What is a2ui CLAUDE.md?

Project instructions for an a2ui catalogue that uses project.yaml to declare deployments and processes, with ops.py carrying them out.

Use them when changing schemas, prompts, renderer code, deployments, or commits in the a2ui catalogue.

They prevent improvised command sequences and require changes to follow declared, verifiable release procedures.

How a2uicatalog/a2ui configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to a2uicatalog/a2ui. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/a2uicatalog/a2ui/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/a2uicatalog/a2ui

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/a2uicatalog/a2ui/claude-md/github.svg)](https://agentmods.dev/instructions/a2uicatalog/a2ui/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/a2uicatalog/a2ui/claude-md"><img src="https://agentmods.dev/badge/instructions/a2uicatalog/a2ui/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/a2uicatalog/a2ui/claude-md"><img src="https://agentmods.dev/badge/instructions/a2uicatalog/a2ui/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 1,990 This file is loaded in full into every session.

When invoked 1,990 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.01990	$0.01990
Opus 5.5	$0.00796	$0.00796
Sonnet 5.5	$0.00398	$0.00398
Haiku 4.5	$0.00199	$0.00199

Measured 1mo ago against content hash 8725ef35dcd7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

a2ui CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 137 lines

How it starts

The opening of the file, as written. The whole thing — 137 lines — stays where its author put it; the contents beside it link to each section on GitHub.

a2ui-catalogue — Working Rules

Declarative-first repo. State, policy, and processes are declared in project.yaml; ops/ops.py executes them. Read project.yaml before operating — it is the inventory (deployments, script IDs, properties, staging policy, declared debt). Never carry identifiers in conversation memory when the manifest declares them.

Operations discipline

Every operation goes through a declared process: python3 ops/ops.py list → python3 ops/ops.py run <process>. If the operation you need isn't declared, DECLARE IT in project.yaml processes: first, then run it. Improvised command sequences (raw clasp push/clasp deploy, ad-hoc regeneration chains) are the failure mode this system exists to prevent.
After editing atoms/schema.yaml → ops.py run atom-change.
After editing spec/ or prompt contracts → ops.py run prompt-update (it bakes in the gemini_handoff cache bump — do not skip it).
Renderer code changes → ops.py run renderer-release (deploys in place to the public deployment from the manifest inventory).
Commits: python3 ops/ops.py commit "<message>" — stamps per the sync-window time mapping (09:00-11:59→08:00, 14:00-17:59→13:30, otherwise 13:00, Europe/Paris). Push: ops.py run repo-publish.
Every run logs to ops/log.jsonl (local tier) — check it before re-diagnosing something a previous run already recorded.

Publication boundaries (hard rules)

Nothing new is published to a2uicatalog.ai or any public surface without explicit per-artifact opt-in from Curtis. Publication is declared in project.yaml (policy.published, published_prompts) and enforced by tests/test_project_manifest.py.
Atoms carry stage: preview | stable (stable = default). Preview atoms are repo-only; all publication pipelines filter on the field (tests/test_staging.py enforces). Promotion = delete the stage line
- ops.py run atom-change. New dev-first atoms START as preview.
Private tier (ops/, **/Code.private.gs, .clasp.json) must never be tracked — the manifest audit fails the build if it is.
Secrets live in Script Properties only (key names declared in project.yaml); never in code, payloads, or tracked files.

Read the full file on GitHub · 137 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago Changed · +9 lines · +193 tokens per session 8725ef35dcd7
1mo ago Changed · +12 lines · +209 tokens per session ffb58a7e6dba
2mo ago First seen · 116 lines · 1,588 tokens per session scan A 8cec04524e38

Subscribe to this mod's changes

a2ui CLAUDE.md is an instructions file published in the GitHub repository a2uicatalog/a2ui (6 stars, last pushed 5d ago), licensed MIT. It adds 1,990 tokens to every session, about $0.0080 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

a2ui agent agent-skills ai-agents apps-script claude

a2ui CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
a2ui CLAUDE.mda2uicatalog/a2ui	Instructions file	6	5d ago	MIT	A	1,990	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	today	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

a2ui: Instructions file for Claude Code