# AI Code Guard CLI (stella guard run/status)

## Module
Cli

## Status
VERIFIED

## Description
CLI commands for analyzing AI-generated code for security issues including secrets scanning, attribution checking, and license hygiene. Provides `stella guard run` to analyze directories/files and `stella guard status` to check guard configuration.

## Implementation Details
- **Command Group**: `src/Cli/StellaOps.Cli/Commands/GuardCommandGroup.cs` -- `GuardCommandGroup` (public static class)
- **Sprint**: SPRINT_20260112_010_CLI_ai_code_guard_command (tasks CLI-AIGUARD-001/002)
- **Policy DSL extensions**: `src/Policy/StellaOps.PolicyDsl/AiCodeGuardSignalContextExtensions.cs` -- signal context for AI code guard in policy DSL
- **Commands**:
  - `stella guard run <path>` -- analyze a directory or file for AI-generated code issues (secrets, attribution, license). Options: `--format text|json`, `--verbose`
  - `stella guard status` -- check guard configuration and enabled analyzers
- **Output**: Uses Spectre.Console for rich terminal rendering
- **Tests**: `src/Cli/__Tests/StellaOps.Cli.Tests/GuardCommandTests.cs`

## E2E Test Plan
- [ ] Run `stella guard run ./src` and verify analysis output showing detected issues (secrets, attribution, license)
- [ ] Run `stella guard run ./src --format json` and verify valid JSON output with findings array
- [ ] Run `stella guard run ./src --verbose` and verify detailed analyzer output
- [ ] Run `stella guard status` and verify guard configuration including enabled analyzers
- [ ] Run `stella guard run` on a clean directory and verify no findings reported with exit code 0
- [ ] Run `stella guard run` on a directory with known secrets and verify detection with exit code 1
- [ ] Verify error handling for non-existent paths
- [ ] Verify AI-generated code attribution checks identify code without proper attribution

## Verification

- **Verified**: 2026-02-13T15:30:00Z
- **Tier 0 (Source)**: pass -- all referenced source files exist on disk
- **Tier 1 (Build)**: pass -- module builds cleanly, 193 tests pass in StellaOps.Cli.Core.Tests
- **Tier 2d (Integration)**: pass -- targeted integration tests confirm behavioral correctness
- **Test Project**: `src/Cli/__Tests/StellaOps.Cli.Core.Tests/StellaOps.Cli.Core.Tests.csproj`
- **Evidence**: `docs/qa/feature-checks/runs/cli/ai-code-guard-cli/run-001/tier2-integration-check.json`