forge CLAUDE.md

Repository instructions for Forge, a local-first tool in public beta. They describe the project's documentation structure, status, development rules, and expectations for visible breaking changes.

In plain words
What is it for?
Use them when building, testing, running, or changing Forge, including updates to relevant documentation and release notes.
Why use it?
They give contributors the project context and prevent behavior changes from being silently undocumented or inconsistent with the beta release process.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/forgeailab/forge/claude-md
Clone the repo
git clone --depth 1 https://github.com/ForgeAILab/forge
Per session 2,122 This file is loaded in full into every session.
When invoked 2,122 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02122 $0.02122
Opus 5 $0.01061 $0.01061
Sonnet 5 $0.00424 $0.00424
Haiku 4.5 $0.00212 $0.00212

Measured 2d ago against content hash 2733912aee2d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

forge CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 123 lines

How it starts

The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

The user-facing entry point is README.md. Deeper material is split across docs/:

When you change behavior, update the relevant docs/ file in the same change. Treat README as a launch landing page — keep it short and link out.

Project status: Public Beta (0.1.x)

Forge is in public beta. The local-first single-user product is shipping to real users, but we are still pre-1.0 and pre-stable.

What that means for changes you make:

  • Breaking changes are allowed, but they must be visible: update CHANGELOG.md under the Unreleased section with a ### Breaking entry, and bump the workspace version when cutting a release. Silent breakage is no longer acceptable now that users exist.
  • No backward-compat shims, no _v2 suffixes, no deprecated aliases. When something changes, update all call sites and delete the old code. Express the break in the changelog, not in the source.
  • No feature flags for rollout safety. Ship the new behavior directly.
  • Database migrations must preserve user data unless the user explicitly opts in to a destructive migration (e.g. a hard schema reset for the dev ./test data dir). Add a new numbered migration; do not edit historical ones.
  • Public surfaces — REST endpoints, MCP tool names, forge-ctl flag names, event payload shapes, JSONL log schema, on-disk file layout — are the ones to be most deliberate about. Internal Rust APIs and crate boundaries can still move freely.
  • When a spec/design changes, rewrite the affected code to match. Don't layer the new design on top of the old one.

Read the full file on GitHub · 123 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 123 lines · 2,122 tokens per session scan A 2733912aee2d

Subscribe to this mod's changes

forge CLAUDE.md is an instructions file published in the GitHub repository ForgeAILab/forge (54 stars, last pushed 16d ago), licensed MIT. It adds 2,122 tokens to every session, about $0.0106 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.