Loading documentation
A transparent look under the hood. GovNu governance is evidence-first — every finding comes with context, every recommendation is explainable, and nothing happens without your visibility.
When you connect your project, GovNu's Project Intelligence analyzes your technology stack, domain, and patterns. This isn't a one-time scan — it continuously understands how your project evolves.
What it detects
Based on your project's profile, Skill Matching activates the right governance skills for each task. A React component gets accessibility and component pattern checks. An API route gets auth, validation, and rate-limiting checks. You never configure this manually.
Example: editing a tRPC route handler
GovNu automatically activates: API route conventions, auth pattern validation, error handling, structured logging, and test coverage requirements. Skills irrelevant to this task (e.g., mobile push notifications) stay dormant.
Every change passes through the Quality Gate System — pre-build and post-build validation. Before you write code, the gate verifies your plan covers all requirements. After you write code, it verifies the implementation matches the plan.
Validates UI/UX completeness, functionality coverage, and error handling before any code is written.
Validates logic correctness, security posture, debugging support, and scalability after implementation.
As code is authored, Real-Time Code Validation runs multiple analysis passes. It catches issues at authoring time rather than in code review or production.
// GovNu catches this during authoring:
const data = await supabase.from('users').select('*');
// ↑ Direct SDK import — use adapter module
// Suggested fix:
import { getUsers } from '@/lib/supabase/users';
const data = await getUsers(filters);Findings include the specific rule, severity, file location, and a suggested fix. No black boxes — every finding is traceable.
Before any code reaches your CI pipeline, the Continuous Verification Pipeline runs a local pre-push check. This catches linting, type errors, test failures, and security issues before they consume CI minutes.
What it checks
Governance isn't static. Continuous Tuning means your governance stack adapts as your project evolves. Skills that are catching real issues stay active. Skills that are generating false positives or aren't relevant to your current work quietly step aside.
How adaptation works
GovNu is designed for skeptical developers. Every governance decision is transparent and verifiable.
Every finding includes file, line, rule, severity, and suggested fix. No unexplained warnings.
High-risk changes are cross-checked by multiple evaluation models to prevent single-point trust.
Customer code is processed in ephemeral sandboxes. Your files stay on your machine.
Bring your own LLM. GovNu supports Anthropic, OpenAI, Google Vertex, and custom endpoints.
Connect your IDE to GovNu and see governance in action on your own codebase. No credit card required for Starter tier.