Borrowing it
Nothing to install: this file belongs to Black-coffe/vulyk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Black-coffe/vulyk/main/.claude/commands/vulyk-ship.mdgit clone --depth 1 https://github.com/Black-coffe/vulykWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/black-coffe/vulyk/vulyk-ship)<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-ship"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-ship/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/black-coffe/vulyk/vulyk-ship"><img src="https://agentmods.dev/badge/commands/black-coffe/vulyk/vulyk-ship.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.01159 |
| Opus 5.5 | $0.00013 | $0.00464 |
| Sonnet 5.5 | $0.00007 | $0.00232 |
| Haiku 4.5 | $0.00003 | $0.00116 |
Grade A, and why
vulyk-ship scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ship: "$ARGUMENTS" (default: the newest spec under docs/specs/ whose plan.md carries a GREEN
**Council:** row or a **Checked:** ACCEPTED line).
- Gate.
bash scripts/ship-check.sh docs/specs/<slug>and show its output.NOT READYis a refusal: name the open stage and stop. Expect two kinds: a councilREDorESCALATE(repair, or## Needs a human, is unresolved), andSTALE(a repair round or a hand edit moved the code after the council judged it; a hand fix reopens a round that re-reviews only the new diff). Both are cured by going back, never by shipping around them. A newer**Checked:**line is the owner's override in either direction (scripts/human-check.sh), and the owner may also override a plainNOT READY: it is their release, but say so out loud and quote the override into the--recordnote below. A stage-03 merge conflict (the line names the files) is not overridden: stop and offer the repair, merging the default branch into the spec branch and opening a new council round, because the resolution is code no GREEN round has seen. Run it only on the owner's yes. - History. The spec branch (
**Branch:**) holds one commit per story; do not squash them, they are the rollback points and the review units. Work out the version from the Profile's Commit convention (a semver bump sized to the change). If a story on this branch already wroteVERSIONand the topCHANGELOG.mdentry for that version, there is nothing to bump. Otherwise add one commit on the branch with the version bump and the CHANGELOG entry. This is release paperwork: Law 5 does not apply, andVERSIONandCHANGELOG.mdare paperwork to the cycle, so this commit does not stale a GREEN round. Then merge into the default branch the way the Profile's Release / deploy row says; a local merge is reversible and yours to run. A local merge: switch to the default branch only whengit status --porcelainprints nothing, thengit merge --no-ff <branch>. If it fails, rungit merge --abort, switch back to the spec branch, tell the owner what git printed, and stop. After a clean merge, delete the spec branch withgit branch -d <branch>, never-D; if-drefuses, quote what it printed and leave the branch. - Publish: print, then stop. Under a
to publish, run:heading, print the publish step exactly as the Release / deploy row names it, with the version. When that step pushes and tags and the repo has CI (.github/workflows/), print it in this order: push the release commit, wait for CI on that commit to be green, then tag and push the tag; a red run means no tag. Do not run it, ask about it, or check back on it./vulyk-status'smerged locally, not pushed: <n>line is how anyone learns whether it ran. - Record.
bash scripts/ship-check.sh --record docs/specs/<slug> <version> "merged to <default branch>, publish pending", then commit it (vulyk(<slug>): shipped <version>, orchore(vulyk-<slug>): ...under a conventional Commit convention). The spec is closed on disk. - Next circle. Dispatch only what has work to do, in one message:
drone-docs, only when the merged range touches a module listed inmemory/memory.md's map. Give it the changed paths (git diff --name-only <base>..<merge>) and the map files that cover them, not the diff itself.librarianfor the ADR harvest, only when plan.md's## Plan deltasor## Descopedhas entries. Then hand the owner, verbatim, the draft of the next brief: everyUNASKED:line from the newest round's seat files underdocs/specs/<slug>/council/round-<N>/(skip "none"), every minor in that round'sreview.md, every[unanchored]critical or major finding in any round'sreview.md(and the findings of any BLOCK thatjudgerecorded as PASS with the notereview BLOCK unanchored), every## Descopedentry, and plan.md's## Needs a humansection when it has one. Do not open a spec for them; what the next circle is belongs to the owner.
- Close the session. Recommend
/vulyk-handoffand/clear: everything this spec needed is in git.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +3 lines 11f57125c9a8
- 10d ago Changed · +7 lines a1e4698410d8
- 13d ago Changed · +1 lines 74c668e6493f
- 1mo ago Changed · +23 lines 582d708951b3
- 1mo ago Changed 3c2e832eecf0
- 1mo ago Changed · +7 tokens per session 27f575cf4fda
- 1mo ago First seen · 19 lines · 26 tokens per session scan A d777e8bcd137
vulyk-ship is a command published in the GitHub repository Black-coffe/vulyk (2 stars, last pushed today), licensed MIT. It adds 33 tokens to every session and 1,159 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other commands, from other repositories
release
Release guide version (CHANGELOG + VERSION + README + landing sync + commit + push).
update-infos-release
Update Claude Code releases tracking (guide + landing + version bump).
changelog
View recent CHANGELOG entries.
release
Cut a semver release for the current repo — bump computed from conventional commits, evidence preview, tag + GitHub release.
stack-pr
Break a too-big branch into a stack of smaller chained PRs — commit-based by default (one PR per Conventional Commit), or --smart for messy branches. Detects gh-stack, falls back to plain gh. Workspace-aware.
ship
Finalize and open the PR — verifies tests, presents commit/branch/PR options, executes the chosen path, with a soft LOC size-budget gate. Last command before review; adds a Jira Resolves trailer when bound. Workspace-aware.