiet default direct activation 2 rules

previewDeeper-review rules that expand coverage beyond the recommended default.sidecar lane direct activation 1 rules

threat-reviewExplicit threat-review rules for malicious, credential-bearing, or spyware-like behavior that should stay opt-in instead of shaping the quiet default.sidecar lane direct activation 140 rules

Preset Group

Sidecar Lanes

Add explicit review dimensions such as supply-chain, governance, or compat.

supply-chainSidecar supply-chain hardening rules, including GitHub Actions workflow checks.sidecar lane direct activation 52 rules

governanceOpt-in review rules for shared mutation authority and broad bare tool grants that should not read like headline security findings.sidecar lane direct activation 235 rules

compatPolicy and compatibility checks that compare declared workspace posture against repository behavior.sidecar lane direct activation 18 rules

guidanceAdvice-oriented guidance rules that are useful, but intentionally not part of the core security baseline.sidecar lane direct activation 15 rules

advisoryOffline dependency vulnerability checks that match installed lockfile versions against the active advisory snapshot.sidecar lane direct activation 1 rules

Preset Group

Surface Memberships

Scope review to a specific artifact family when you do not want the broader default.

baseMinimal stable baseline for explicit compatibility-focused setups.surface preset direct activation 2 rules

skillsRules for instruction and skills markdown that remain inside the core agent-artifact surface.surface preset direct activation 11 rules

mcpRules for MCP, tool, and server JSON configs, including preview-only coverage.surface preset direct activation 168 rules

claudeRules for Claude settings and command-hook configuration.surface preset direct activation 111 rules

Preset Group

Overlays

Change severity posture for rules that are already active.

strictSeverity overlay for active security rules; paired with the recommended default rather than activating rules by itself.overlay0 rules