uzomuzo-oss git-workflow.instructions.md

Instructions for future-architect/uzomuzo-oss, covering git workflow, commit message format, branch protection policy, pull request workflow and branch isolation with git worktree.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/future-architect/uzomuzo-oss/git-workflow
Clone the repo
git clone --depth 1 https://github.com/future-architect/uzomuzo-oss

Made for: GitHub Copilot.

Per session 1,493 This file is loaded in full into every session.
When invoked 1,493 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01493 $0.01493
Opus 5 $0.00746 $0.00746
Sonnet 5 $0.00299 $0.00299
Haiku 4.5 $0.00149 $0.00149

Measured today against content hash f123f5c80b35, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

uzomuzo-oss git-workflow.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/instructions/git-workflow.instructions.md · 151 lines

How it starts

The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Git Workflow

Commit Message Format

<type>: <description>

<optional body>

Types: feat, fix, refactor, docs, test, chore, perf, ci

Branch Protection Policy

NEVER push directly to main. All changes MUST go through a pull request, no matter how small. Create a branch, push it, and open a PR. Ask the user before merging.

Pull Request Workflow

When creating PRs:

  1. Create a feature/fix/chore branch from main
  2. Analyze full commit history (not just latest commit)
  3. Use git diff [base-branch]...HEAD to see all changes
  4. Draft comprehensive PR summary
  5. Include test plan with TODOs
  6. For behavior-changing PRs, include a Runtime verification section with real evidence — see below
  7. Push with -u flag if new branch

Runtime verification — always paste real evidence in the PR body

A behavior-changing PR (new feature, bug fix, or a refactor that alters runtime behavior) must include a "Runtime verification" section in the PR body that pastes the actual commands you ran and the output you observed (logs, file/DB state, exit codes, etc.).

  • Unit tests passing plus static analysis alone does NOT count as "verified". Run the real binary / real environment at least once and observe the headline behavior actually happening.
  • A path that is hard to unit-test because of concrete dependencies can still be observed end-to-end with the real binary plus a small forced scenario (e.g., run the target once against a temporary fixture, seed the prior state / input so the target branch is exercised, then inspect the logs and resulting state).
  • Only when runtime verification is genuinely impossible, state the reason and the residual risk explicitly. Do not defer the headline behavior's verification to a runbook and use that as the primary evidence.

Branch Isolation with Git Worktree

Multiple Claude Code sessions or terminals may run concurrently in the same repository. To prevent branch switching conflicts, always use git worktree for feature branch work.

Read the full file on GitHub · 151 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 151 lines · 1,493 tokens per session scan A f123f5c80b35

Subscribe to this mod's changes

uzomuzo-oss git-workflow.instructions.md is an instructions file published in the GitHub repository future-architect/uzomuzo-oss (32 stars, last pushed yesterday), licensed Apache-2.0. It adds 1,493 tokens to every session, about $0.0075 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.