# Build with AI—inside your policy.

Your team sets the harness once. Anyone builds with any tool.

Nothing ships without review.

[See the harness model](/content/ai-code-governance/index.html) [Start free with your agent](https://app.xano.com/signup?plan=build&cluster_id=1&segment=eyJhbm9ueW1vdXNJZCI6IjQxNjgyOTU4ODUuNjgwNjQwNjc1MSIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX3Rlcm0iOiIiLCJ1dG1fY29udGVudCI6IiIsInJlZmVycmVyIjoiaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8ifQ%3D%3D) [Talk to an engineer](/content/contact/index.html)

## The harness, enumerated.

What your team mandates before anyone builds. Inherited automatically by every workspace.

### Approved AI skills

Skills agents are allowed to build with

### The test suite

What every build must pass

### Allowed dependencies

The code that’s permitted in

### Auth patterns & identity

How access works, every time

### Environments & residency

Where things run and data lives

### Agent rules

Standing instructions agents inherit

### Enforced in the request path, not in a PDF.

Policy here isn’t documentation. Middleware enforces it on every request—before input validation and before the response leaves—assigned at the workspace level so no endpoint can skip it. Sensitive fields: encrypted in and out, no matter who built the endpoint.

### The flow.

Connect any agent (Claude, Cursor, Codex). Your agent scaffolds against Xano's harness by default. Deploying creates an immutable, sandboxed release. IT inspects and promotes the exact artifact to production.

## Claude Code, with and without the harness

Same agent. Different software.

### Claude Code alone.

-  The harness is one developer's markdown files: advisory rules the agent can drift from, different in every repo.
-  Context gets re-prompted every session.
-  The output deploys anywhere; the only person who can vouch for it is the person who prompted it.
-  Review means reading a wall of generated code after the fact.

### Claude Code on Xano.

-  The same agent connects and inherits your organization's harness: specs, agent rules, skills, docs, and business rules as standing context.
-  It scaffolds against approved auth patterns, dependencies, and environments by default.
-  Builds land in a sandbox, ship as an immutable release, and pass your review gate before promotion.
-  Enforced per environment and per tenant.

## Try a hundred ideas. Ship the one that works.

Experiments on Xano start within your policy. The one that works goes to production on the path that IT already trusts.

> “When one of these becomes real, I'm not rebuilding it. It ships from where it started.”

## AI builds software. Xano makes it trustworthy.

[Start building, free](https://app.xano.com/signup?plan=build&cluster_id=1&segment=eyJhbm9ueW1vdXNJZCI6IjQxNjgyOTU4ODUuNjgwNjQwNjc1MSIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fc291cmNlIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX3Rlcm0iOiIiLCJ1dG1fY29udGVudCI6IiIsInJlZmVycmVyIjoiaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8ifQ%3D%3D) [Talk to sales](/content/demo/index.html)