audit notes work completed, test fixes work (95% done), new sprints, new data sources setup and configuration

docs/flows/10-cicd-gate-flow.md

@@ -242,6 +242,22 @@ stellaops scan docker.io/myorg/myapp:v1.2.3 \
 | `--fail-on` | Exit 1 on: `violation`, `warning`, `any` | `violation` |
 | `--quiet` | Suppress progress output | false |
 
+### 3b. AI Code Guard (optional)
+
+Run AI code guard checks on a change set and emit CI-friendly output:
+
+```bash
+stella guard run \
+  --policy .stellaops.yml \
+  --format sarif \
+  --out guard.sarif
+```
+
+Recommended exit behavior:
+- pass: exit 0
+- review: exit 0 (with warning in report)
+- block: exit 1
+
 ### 4. Policy Evaluation
 
 Policy engine evaluates findings against CI-specific rules: