Borrowing it
Nothing to install: this file belongs to daypunk/LockedIn. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/daypunk/LockedIn/main/CLAUDE.mdgit clone --depth 1 https://github.com/daypunk/LockedInWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/daypunk/lockedin/claude-md)<a href="https://agentmods.dev/instructions/daypunk/lockedin/claude-md"><img src="https://agentmods.dev/badge/instructions/daypunk/lockedin/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/daypunk/lockedin/claude-md"><img src="https://agentmods.dev/badge/instructions/daypunk/lockedin/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02857 | $0.02857 |
| Opus 5.5 | $0.01143 | $0.01143 |
| Sonnet 5.5 | $0.00571 | $0.00571 |
| Haiku 4.5 | $0.00286 | $0.00286 |
Grade B, and why
LockedIn CLAUDE.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- **Never auto-modify `~/.claude/settings.json`** outside the How it starts
The opening of the file, as written. The whole thing — 209 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
Project-level instructions, loaded automatically by Claude Code when working in this repo. Read this first if you are picking up the project in a fresh session. The file is designed to be self-contained enough that you can resume without prior conversation context.
What this is
LockedIn is a Claude Code plugin that organizes a user's experience
(career, meetings, projects, learning, decisions) into a typed
markdown ontology they own at ~/Documents/LockedIn/, then renders
text artifacts (English resume, Korean cover letter) from the same
vault. Two stores by design.
- Store A is the user's input, structured into the vault under
~/Documents/LockedIn/experience/. - Store B is
~/Documents/LockedIn/outputs/, the artifacts rendered from A.
This repo holds the engine. It contains the plugin manifests, skill
files, CLI helpers, and tests. Users' actual data lives at
~/Documents/LockedIn/, never in this repo.
Tagline: Personal experience knowledge graph for Claude Code. Zero
learning curve. Distribution is the Claude Code plugin marketplace
(/plugin marketplace add daypunk/LockedIn).
The lowercase identifier lockedin is used everywhere a machine
parses it (Python package, plugin name, slash command, env vars). The
brand display LockedIn is used in user-facing copy (README headers,
descriptions, sentences in prose).
Current state
| Layer | State |
|---|---|
| Plugin marketplace | manifests at .claude-plugin/marketplace.json and plugins/lockedin/.claude-plugin/plugin.json |
| One-time setup wizard | /lockedin:setup at plugins/lockedin/commands/setup.md (HUD wiring, Q&A language, vault path) |
| Ontology | v3. 15 entity types, 15 edge predicates, JSON Resume / Schema.org / FOAF aligned. Per-type field contracts plus aliases (person, company) and provenance (every type). Edge domain and range enforced by lockedin validate. See lockedin/ontology/schema.py. |
| Render skills | lockedin (main), lockedin-render-jaso (calibrated, 5 pass + 5 fail fixtures), lockedin-render-resume-en (calibrated, 3 personas). All under plugins/lockedin/skills/. |
| HUD | lockedin X.Y.Z │ 5h:NN% · wk:NN% │ experience: Nn · Me. Pulls real utilization from Anthropic OAuth API, falls back to vault-only display when OAuth is unavailable. Same script in two places (plugins/lockedin/scripts/hud.py standalone, lockedin/commands/hud.py package). The standalone defers to the package when available. |
| Deterministic CLI | install (with --setup-hud, --remove-hud, lifecycle), init --fixture FILE, ingest --dry-run, validate, migrate, experience, doctor, template, hud. |
| Skill-only commands | init (interactive), ingest (smart), render jaso/resume, query. Typed in plain shell, the CLI prints a redirect (exit 3) and points at Claude Code. |
| OSS infrastructure | CONTRIBUTING.md, CODE_OF_CONDUCT.md (Contributor Covenant 2.1), .github/ISSUE_TEMPLATE/{bug_report, feature_request, korean_reviewer_onboarding, config}.yml. |
| Tests | 200+ passing across import, ontology, storage round-trip, install lifecycle, doctor, validate v3, init from fixture, template, ingest dry-run, ingest format parsers (pdf/docx/markdown/text), hud, interview resumability, render-interview and render-ideas calibration, README-promise lint. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 209 lines · 2,857 tokens per session scan B 703ab352fa70
LockedIn CLAUDE.md is an instructions file published in the GitHub repository daypunk/LockedIn (127 stars, last pushed 5mo ago), licensed MIT. It adds 2,857 tokens to every session, about $0.0114 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
vscode model-prompts.instructions.md
Model-specific prompt authoring and registry guidelines.