aigis: Instructions file for Claude Code

Aigis — Project Guidelines

Zenn記事管理（Zenn CLI + GitHub連携）

Zenn記事・書籍はZenn CLIとGitHub連携で管理する。Playwrightやブラウザ操作での投稿は行わない。

ディレクトリ構成

• articles/ — Zenn記事（slug形式のファイル名: my-article-slug.md）
• books/ — Zenn書籍
• content/articles/ — 他プラットフォーム向け下書き（Qiita, dev.to等）

記事の作成

npx zenn new:article --slug <slug-name>

slugは英数字・ハイフンで12-50文字。articles/ に自動生成される。

プレビュー

npx zenn preview

http://localhost:8000 でプレビュー確認。

記事の公開

1. frontmatterの published: true に変更
2. git commit & push → Zenn側に自動反映

記事の非公開・下書き

• published: false にしてpush

npm scripts

• npm run zenn:preview — プレビューサーバー起動
• npm run zenn:new:article — 新規記事テンプレート生成
• npm run zenn:new:book — 新規書籍テンプレート生成
• npm run zenn:list:articles — 記事一覧表示

---

Auto-Improvement Loop — Release Note & CHANGELOG Format

IMPORTANT: This section OVERRIDES the "one short user-visible sentence" instruction in the loop's Step 7 and Step 11. Write release notes at the level of detail specified here.

Tag ordering — never tag before merging to master

The release workflow (.github/workflows/release.yml) refuses to publish if the tagged commit is not reachable from origin/master (orphan-tag guard). Always:

1. Land the release: vX.Y.Z commit on master via PR merge first.
2. Only then create and push tag vX.Y.Z against the master commit.

Pushing a tag from a feature branch HEAD will fail the release workflow and waste a version number. If you hit a "tag collision" error, do not bump the version and retry from the same orphan commit — that is the pattern that produced the v1.1.1 → v1.1.2 → v1.1.3 cascade of unreachable releases. Investigate why master doesn't have the release commit instead.

CHANGELOG entries (Step 7)

Each entry under ## [Unreleased] must cover every new DetectionPattern or detector added in the cycle. For each one, write:

- **`rule_id`** (score N, input/output filter) — One sentence: what attack it detects and what
  a blocked example looks like. Include: attack name, source (paper/org/year), and measured
  attack success rate if available.

  **Blocked example:**

[concrete example of the input or output that would be flagged]