A2P: An MCP Server That Enforces Engineering Discipline for AI Coding Agents

What A2P Does
A2P (Architect-to-Product) is an AI engineering framework packaged as an MCP server designed to address common problems with AI coding agents like Claude Code. Instead of just providing more tools, A2P enforces engineering discipline through a gated workflow system.
Core Workflow
The framework implements a lifecycle with enforced gates: Architecture → Plan → Build → Audit → Security → Deploy. Each feature slice must progress through: RED → GREEN → REFACTOR → SAST → DONE.
This enforcement is implemented in code. If an agent tries to advance without satisfying a gate requirement, the tool throws an error.
Specific Enforcement Examples
- A slice cannot advance unless test evidence exists
- Security scanning runs as part of the workflow, not at the end
- Deploy can be blocked until SSL/HTTPS is verified
- Secret management must be defined before deploy configs are generated
- Stateful systems cannot pass deploy without backup requirements
- Release decisions and signoff points are explicit, not hand-waved in prompts
Additional Features
The creator integrated codebase-memory-mcp for structural code exploration, allowing the agent to understand repositories more efficiently instead of "grep-walking everything."
Use Cases
The framework is designed for two primary scenarios:
- Starting a new project with guardrails: Define architecture → break it into slices → build with gated TDD → security → deployment artifacts
- Hardening a vibe-coded MVP: Skip straight to security, audit, refactor, and deployment readiness
Technical Details
A2P is open source under the MIT license. The repository is available at github.com/BernhardJackiewicz/architect-to-product.
The creator specifically seeks critical feedback from developers already using Claude Code seriously, asking about the biggest failure modes in current AI coding workflows: tests, security, architecture drift, fake "done," or deployment issues.
📖 Read the full source: r/ClaudeAI
👀 See Also

Claude Code v2.1.166: Fallback Models, Glob Deny Rules, Cross-Session Hardening
Claude Code v2.1.166 introduces up to 3 fallback models, glob pattern support in deny rules, hardened cross-session messaging, and fixes for terminal flickering, orphaned processes, and more.

Security scanning skill for AI coding agents automatically checks deployments
A developer created a skill file that enables AI coding agents to automatically scan their own deployments for security issues like exposed secrets, open ports, missing security headers, and leaked source code. The scan runs after every deploy and takes about 30 seconds.

Snip tool enables visual communication with AI coding agents
Snip is a free tool that lets developers screenshot, annotate, and draw to show AI agents what they mean visually, while agents can generate diagrams or load images directly through CLI or MCP. Currently runs on Apple Silicon Macs with Mermaid diagram support and HTML support in progress.

bareguard: A Lightweight Safety Gate for AI Agents — Now on npm
bareguard v1.0 is a ~1000-line, single-dependency safety layer for AI agents that blocks destructive actions (rm -rf, DROP TABLE) and enforces budget limits with human escalation. Part of the bare suite, live on npm.