Guide. Verify. Solve.

Agent Centric Development Cycle AC/DC

Agents don't make micro-commits. They work for hours and drop 40,000-line PRs, and the old verification model can't keep up. AC/DC is the framework that puts verification back in control — guiding agents with the right context, verifying everything they write, and fixing issues automatically. SonarQube is the independent trust and verification layer: agent-agnostic, and compatible with whatever generation tools your team uses.

The AC/DC framework

A cycle built for how agents actually work

AC/DC runs at two levels. An inner loop sits inside each agentic reasoning step, and an outer loop at sandbox exit. Sonar covers all three stages, for every AI coding tool.

01

Inner loop

Per reasoning step · agent sandbox
1
Guide Define context and constraints
2
Verify Review and validate code
3
Solve Fix issues
PR submitted
02

Outer loop

At sandbox exit · CI pipeline
1
Guide Define code standards and quality gate conditions
2
Verify Full zero-trust, multilayered verification
3
Solve Automated remediation
The three stages

Guide. Verify. Solve.

STAGE 01

Guide your agents with your standards and architecture context

Agents need the right and relevant context. Not too much, not too little. The Guide stage provides agents with guardrails and the most relevant context, standards, and architectural constraints so their output fits your organization's requirements.

Without the right context, agents produce code that is functionally correct but contextually wrong, violating your coding standards, style, or security posture. Sonar Vortex provides dynamic, task-relevant context at the start of every agentic session. Too little context means code that ignores your standards. Too much degrades model performance. The right context, dynamically selected, is the key.

STAGE 02

Zero-trust, multi-layered verification.

Agents generate thousands of lines before stopping. At every checkpoint, inside the agent's inner loop and at sandbox exit, two complementary layers run together: SonarQube's deterministic mathematical analysis and Gitar's AI-native code review. Neither alone is sufficient. Together they cover the full surface.

Zero trust

Separate, deterministic, and fully auditable — every finding explained with its exact rule, location, and data flow.

Multi-layered

SonarQube reasons across syntax, control and data flow, taint analysis, SCA, and architecture; Gitar adds AI-native review for the logic and behavioral bugs static analysis can't reach.

Industry leading false positive rate: 3.2%. Teams verify real issues, not noise.

STAGE 03

Close the loop with automated remediation.

When verification fails, Sonar doesn't just report issues. It resolves them. The SonarQube Remediation Agent generates verified fixes, validates them against the same quality gate that failed, and opens a ready-to-merge pull request. No manual review cycle required.

The same workflow applies to existing backlogs. Teams with hundreds of accumulated security and quality findings can deploy the Remediation Agent to clear them systematically, turning a growing backlog into a continuously improving posture.

How-to guides

Get AC/DC running with your agents

Step-by-step guides for wiring AC/DC into your actual agent setup, organized by what you’re trying to accomplish, not by product.

Set up context
Claude Code

Inject architecture context into Claude Code

Wire Sonar's context injection into Claude Code sessions. Your architecture, coding standards, and quality rules - available as MCP tool calls before the agent writes anything.

Set up context
Codex CLI

Inject architecture context into Codex CLI

Inject architecture, coding standards, and quality rules into Codex CLI before it generates a line of code — via MCP context injection.

~20 min setup
Read guide
Set up context
GitHub Copilot

Inject architecture context into GitHub Copilot

Wire Sonar’s context injection into GitHub Copilot sessions in VS Code. Your architecture, coding standards, and quality rules available before Copilot generates a line.

Verify quality
Claude Code

Verify code quality in your Claude Code agent loop

Put inner-loop verification to work. Run Sonar's analysis engine inside the agent’s reasoning cycle - every file, every step - not just at PR time.

Verify quality
Codex CLI

Verify code quality in your Codex CLI agent loop

Run inner-loop verification in your Codex CLI workflow. Catching issues at the point of generation - not after the PR lands.

Verify quality
GitHub Copilot

Verify code quality in your GitHub Copilot agent loop

Run inner-loop verification in GitHub Copilot in VS Code. Sonar’s analysis engine catches issues at the point of generation, before they compound.

~20 min setup
Read guide
Fix issues
PR workflow

Auto-fix PR issues when the quality gate fails

Wire automated remediation into your PR workflow. When the quality gate fails, verified fixes are generated, validated, and opened as a ready-to-merge PR - automatically.

~15 min setup
Read guide
Fix issues
Issue backlog

Clear your security and quality backlog automatically

Put your existing issue backlog to work. Target accumulated findings - generating verified fixes and opening ready-to-merge PRs without manual review cycles.

~20 min setup
Read guide
Full workflow
TerminalCodex CLI

Run the full AC/DC loop in the terminal

The complete Guide → Verify → Solve cycle without leaving the terminal. Agent generates; Sonar verifies; the loop repeats until the quality gate passes.

~25 min setup
Read guide
Full workflow
Claude CodeMCP

Connect Sonar to Claude Code via MCP

Make every Sonar capability available inside Claude Code as a native tool — architecture queries, quality gate checks, findings lookup, and more.

~10 min setup
Read guide
Full workflow
Claude Code

Install Sonar in Claude Code

Connect SonarQube to Claude Code so Sonar findings, quality gate status, and architecture context are available as native tools in every agent session.

Full workflow
GeminiMCP

Connect Sonar to Gemini Code Assist via MCP

Make every Sonar capability available inside Gemini Code Assist Agent Mode as native MCP tool calls. Architecture queries, quality gate checks, and findings lookups.

~15 min setup
Read guide
More guides coming Devin · GitLab Duo · Azure DevOps auto-analysis.
More dev guides
Templates

AC/DC for your agent, right now

Drop these files into your repo and your agent immediately understands the AC/DC workflow. Includes CLAUDE.md, AGENTS.md, .cursorrules, and three agent skill files.


          
All Sonar products for AC/DC

The full stack for agentic development

Sonar covers the full Agent Centric Development Cycle — including context injection, verification, and automated remediation — all as one integrated workflow.

01
Guide Context before the agent writes anything
Explore stage

Sonar Vortex

GA

Delivers project-specific context and constraints before the agent writes. Architecture, coding standards, and quality rules retrieved via semantic navigation and injected through SonarQube CLI or MCP Server.

Product page

SonarSweep

Private beta

Context files embedded in the repo that travel with the codebase. Every agent picks them up automatically.

Product page
02
Verify Zero trust, multi-layered verification of all code
Explore stage

SonarQube

GA

Deterministic-first analysis across 40+ languages. The quality gate for all code, human- or agent-written.

SonarQube Advanced Security

GA

Deep security analysis with taint tracking, secrets detection, SCA, and IaC scanning.

Sonar Vortex

GA

Runs Sonar’s full analysis engine inside the agent’s inner loop. Every output verified before a PR exists — same depth as a full CI scan, in seconds.

SonarQube Architecture

GA

Visualize and manage architecture. Tracks current vs intended structure, exposed to agents via MCP.

Gitar

New

AI code review that lives in your pull requests. Reviews code, diagnoses CI failures, generates fixes, and commits only when the build passes.

SonarQube MCP Server

GA

Exposes SonarQube as native MCP tools for Claude Code, Cursor, and any MCP-compatible agent.

SonarQube for IDE

formerly SonarLintGA

Real-time Sonar analysis in VS Code, IntelliJ, and other IDEs as the agent writes code.

SonarQube CLI

GA

Unified CLI for SonarQube capabilities, designed for agentic and CI/CD workflows.

03
Solve Close the loop with automated remediation
Explore stage

SonarQube Remediation Agent

Beta

Generates verified fix PRs automatically when the quality gate fails.

Product page

AI CodeFix

GA

One-click fix suggestions in the IDE and PR. Fully on-premises in SonarQube Server 2026.2.

Product page
From the Sonar blog
eBook

The Agent Centric Development Cycle

This ebook introduces the Agent Centric Development Cycle (AC/DC), a framework designed to help engineering teams harness agentic AI without compromising code quality, security, or maintainability. It's backed by data from Sonar's 2026 State of Code Developer Survey and independent academic research.

Download eBook
A G2 Leader for 6 years running
4.6 / 5

Ready to build the AC/DC loop into your team’s workflow?