done-when-pipeline

A collection of tools that turns plain-language requirements into checkable completion rules and then reviews an implementation against them. It includes separate tools for writing requirements, generating tests, reviewing code, and checking release readiness.

In plain words
What is it for?
Use it to create acceptance specifications, generate layered tests, inspect code changes, run tests, and assess whether a feature meets its stated requirements.
Why use it?
It replaces vague claims that work is finished with requirements and checks that can be independently verified.

Plugin for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Claude Code
/plugin marketplace add XRenSiu/claude-code-forge
agentmods
npx agentmods add plugins/xrensiu/claude-code-forge/done-when-pipeline
Clone the repo
git clone --depth 1 https://github.com/XRenSiu/claude-code-forge

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade A, and why

done-when-pipeline scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/done-when-pipeline/.claude-plugin/plugin.json · 36 lines

How it starts

The opening of the file, as written. The whole thing — 36 lines — stays where its author put it; the contents beside it link to each section on GitHub.

{
  "name": "done-when-pipeline",
  "description": "Done_When Pipeline v1.0 — turn fuzzy natural-language requirements into machine-verifiable completion contracts, then run a multi-agent acceptance loop against an implementation. Nine skills in a two-layer topology (per HTML v2 architecture). Layer 1: TWO contract producers + SIX independently-invocable review skills — `/acceptance-spec` (NL → EARS spec + done_when.yaml with existence/behavior/rules schema + spec-robustness.md anti-gaming companion), `/test-suite-generator` (EARS → 5-layer test pyramid: existence/unit/integration/e2e/mutation; the v0.x fitness rubric layer was retired per HTML v2 §3.5 fitness-check dissolution), and six review skills each user-invocable on their own: `/code-reviewer` (diff → findings, focus-driven: security/logic/perf/style/all; Detective Loop not flowchart; 5-finding cap; cross-vendor adversarial mode), `/qa-reviewer` (actually runs tests, classifies maintenance-vs-genuine failures, emits go/no-go), `/pm-reviewer` (Agent-as-Judge: LOCATE/READ/RETRIEVE atoms; requirements normalized from EARS/Jira/Linear/PRD/issue; 4-state TicketCompliance verdict where requires_human_verification is the formal home for genuinely-unautomatable evaluation), `/spec-drift-detector` (code archaeologist: detects spec/code factual divergence without judging which is correct; git_blame traces commit_introducing_drift; 3 divergence types: timing/behavior/contract), `/spec-gaming-detector` (assumes author is gaming; 6 RHD patterns absolute + diff mode; outputs spec_robustness_gaps for contract hardening), `/meta-judge` (synthesizes findings via 4 actions: dedupe/weight/arbitrate/classify; HARD WALL — does NOT re-review code; pluggable rules source). Layer 2: `/acceptance-fleet` is pure orchestrator — dispatches the 6 review skills in parallel against an impl, hands findings to /meta-judge, decodes verdict into four-state ratchet (DONE/FIX/SPEC_DRIFT/GAMING_RISK), persists every iteration to ratchet-log/iter

Read the full file on GitHub · 36 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 36 lines scan A 40d84ffa608c

Subscribe to this mod's changes

done-when-pipeline is a plugin published in the GitHub repository XRenSiu/claude-code-forge (2 stars, last pushed 1mo ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.