Borrowing it
Nothing to install: this file belongs to Black-coffe/vulyk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Black-coffe/vulyk/main/.claude/commands/vulyk-bootstrap.mdgit clone --depth 1 https://github.com/Black-coffe/vulykWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/black-coffe/vulyk/vulyk-bootstrap)<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-bootstrap"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-bootstrap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-bootstrap"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-bootstrap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00019 | $0.01302 |
| Opus 5.5 | $0.00008 | $0.00521 |
| Sonnet 5.5 | $0.00004 | $0.00260 |
| Haiku 4.5 | $0.00002 | $0.00130 |
Grade A, and why
vulyk-bootstrap scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 65 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are initializing VULYK for this repository. Follow bootstrap/interview.md. The constitution is
CLAUDE.vulyk.md if it exists, else CLAUDE.md. Nobody has to know this command: while the Profile
still holds a <fill in row, the SessionStart brief tells the Queen to offer it once, before the first
task. A no is recorded as the Profile row | Bootstrap | declined <date> |, which silences the offer.
- Interview. Ask the script's questions in three batches (context, conventions, posture). With
--quickin "$ARGUMENTS", infer the answers from the repo (package files, CI config, lockfiles, README) and present them for one confirmation instead. - Tailor the constitution.
- Profile: fill the rows between the
VULYK:PROFILEmarkers from what you verified in step 1, never from what a README claims; a profile copied from another repository is a confident lie. The row that pays for itself is Configurations that exist today, with what is deferred and until when: a reviewer that does not know it demands guarantees for deployments nobody has. Client path is how a person reaches the running thing (a URL and a test login, a CLI entry point, a browser runner's quiet command), ornone: library only; a filled row adds the black-box seat at Tier 3-4. Release / deploy names the default branch, how a version is published and who presses the button;/vulyk-shipprints it and never presses it. Owner language is the one reports and questions to the owner come in (--quick: the language the owner writes in),enwhen unsure. - Top model: run
bash scripts/top-model.sh --explain, show the owner what the plan resolved to and why, and leaveTOP_MODEL = autounless question 15 asked for a deliberate pin (then write the alias in its place). Then runbash scripts/top-model.sh --applywhatever the answer: it pins the Queen's own session in the gitignored.claude/settings.local.json, so the session runs on the model the ladder assumes rather than the account default. - Telemetry: do not ask; the installer did. Print
bash scripts/telemetry.sh consentin the summary with the one line that changes it (install.sh --telemetry ask, or edit the| Telemetry |row). - Commands: replace every row between the
VULYK:COMMANDSmarkers, and the warning blockquote above the table; the shipped rows are VULYK's own and wrong for any other project. Use this project's real commands in their quiet form (--reporter=dot,-q,--silent), because their output is resent on every later turn. Run each one; where the project lacks one (no build step, no test runner), write that instead of a plausible command, since a verification that always exits 0 is worse than an admitted gap. Per-story rows run in a minute or two. Name the full suite in its own row with(round-only)in its Purpose cell: the reviewer runs it once per round and no story names it. A suite that runs longer gets a part switch (--part <topic>or the runner's equivalent), and each story names the part covering its## Files. - Court setup: question 7's install step goes verbatim into
.claude/vulyk-setup(a bash script; it runs with the court as its working directory andVULYK_ROOT,VULYK_COURTset, capped at 300 s). Run it once in a scratch checkout before committing it. "None" writes no file. The installer never ships or touches this file (docs/cycle.md, stage 05). - Conventions tied to paths go into
.claude/rules/<area>.mdwith apaths:frontmatter list (shape:templates/rule-example.md), not into the constitution, which every agent that loads it pays for on every turn.
- Profile: fill the rows between the
- Prune the roster. Delete agents that cannot apply here (for example
worker-testwithout a test runner, and say so in the summary) and adjust tool lists to the stack. The council seats are the ones whose removal is never silent: if this project cannot be run and observed at all (no Client path, no run command), write that sentence into the summary. Leave Browser MCP atnoneunless a browser-reachable Client path exists and the owner wants the black-box seat driving it on a separate test profile. - Build the map. Identify the top-level modules and dispatch
drone-scoutper module, up to four in parallel; save each report asmemory/map/<module>.mdwith alast-verifieddate, under ~80 lines. For 1000+ files, map breadth-first: the 8-12 most load-bearing modules now, the rest listed inmemory/memory.mdas unmapped. - Seed memory. Write the
memory/memory.mdpointer index (at most 60 lines): map files, wiki notes to create, verification commands, unmapped territory. - Seed the wiki: 2-4
docs/wiki/notes for the most load-bearing domains or invariants found while mapping (templates/wiki-note.md). - Commit everything as
vulyk: initialize hive for <project>and print a summary: tier examples for this codebase, the plan-build-ship loop, and any pruned agents.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago Changed · +2 lines dba8bfb0cbe9
- 8d ago Changed · +4 lines 6bb636a3ddb0
- 13d ago Changed · +2 lines aa8ddccf137c
- 1mo ago Changed · +2 lines 0e7c71738488
- 1mo ago Changed · +38 lines 35082441de4a
- 1mo ago Changed bfc2cf81e1ee
- 1mo ago Changed e886379e3809
- 1mo ago Changed 93405c9513ea
- 1mo ago Changed e5b9e00edeac
- 2mo ago First seen · 17 lines · 19 tokens per session scan A 61c1796dbb53
vulyk-bootstrap is a command published in the GitHub repository Black-coffe/vulyk (2 stars, last pushed today), licensed MIT. It adds 19 tokens to every session and 1,302 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
debug
Systematic root-cause investigation, then fix with TDD — never proposes a fix before finding the cause; resumable diagnosis + regression test in .orc/ state. Workspace-aware. For a quick one-off look without session state, prefer the bundled /debug.
qa
Pre-PR quality gate — browser-driven QA for web changes with a mandatory evidence packet against a provisioned environment. No QA-passed claim without artifacts. Workspace-aware. For a quick behavioral check without the evidence packet, prefer the bundled /verify or /run.
explain
Build a narrated "what was made" walkthrough from a QA packet — golden-path demo clips (Playwright, overlays off) + animate motion graphics + local kokoro-js voice, assembled by orc-explain; one preview gate before render; delivered via the evidence-publish gates.
test
A command for running a project's automated tests, which are checks that software behaves as expected. It detects common project types and chooses a matching test command.
qa
A quality-assurance testing agent that checks whether software meets its stated acceptance requirements. It tests normal use, edge cases, failures, and regressions, then classifies the problems it finds.
verify
A command that runs a project's main quality checks in sequence: build, type checking, linting, tests, security scanning, and Git status checks. Linting checks code style and common mistakes; Git tracks file changes.