agentmods.dev

ai-sdlc: Instructions file for Claude Code

CLAUDE.md

ai-sdlc CLAUDE.md is an instructions file for Claude Code from ai-sdlc-framework/ai-sdlc. It costs 3,078 tokens per session, scanned A, original, Apache-2.0.

Project instructions for AI-SDLC, a framework that automates and governs software development workflows across branches, reviews, and pipeline stages.

In plain words
What is it for?
Use them when working on AI-SDLC branches, rebasing pull requests, resolving workflow-related conflicts, or changing its plugin, pipeline, orchestrator, or governance code.
Why use it?
They define the repository’s workflow for keeping feature branches current and preserving a linear Git history. They also describe how its tools handle rebasing, conflicts, attestations, and verification.

Instructions file for Claude Code

Written for Claude Code: PreToolUse hook event. Also seen: mentions subagents; names the AskUserQuestion tool; mentions Claude Code.

This is ai-sdlc-framework/ai-sdlc's own configuration. It tells Claude Code how to work on ai-sdlc itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything ai-sdlc configures →

not rated 421repo +6 changed yesterday A scan 3,078 tokens original Apache-2.0
View source ↗ ai-sdlc-framework/ai-sdlc ai-sdlc.io
Reuse

Borrowing it

Nothing to install: this file belongs to ai-sdlc-framework/ai-sdlc. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/ai-sdlc-framework/ai-sdlc/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/ai-sdlc-framework/ai-sdlc

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ai-sdlc CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/ai-sdlc-framework/ai-sdlc/claude-md/github.svg)](https://agentmods.dev/instructions/ai-sdlc-framework/ai-sdlc/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/ai-sdlc-framework/ai-sdlc/claude-md"><img src="https://agentmods.dev/badge/instructions/ai-sdlc-framework/ai-sdlc/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ai-sdlc CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/ai-sdlc-framework/ai-sdlc/claude-md"><img src="https://agentmods.dev/badge/instructions/ai-sdlc-framework/ai-sdlc/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,078 This file is loaded in full into every session.
When invoked 3,078 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03078 $0.03078
Opus 5.5 $0.01231 $0.01231
Sonnet 5.5 $0.00616 $0.00616
Haiku 4.5 $0.00308 $0.00308

Measured yesterday against content hash 54ac6c7af97c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ai-sdlc CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 91 lines

How it starts

The opening of the file, as written. The whole thing — 91 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AI-SDLC Project Instructions

ai-sdlc-plugin/ = Claude Code plugin, pipeline-cli/ = Step 0-13 runtime, orchestrator/ = CLI + agent runner.

Only rules that change behaviour in every session live here (budget 15k characters, scripts/check-claude-md-size.test.mjs). Reference material is in docs/operations/.

Git Flow

  • Always rebase feature branches onto main; never merge main in. Keep history linear (no update-branch merge).
  • Update: git fetch origin && git rebase origin/main, then git push --force-with-lease origin HEAD:refs/heads/<branch>. Modes (DEC-0264): lease (this repo) = any non-protected branch, any session; leaseOnOwnBranch (adopter default, AISDLC-710) = the task's own worktree only; never = no lease push. main/master/protected stay refused.
  • /ai-sdlc rebase <pr> automates mechanical conflicts and escalates semantic ones. Never force-push main/master.
  • CHANGELOG.md is owned by release-please: never edit it on a feature branch; remove such a diff on rebase conflict (AISDLC-401).

Branches, commits, PRs

  • Branches: feat/<desc>, fix/<desc>, or ai-sdlc/issue-<n>. Conventional commits (feat:, fix:, test:, docs:, chore:, style:) with Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>.
  • Merging follows governance.allowMerge in .ai-sdlc/agent-role.yaml; when it permits merging, the only path is cli-merge-if-eligible; never run the raw merge command. The release-please PR lands only via cli-merge-if-eligible --source-kind release on explicit operator instruction (see Releases).
  • Never close issues or PRs, except a CLI-opened PR byte-identical on main via a landed PR (DEC-0266). Dismiss stale reviews only with a documented reason.
  • auto-enable-auto-merge.yml sets --auto --squash (no merge queue); --auto is NOT merging. PRs merge once ai-sdlc/pr-ready passes (docs/operations/merge-without-queue.md).

Testing

Read the full file on GitHub · 91 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed · -21 lines · -890 tokens per session 54ac6c7af97c
  2. 3d ago Changed · +15 tokens per session cc534b3b3c7b
  3. 4d ago Changed · +13 tokens per session 110ed488cad5
  4. 9d ago Changed · +12 tokens per session 6a5a7705afbc
  5. 10d ago Changed · +7 tokens per session 53b8913d2261
  6. 11d ago Changed · -386 lines · -13,065 tokens per session 67beb738c240
  7. 13d ago Changed · -5 lines · +77 tokens per session 72635df03aea
  8. 14d ago Changed · +12 lines · +532 tokens per session db0dfe6c4607
  9. 15d ago Changed · +4 lines · +251 tokens per session 86f0a7970834
  10. 17d ago First seen · 487 lines · 16,126 tokens per session scan A 913f5ce32b76

Subscribe to this mod's changes

ai-sdlc CLAUDE.md is an instructions file published in the GitHub repository ai-sdlc-framework/ai-sdlc (421 stars, last pushed today), licensed Apache-2.0. It adds 3,078 tokens to every session, about $0.0123 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

CI and CDCommitsDevOps and cloudGit and workflowGoai-agentsai-coding-agentsai-governancedeveloper-tools
Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,581 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens

deepseek-harness AGENTS.md

AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.

deepseek-ai/deepseek-harness · 4,261 tokens