Borrowing it
Nothing to install: this file belongs to 5dive-ai/5dive. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/5dive-ai/5dive/main/CLAUDE.mdgit clone --depth 1 https://github.com/5dive-ai/5diveWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/5dive-ai/5dive/claude-md)<a href="https://agentmods.dev/instructions/5dive-ai/5dive/claude-md"><img src="https://agentmods.dev/badge/instructions/5dive-ai/5dive/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/5dive-ai/5dive/claude-md"><img src="https://agentmods.dev/badge/instructions/5dive-ai/5dive/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03378 | $0.03378 |
| Opus 5.5 | $0.01351 | $0.01351 |
| Sonnet 5.5 | $0.00676 | $0.00676 |
| Haiku 4.5 | $0.00338 | $0.00338 |
Grade A, and why
5dive CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 191 lines — stays where its author put it; the contents beside it link to each section on GitHub.
5dive CLI — contributor rules
The test corpus is TIERED and BUDGETED IN WALL-CLOCK (DIVE-2525)
tests/*.sh went 96 → 267 harnesses in 13 days against four harness deletions
ever. A guard is bought once and paid for on every future change, forever,
while its benefit stays fixed — so the ledger tilts by construction and no single
decision to add one is ever wrong on its own merits. See
community/wiki/guards-compound-in-cost-and-nothing-ever-retires-one.md.
| tier | runs | budget |
|---|---|---|
core (the default) |
every PR, both CI environments | 300s per job |
nightly |
full-sweep.yml — 03:17 UTC, dispatch, every push to main (DIVE-2667), and every PR touching build.sh, install.sh or src/** (DIVE-2789) |
1320s per job, corpus split across 3 shards |
-
The PR trigger is ADVISORY. It does not block a merge, and it is deliberately not a required context: it is paths-filtered, so it is absent from ~28% of PRs, and GitHub leaves a required check that never reports pending forever. A red there is a signal to read, not a gate. It also covers ONE axis — a regression in the harness corpus outside the core tier — and not the release path (
release-cut.ymlnever runs on a PR) or the selfcheck probe class, which the corpus never reaches. Do not read "full-sweep runs on branches" as "a tree-level regression can no longer land behind a green PR". -
The nightly tier is not a cheap subset: 25% of the corpus by file count and 81% of it by wall-clock (1210s of 1481s, measured DIVE-2789), because membership is selected on cost. Cost any plan that leans on the core/nightly split in seconds, not in files —
community/wiki/a-demoted-tier-is-not-a-cheap-subset-it-holds-almost-all-the-cost.md. -
A new harness is
coreunless you say otherwise. Nothing to write. -
Over budget, CI FAILS (
exit 4, distinct from a test failure'sexit 1) and names the slowest files in the tier. Past the cap a new guard replaces or merges an existing one — that is the reverse gear, and it is the point. -
A budget red confirms itself first (DIVE-2592). PR #395 went red at 356s and green at 289s on the same commit, no rebase — a 67s swing, all of it in one network-priced harness. So when the sum comes in over, the runner re-times the 3 slowest files and keeps the smaller sample per file: noise is one-sided (contention and a slow remote only add time), so the low sample is the least contaminated estimate, while real growth appears in both samples and survives. Paid only on the red path; a green run re-times nothing.
--confirm-top=0disables it, which can only make the gate stricter — there is no flag that confirms more, and no CI job passes one. -
A budget red says it is a budget red.
exit 4beside "0 failed" reads as systemic to the author and as flake to the next reader; it is neither. The message now states that no test failed, whether the number was confirmed twice, and the smallest set of harnesses that covers the overage — the actionable set, not the top-10 leaderboard. -
Three ways out, in order: merge by subject (hundreds of harness files for one CLI means the unit of organisation is the incident, not the subject — folding two files about one subject reclaims their setup cost and drops no assertion); retire a guard whose class can no longer occur; or demote:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed · +10 lines · +149 tokens per session 15a6a712d59e
- 1mo ago Changed · -6 tokens per session 0fdd6896eecd
- 1mo ago First seen · 181 lines · 3,235 tokens per session scan A 5c5a3f624f02
5dive CLAUDE.md is an instructions file published in the GitHub repository 5dive-ai/5dive (75 stars, last pushed today), licensed MIT. It adds 3,378 tokens to every session, about $0.0135 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.