Florian BRUNIAUX
b0698bfb39
docs: add GitHub Actions workflow guide + desloppify + threat-db v2.7.0
...
- guide/workflows/github-actions.md (new): 5 production patterns with
claude-code-action (on-demand @claude, auto push review, issue triage,
security review, scheduled maintenance), auth alternatives, cost control
- guide/ultimate-guide.md: GitHub Actions cross-ref + desloppify tool
(vibe code quality fix-loop, community tool, ~2K stars, Feb 2026)
- examples/commands/resources/threat-db.yaml: v2.7.0, +5 threat sources
(Azure MCP SSRF CVE-2026-26118, OpenClaw, Taskflow, Codex Security,
DryRun Security 87% vulnerability stat)
- CLAUDE.md: Behavioral Rules section (5 rules from observed friction)
- guide/workflows/README.md: github-actions entry + quick selection row
- IDEAS.md: CI/CD Workflows Gallery marked complete
- CHANGELOG.md: [Unreleased] entries for all items
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-13 17:19:18 +01:00
Florian BRUNIAUX
b6ce1ef72f
docs: add RPI workflow, changelog fragments, smart-suggest hook + LLM variance
...
- guide/workflows/rpi.md (new): Research → Plan → Implement, 3-phase pattern
with explicit GO gates, slash command templates, worked example
- guide/workflows/changelog-fragments.md (new): per-PR YAML fragment enforcement,
3-layer system (CLAUDE.md rule + UserPromptSubmit hook + CI gate)
- examples/hooks/bash/smart-suggest.sh (new): UserPromptSubmit behavioral coach,
3-tier priority (enforcement/discovery/contextual), ROI logging
- guide/core/known-issues.md: LLM Day-to-Day Performance Variance section,
4 root causes (probabilistic inference, MoE routing, infra, context sensitivity)
- guide/workflows/README.md: added RPI entry + quick selection row
- machine-readable/reference.yaml: added entries for changelog_fragments, smart_suggest
- CHANGELOG.md: [Unreleased] entries for all 4 new items
- IDEAS.md: prompt-caching MCP plugin research note (testing in progress)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-13 16:22:57 +01:00
Florian BRUNIAUX
b65630641b
refactor(guide): restructure guide/ into thematic subdirectories
...
Reorganize 22 guide files from a flat directory into 5 thematic subdirs:
- core/ (architecture, methodologies, known-issues, claude-code-releases, visual-reference)
- security/ (security-hardening, sandbox-isolation, sandbox-native, production-safety, data-privacy)
- ecosystem/ (ai-ecosystem, mcp-servers-ecosystem, third-party-tools, remarkable-ai)
- roles/ (ai-roles, adoption-approaches, learning-with-ai, agent-evaluation)
- ops/ (devops-sre, observability, ai-traceability)
All internal links updated across ~50 files (ultimate-guide.md, workflows/,
diagrams/, README.md, docs/, tools/, examples/, machine-readable/).
Also: merge search-tools-cheatsheet.md into cheatsheet.md, rewrite guide/README.md
with H2 grouped sections, update CLAUDE.md repository structure.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-10 08:35:13 +01:00
Florian BRUNIAUX
1c27aa293d
docs: add ShipTypes resource evaluation (score 2/5 - marginal)
2026-02-04 12:14:12 +01:00
Florian BRUNIAUX
09eb141976
docs: v3.9.6 - Trust Calibration, Vibe Coding Trap, reference.yaml sync
...
Added:
- ultimate-guide.md: Trust Calibration section (1.7) with research-backed verification strategies
- ultimate-guide.md: Infrastructure as Code Skills (Anton Babenko's terraform-skill)
- learning-with-ai.md: "The Vibe Coding Trap" anti-pattern (Karpathy, Feb 2025)
- learning-with-ai.md: "Reality of AI Productivity" section with research
- learning-with-ai.md: External resource link to leerob.com/ai (AI fundamentals)
- IDEAS.md: "Vibe Coding Discourse" watching entry
Changed:
- reference.yaml: Complete line number synchronization (~55 entries)
Guide grew from ~9900 to 11154 lines; all deep_dive references updated
- Version bump: 3.9.5 → 3.9.6
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-20 08:36:35 +01:00
Florian BRUNIAUX
9c2ce7ccce
docs: add IDEAS.md Watching section + README restructure (v3.9.5)
...
- Add "Watching (Waiting for Demand)" section to IDEAS.md
- Track Multi-LLM Consultation Patterns research
- Criteria: implement if 3+ requests
- Restructure README.md (~40% cognitive load reduction)
- Collapsible ToC with 4 learning paths
- Remove duplicate "5 Rules" section
- Version bump to 3.9.5
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 16:43:20 +01:00
Florian BRUNIAUX
34b2ca7200
feat(security): add security hardening guide and hooks v3.6.0
...
- Add guide/security-hardening.md (~10K) covering:
- MCP vetting workflow with CVE-2025-53109/53110, 54135, 54136
- Prompt injection evasion techniques (Unicode, ANSI, null bytes)
- Secret detection tool comparison (Gitleaks, TruffleHog, GitGuardian)
- Incident response procedures
- Add 3 new security hooks:
- unicode-injection-scanner.sh: zero-width, RTL, ANSI escape detection
- repo-integrity-scanner.sh: scan README/package.json for injection
- mcp-config-integrity.sh: verify MCP config hash
- Update existing hooks:
- prompt-injection-detector.sh: +ANSI, +null bytes, +nested cmd
- output-secrets-scanner.sh: +env leakage, +generic tokens
- Update cross-references in ultimate-guide.md (§7.4, §8.6)
- Move MCP Security Hardening to Done in IDEAS.md
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-15 07:39:53 +01:00
Florian BRUNIAUX
fb49152ee5
chore: consolidate IDEAS.md and bump version to 3.3.1
...
- IDEAS.md: Reduce from 12 to 4 actionable research topics
- Unified "MCP Security Hardening" (merged 3 overlapping topics)
- Expanded Discarded section (3 → 16 entries with justifications)
- Technical writer agent validation against reference.yaml
- Version bump: 3.3.0 → 3.3.1 across all docs
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-14 21:12:04 +01:00
