implement

A command that carries out requested changes in a software repository and keeps checking them until the project's own tests and other checks pass. A repository is the project files and their version history.

In plain words
What is it for?
Use it to implement planned work, fix review findings, resolve CI failures, reproduce bugs, run checks, and finish the change with a recorded report.
Why use it?
It provides a continuing implementation workflow for plans, review findings, or failing checks instead of stopping after one edit. It also compares the request with the actual code before changing it.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/coleam00/archon/implement
Clone the repo
git clone --depth 1 https://github.com/coleam00/Archon
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,550 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.01550
Opus 5 $0.00000 $0.00775
Sonnet 5 $0.00000 $0.00310
Haiku 4.5 $0.00000 $0.00155

Measured yesterday against content hash 9d7b21b16764, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

implement scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.archon/workflows/sdlc/implement/commands/implement.md · 63 lines

How it starts

The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Implement

Implement the requested work in this repository and keep going until it is complete and the project's own checks pass. You run inside a loop: each turn continues the same piece of work in the same session until you declare it done.

The work

$INPUTS.work

If the block above is empty, the work is the message that started this run:

$ARGUMENTS

Either way, it may be:

  • a plan — a path to a plan file (read it completely) or an inline plan; execute its tasks in dependency order
  • review findings — fix every Critical and Important finding; if you can prove a finding invalid, record that proof in your report instead of "fixing" it
  • a CI failure — reproduce it, fix the cause, prove the fix
  • a description — a plain statement of what to build or change

How to work

  1. Make the project runnable first: if dependencies are missing, install them with the project's own package manager in locked mode. Never update a lockfile.
  2. Ground yourself before editing: read the files the work names, plus their direct callers and tests. Live code beats the work item's assumptions — when they conflict, follow the code and record the deviation in your report.
  3. Reproduce bugs before fixing them whenever reasonably possible; otherwise record the concrete evidence you fixed against.
  4. Prefer the simplest change that solves the actual problem. If the path grows complicated, stop and reconsider the approach instead of pushing through.
  5. Write focused tests that prove the changed behavior — for a bug, a regression test that fails before the fix and passes after, when practical. No coverage theater.
  6. Validate with the project's own checks: discover them from the repository itself (package scripts, task runners, CI config, contributor docs) and run what applies — types, lint, tests, build. Never invent a generic command the project doesn't define.
  7. Commit as you go: one commit per coherent outcome, staged by name (never git add -A), message written the way a human explains an outcome. No AI attribution, no generated-by footers. Never commit scratch files or anything under $ARTIFACTS_DIR.
  8. Keep comments and documentation truthful when behavior changes.
  9. Every comment must justify its existence. If a comment is needed to describe what the code does, make the code better instead — clearer names, smaller functions. Comment only what code cannot say: a non-obvious constraint, an external contract, a deliberate trade-off — written in the codebase's own idiom. Never comment to narrate a line, justify the change, or answer a reviewer; that belongs in the commit message or the report.
  10. Add nothing speculative. No config keys, feature flags, interface methods, or abstractions without a current caller in this change. Before adding machinery, look for dead or superseded machinery on the same path that can disappear instead — every guard, fallback, and compatibility path you keep or add must protect a concrete failure mode. Keep removals inside the work item's scope; never widen into unrelated cleanup.
  11. Enforce invariants with the project's own strongest tools. Where the project is typed, express meaningful constraints in the type system rather than in comments or runtime convention, and avoid escape hatches such as any or unchecked casts when a sound type is practical.
  12. When the change touches agent or LLM behavior, let the model interpret and the code validate: never reconstruct intent from free prose with regexes or keyword matching — validate resolved arguments, permissions, and invariants at the tool boundary instead.

Read the full file on GitHub · 63 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 63 lines · 0 tokens per session scan A 9d7b21b16764

Subscribe to this mod's changes

implement is a command published in the GitHub repository coleam00/Archon (23,313 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,550 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.