Skill Claude CodeCodex
CURRENTLY DORMANT (named honestly — the scripts/foundrydriftsweep.py engine this skill drives was retired and does not ship; this file is design intent for a re-implementation, not a live procedure). Advisory batch drift-suspect sweep — given a base->head system-state snapshot pair (from the system-state snapshot…
Skill Claude CodeCodex
Environment-isolation-hygiene — own-scoped ephemeral-env lifecycle + teardown (/foundry:env-hygiene). Status of this session's owned dev/test resources (containers, kind/k3d/minikube clusters, LocalStack, dev servers) + the shared runtime daemon; on-demand own-scoped teardown; the reuse-before-start /…
Skill Claude CodeCodex
Extract functional specifications FROM existing code (brownfield → spec). A read-only two-phase playbook — survey a codebase into a behavioral map, then promote a chosen capability into a CANDIDATE atomic spec in the industry-grounded template shape, routed through /foundry:intake (never a self-declared baseline).…
Skill Claude CodeCodex
The single-pane session roster (/foundry:fleet) — every active Claude Code session joined to its foundry work-context (epic/atom/governance), over the NATIVE session list. Read-only/advisory. Trigger to see all your parallel sessions at a glance with their foundry context, or when supervising many sessions and asking…
Skill Claude CodeCodex
Advisory grounding-conformance backfill sweep — classifies every frozen acceptance-contract.yaml in the corpus as GROUNDED / UNGROUNDED / STALE against the current system-state snapshot (from the system-state snapshot tool), reusing the systemgrounding contract block's structural AND consistency validators (the…
Skill Claude CodeCodex
The infra-delivery APPLY router PROCEDURE skill (/foundry:id-apply, infra-delivery step 12) — the one place the framework may MUTATE infra. A PROCEDURE — it resolves the active stack profile, RE-DERIVES the GitOps class via classifygitops(changedpaths, infrabinding) from the FROZEN change-scope × the profile's…
Skill Claude CodeCodex
The read-only forward-design ENTRY mode (infra-delivery step 2) — for "the app runs locally, there is NO deployment yet — design where it should run." Design a target infra topology from requirements (archetype × load projection × cost/ops/compliance → selected stack-profile(s)), then run the adversarial DESIGN-AUDIT…
Skill Claude CodeCodex
The read-only adopt-existing-IaC entry mode (infra-delivery step 2) — adopt an EXISTING OpenTofu/Terraform repo and VALIDATE it is drift-free against the live environment, proven by the acceptance seam tofu plan == ∅ (the IaC equals reality). A PROCEDURE skill the generic agent runs: the tofu plan / argocd app diff…
Skill Claude CodeCodex
The everyday-change ENTRY survey (infra-delivery step 2 default) — a read-only inventory of the target infra (the relevant IaC roots + the in-scope live resources) plus the change surface the intended change touches, producing the change-scope report. A PROCEDURE skill the generic agent runs: the tofu plan / argocd…
Skill Claude CodeCodex
The infra-delivery documentation step (step 16) — generate/update the change documentation (the change-record / ADR, the blast-radius summary, the runbook, the rollback note, and the changelog entry) a delivered IaC change requires, DERIVED from the RECORDED pre-merge plan step-report note + the plan summary and…
Skill Claude CodeCodex
The infra-delivery RECURRING drift sentinel (post-spine) — a read-only forever drift check that re-runs the empty-plan seam (tofu plan == ∅) on a CADENCE to compare reality vs the merged IaC. It runs the active profile's infrabinding.plan as a read-only tofu plan, reads the per-resource plan delta from the canonical…
Skill Claude CodeCodex
Two advisory pre-merge reads of an infra-delivery change. (v2) The POLICY-RISK read — surface foundryplanmodel.parsepolicyfindings output {rule, resource, severity, gating} and distinguish hard-FAIL-shaped (gating==deny) vs ackable-shaped (gating==warn ∧ severity==high ⇒ freeze a policy:high-blast-ack {rule…
Skill Claude CodeCodex
The infra-delivery change-authoring craft (step 5) — author/edit the IaC for the intended change ON A BRANCH, kept in sync with the frozen intended-change manifest (the tofu-plan checkpoint's operator-frozen intended set in the acceptance-contract). A PROCEDURE skill the generic agent runs: it WRITES files…
Skill Claude CodeCodex
The read-only live-env → IaC import entry mode (infra-delivery step 2) — survey an existing AWS/Kubernetes environment that has NO IaC, codify it into OpenTofu/Kubernetes IaC, and prove fidelity by the acceptance seam tofu plan == ∅ (the IaC equals reality). A PROCEDURE skill the generic agent runs: the aws/tofu reads…
Skill Claude CodeCodex
The infra-delivery PRE-MERGE seam PROCEDURE skill (/foundry:id-plan, infra-delivery step 8). A read-only PROCEDURE — it resolves the active stack profile, drives the profile's infrabinding.plan command strings READ-ONLY (tofu plan + kubectl --dry-run=server + argocd app diff) against the real environment, collects the…
Skill Claude CodeCodex
The infra-delivery cross-env PROMOTION orchestrator (step 16) — "this change passed in env N, carry it to env N+1 (e.g. staging→prod)." ADVISORY orchestration that RE-RUNS the existing per-env change-delivery loop in the TARGET env, adding NO new verdict. For the target env it re-derives the GitOps class via…
Skill Claude CodeCodex
The infra-delivery two-lens advisory review procedure the generic agent runs at the infra-delivery review step (/foundry:id-review, infra-delivery review step / step 10 — the sd-review analog for infra). A PROCEDURE — it DISPATCHES the MERGED pr-reviewer general code lens (agents/pr-reviewer.md) ALWAYS, plus the…
Skill Claude CodeCodex
The infra-delivery INCIDENT safe-revert PROCEDURE skill (the recurring/incident rollback step) — the PROCEDURE the generic agent runs when a delivered change did NOT land (a NOT-LANDED realization, an escaped defect, bad config) to restore the last-known-good IaC and prove reality matches it again. The shape is git…
Skill Claude CodeCodex
The infra-delivery OFFLINE LOCAL-SIMULATION step (the new simulate step, between id-test and id-plan) — a PROCEDURE skill the generic agent runs ENTIRELY OFFLINE (no live cloud, no credentials) to author-and-prove the IaC corpus before the live pre-merge plan. Layer 1: apply the profile's EXISTING primitive OpenTofu…