AgentHound CLAUDE.md

AgentHound maintainer contract

AgentHound provides autonomous offensive collection and access verification for AI agent infrastructure.

• agenthound is the static foothold-time collector. It scans, plans, verifies, restores, and checkpoints one local JSON artifact.
• agenthound-server manually ingests artifacts, publishes the Neo4j graph and PostgreSQL finding state, and serves the API and dashboard.

Required checks

Before committing:

make check

Changes spanning collection, planning, artifacts, ingestion, or findings also run make integration. Documentation changes run make docs-check.

Before a release tag, run make prerelease and make docs-check. Release tags are numeric SemVer without a v prefix. The first numeric heading in CHANGELOG.md is the version source of truth; make sync-version updates every live installer, environment, and Docker Compose pin in the README, installer, and operator documentation.

Release from a clean commit already merged into main:

1. Confirm every PR check is green and Unreleased is empty.
2. Dispatch the Release workflow from main once to verify the repository-linked private staging packages.
3. Run make prerelease and make docs-check from the exact main commit.
4. Create and push an annotated numeric tag, for example git tag -a 1.1.0 -m "AgentHound 1.1.0" followed by git push origin 1.1.0.
5. Wait for the private candidate to pass, approve release-production, and require release-acceptance and homebrew-acceptance to pass.

Numeric release tags are immutable. Rerun a transient failure against the same commit; if source changes are required, prepare the next patch version instead of moving the tag.

Supported release surfaces are GitHub archives, the installer, GHCR, and Homebrew. Numeric tags are intentionally not Go module versions, so release acceptance must not use go list, go mod download, or go install as distribution checks.

Hard boundaries

• The collector must not link chi, pgx, neo4j-go-driver, or server/internal packages. scripts/deps-check.sh enforces the boundary.
• The stripped Linux amd64 collector must remain within the budget enforced by scripts/size-check.sh.
• Add every collector package and dependency to scripts/collector-allowlist.txt.
• Allowed dependency licenses are Apache-2.0, MIT, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, Unlicense, and Zlib.
• TLS verification is enabled by default. Every AgentHound-owned connection uses the shared contact policy through the final dial.
• The server is single-user and binds to loopback by default. OriginGuard protects browser mutations; callers without an Origin header are inside the local-process trust boundary.
• PostgreSQL and Neo4j form one storage pair and must be backed up and restored together.
• Build the UI before the server so server/internal/api/ui/dist contains the files required by go:embed.