Borrowing it
Nothing to install: this file belongs to PaulRBerg/dot-claude. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/PaulRBerg/dot-claude/main/CLAUDE.mdgit clone --depth 1 https://github.com/PaulRBerg/dot-claudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/paulrberg/dot-claude/claude-md)<a href="https://agentmods.dev/instructions/paulrberg/dot-claude/claude-md"><img src="https://agentmods.dev/badge/instructions/paulrberg/dot-claude/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.02797 | $0.02797 |
| Opus 5 | $0.01399 | $0.01399 |
| Sonnet 5 | $0.00559 | $0.00559 |
| Haiku 4.5 | $0.00280 | $0.00280 |
Grade A, and why
dot-claude CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 181 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Global Instructions
Prefer simple, conventional, readable designs. Introduce abstractions or patterns only when they reduce overall complexity.
Communication
- Lead with the conclusion. Include the evidence needed for the decision, material caveats, and next action. Trim introductions, repetition, and optional background first.
- Treat me as an expert — skip the basics.
- Challenge assumptions; surface flaws and materially better alternatives immediately, but do not expand implementation scope without authorization.
- When facts are discoverable, investigate rather than confirm my beliefs. Otherwise state what is unknown and take the smallest safe next step.
- Give brief progress updates during sustained work; make the final response stand alone with the outcome, verification, and any remaining blocker.
- Do not report that files in git-ignored directories—for example,
.ai/, which is globally git-ignored by design—were not committed. I already know this; omit it from summaries, caveats, risks, and commit reports unless it materially blocks the task.
Authority
- Require confirmation for destructive actions or purchases.
- Explicit user instructions take precedence over skill guidelines. If a skill causes a pause, identify the exact instruction and explain why existing authorization does not cover the next action.
- When I describe a problem or ask a question without requesting a change, the deliverable is your assessment: report findings and stop; don't apply fixes until asked.
- Otherwise bias to action: proceed without asking on reversible actions that follow from the request, and don't end a turn on a question or promise you could resolve yourself. Pause only for the cases above or for input only I can provide.
Agents
- When I say "agent", I mean any coding agent CLI I run (e.g. Claude Code, Codex CLI, or omp), not a human.
- I usually run multiple agents in parallel in the same working tree on
main— no PRs, no separate worktrees. Treat the working tree, index, and remote as shared mutable state that can change at any point while you work. - Treat changes unrelated to your task as another agent's work: ignore them, don't let them block or redirect you, and don't report them to me.
- I may also commit and push while you work. Don't be surprised by commits you didn't author, and don't revert or amend them unless I ask.
- Stage and commit only files you edited this session. Never run tree-wide git commands that sweep other agents'
uncommitted work:
git add -A,git commit -a,git stash,git checkout ./git restore .,git reset --hard,git clean. - Stay on the current branch. Don't switch, rebase, merge, or pull without asking — those assume a clean tree, and autostash variants would stash other agents' work.
- On a git
index.lockerror, another agent is mid-operation: wait a moment and retry; never delete the lock file. - If an edit fails because a file changed after you read it, re-read and reapply on the new content — the file may now contain another agent's work. Never force-overwrite a whole file to win the race.
- Never act on a shared stash by ordinal (
stash@{0}) — another agent's operation can shift it between your read and your act. Resolve it to its object id immediately before use and re-verify the id still matches right before acting. - Attribute failures before debugging them: rule out your own side effects (formatters, hooks, codegen you just ran)
before blaming another agent; for committed changes,
Agent-Session:trailers ingit logidentify the authoring session. If a repo-wide check still fails only in files you didn't touch, confirm your own files pass and move on, or prove it in a temporarygit worktreeat clean HEAD running the scoped checks there — valid only when your change doesn't build on another agent's uncommitted files, and only for checks that run from a bare checkout or with dependencies (node_modules, venvs) linked in, since those don't follow the worktree. - Run formatters, linters, and codegen scoped to the files you changed, not repo-wide.
- Before generators or broad scripts, snapshot
git status --short; afterward inspect only the paths you expected to change. Repo-wide generators fold other agents' (or the user's) uncommitted inputs into your generated output. Treat generated hunks derived from inputs you don't own as their work: exclude them from staging and NEVER reverse-patch them out. - Key plans and mappings to content identifiers (paths, names, stable tuples), never to line numbers or ordinals — concurrent commits invalidate positional references.
- Commit each coherent unit of work as soon as it passes validation — many small commits, never one batch at the end. Uncommitted work blocks other agents from starting conflicting tasks, so return the tree to clean quickly.
- Use
$commitfor agent-composed commits and callai-commitdirectly only for already-composed fixed messages; follow the$commitpush workflow after committing. Automatic pushing is authorized for repositories whose GitHub owner isPaulRBergand for any repository under~/work/,~/projects/,~/.claude,~/.codex,~/.agents, or~/.local/share/chezmoi.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +7 lines · +110 tokens per session 8e3a6b0784ff
- 8d ago First seen · 174 lines · 2,687 tokens per session scan A 15a40eda1e49
dot-claude CLAUDE.md is an instructions file published in the GitHub repository PaulRBerg/dot-claude (82 stars, last pushed 3d ago), licensed MIT. It adds 2,797 tokens to every session, about $0.0140 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.