The factory: a Claude Code plugin for governed, spec-driven delivery — frozen acceptance contracts and a merge floor that refuses a red seam.
Skill Claude CodeCodex
Skill "cicd-gitops-pipeline" from lukasrepublic/agentic-foundry, covering when to trigger, the pipeline shape (six parts, one contract), both build origins, one downstream contract and anti-patterns.
Skill Claude CodeCodex
/ branch ENI) so the data tier admits ONLY the dedicated pod SG.
Skill Claude CodeCodex
No artifact. This skill emits prescriptive guidance inline. The implementing agent writes the chart and values files in the assigned IaC worktree.
Skill Claude CodeCodex
Skill "legacy-app-containerize" from lukasrepublic/agentic-foundry, covering when to trigger and anti-patterns.
Skill Claude CodeCodex
No artifact. This skill emits prescriptive guidance inline. The implementing agent writes the OpenTofu/Terraform files in the assigned IaC worktree.
Skill Claude CodeCodex
Skill "origin-mtls-wiring" from lukasrepublic/agentic-foundry, covering when to trigger, the load-bearing rollout ordering (and its rollback), the dns trap (masquerades as an mtls failure), custody extras (before a signer/custody service is public) and anti-patterns.
Skill Claude CodeCodex
Skill "tenant-network-isolation" from lukasrepublic/agentic-foundry, covering when to trigger, the verification recipe — prove the deny, don't assume it, cluster prerequisites (the fragment is inert without them) and anti-patterns.
Skill Claude CodeCodex
Additionally, namespace test-generated data to prevent bleed between parallel runs: prefix email addresses with the test-file slug, prefix IP addresses with a test-run ID, and prefix queue job IDs where applicable.
Skill Claude CodeCodex
Skill "bullmq-jobs" from lukasrepublic/agentic-foundry, covering when to trigger, procedure, inputs, outputs and quality bar.
Skill Claude CodeCodex
Default command for population on a fresh worktree or after a git pull that includes a lockfile change: npm ci — lockfile-respecting, deterministic install. Run from the project root. This is the form CI workflows and Dockerfiles use. The bare npm install form is acceptable only when the lockfile is known-stale or for…
Skill Claude CodeCodex
Default command for population on a fresh worktree or after a git pull that includes a lockfile change: npm ci — lockfile-respecting, deterministic install. Run from the project root. This is the form CI workflows and Dockerfiles use. The bare npm install form is acceptable only when the lockfile is known-stale or for…
Skill Claude CodeCodex
Skill "playwright-e2e" from lukasrepublic/agentic-foundry, covering when to trigger, procedure, inputs, outputs and quality bar.
Skill Claude CodeCodex
Default command for population on a fresh worktree or after a git pull that includes a lockfile change: npm ci — lockfile-respecting, deterministic install. Run from the project root. This is the form CI workflows and Dockerfiles use. The bare npm install form is acceptable only when the lockfile is known-stale or for…
Skill Claude CodeCodex
No artifact. This skill emits prescriptive guidance inline. The implementing agent writes test files in the assigned worktree.
Skill Claude CodeCodex
DORMANT-INVOCABLE, non-default deep audit (/foundry:audit) via the native Workflow tool — a PHASED remediate-between-passes engine. The single-pass /foundry:spec-review (see skills/spec-review/SKILL.md) replaced this as the default review verb; this engine is kept for an EXCEPTIONAL deep audit only (operator-invoked…
Skill Claude CodeCodex
Batch front-authorization review over a release's N atoms (/foundry:authorize-release) — ergonomics without relaxing PER-ATOM granularity. Displays every atom's acceptance-contract checkpoints, the operator confirms, and each atom is authorized singly via the standard /foundry:authorize flow. Trigger after…
Skill Claude CodeCodex
The Foundry front-authorization gate (/foundry:authorize). Display an atom's acceptance-contract checkpoints to the operator, get explicit confirmation, then freeze the operator-signed authorization (specsha256 + contractsha256) onto acceptance-contract.yaml. The load-bearing v1 safety action — an un-authorized spec…
Skill Claude CodeCodex
Deploy a release ONCE locally and run its full tagged journey suite against that one instance (/foundry:certify-local , introduced in the v0.25.0 certification realignment, CONSTITUTION.md §V factory-mode tail). Resolves the release manifest + the active stack profile's boot recipe, runs plain npx playwright test…
Skill Claude CodeCodex
Emit the staging certification checklist for a release (/foundry:certify-staging , introduced in the v0.25.0 certification realignment, CONSTITUTION.md §V factory-mode tail). Fills context/staging-checklist-template.md from the release manifest + the staging binding in .claude/foundry-project.json, observes deploy…
Skill Claude CodeCodex
Advisory citation-coherence sweep over the direct-edit WORKSPACE corpus (/foundry:coherence-check). Builds the citation graph FRESH every run (no cache trust), then reports broken citations vs out-of-scope citations as deterministic JSON with a tri-state fail-closed exit. ADVISORY, NOT a merge gate — not part of the…
Skill Claude CodeCodex
Context lifecycle as thin seams over native primitives (/foundry:context ). WRAP of the ctx- skills — additive over native /compact, --resume, /rewind, and the context sensor; never reinvents transcript replay. Trigger to snapshot/resume a session's distilled arc-state or check context budget.
Skill Claude CodeCodex
Cut an agentic-foundry release as a guarded playbook (/foundry:cut-release). Encodes the hand-run cut procedure as a loop whose EXIT GATE is the existing acceptance verdict — verifies the ordered preconditions (plugin.json version, CHANGELOG section; the marketplace.json catalogue bump is deferred to the re-pin commit…
Skill Claude CodeCodex
Migrate a fleet of hand-built monitoring dashboards into version-controlled code with a MACHINE-CHECKED equivalence proof. The five-part harness: immutable golden originals → a typed emitter with a generic panel factory whose unknown-kind fallback FLAGS (never silently guesses) → a renderer back to platform JSON → a…
Skill Claude CodeCodex
The stateful-tier migration PROCEDURE skill — cut an app's SQL database + cache over from self-managed instances to a managed serverless target. A read-only procedure the generic agent runs alongside the id- infra-delivery steps: it drives the fail-closed cutover-mechanism DECISION TREE (snapshot-restore vs…