I'm thinking about this a little differently.

You have to catch most issues at code review.

You can have an agent spit out code, but on PR open you should have another agent verify rules based on rules you define as a team.

It's what I'm building at wispbit.