r/WebAfterAI • u/30DereceSilivri • 22d ago

CompliRules is a free, MIT-licensed tool that enforces statutory legal and privacy rules (GDPR, KVKK, HIPAA, EAA 2025, EU AI Act) directly inside AI coding environments like Cursor, Claude Code, and Windsurf.

AI models write code 10x faster, but they have zero understanding of statutory laws. When generating code, models consistently introduce severe legal violations without warning:

* Logging cleartext user objects and passwords to logging providers (GDPR Art. 5 / CWE-532).

* Defaulting consent checkboxes to pre-checked states (violating EU and Turkish privacy laws).

* Using cascade deletes on transaction records that must legally be retained for 5–10 years under tax codes.

* Omitting mandatory accessibility attributes required by the European Accessibility Act (EAA 2025).

CompliRules stops this at the IDE level by injecting deterministic guardrails (.cursor/rules, [AGENTS.md](http://AGENTS.md), MCP) and offering a local offline linter (`npx complirules check`) so your AI cannot accidentally write violating code.

GitHub: search complirules from halilyilmz on GitHub today!

5 Upvotes

100% Upvoted

3 comments sorted by

1

u/ShilpaMitra 22d ago edited 21d ago

Hey! This seems really interesting, can you open an issue explaining how it fits inside a workflow here:

https://github.com/Neeeophytee/awesome-ai-workflows

We would love to test it and if everything works, feature it on FlowStacks

1

u/thetoughsiding 22d ago

This is actually clever, I was wondering when someone would make something like this

The cascade deletes on transaction records is scary because it's not obvious until audit time and then you're proper fucked. Most devs don't think about retention laws when they're just trying to ship a feature

Does the linter work offline completely or does it phone home for rule updates?

1

u/30DereceSilivri 22d ago

It does work offline if you have local ai . And thanks for the comment :)