A plugin to make Argo CD behave like we'd like.

A governance framework that enforces a five-step workflow for AI coding agents with evidence checks.

Curated collection of agent skills for AI coding assistants.

Whole-repo audits in eight modes. Codebase — merged structural + correctness audit, should this exist AND does it do what it promises. Triggers "nuclear review", "code judo", "whole codebase review", "should this exist", "adversarial audit", "fable audit", "correctness audit", "expectation gaps". Docs/Process — doc drift, walkable journeys. Triggers "audit the docs", "doc drift", "process audit", "walk the journeys". Performance — measured-only perf audit; no finding without a number. Triggers "perf audit", "performance audit", "why is it slow", "bundle audit", "build is slow". Threat-model — abuse paths. Triggers "threat model", "STRIDE", "attack surface". Motion — animation audit. Triggers "motion audit", "audit the animations". SEO — discoverability + AEO. Triggers "seo audit", "aeo", "answer engine", "llms.txt", "rank better". Debt — `SHORTCUT:` ledger. Triggers "debt ledger", "shortcut ledger". Owns bare "audit the codebase"; single-page CWV fix loops go to /lighthouse.

>-

Harden GitHub Actions CI/CD workflows for supply-chain security — SHA-pin actions, least-privilege token permissions, verified toolchain installs, OpenSSF Scorecard, and SLSA provenance. Use when adding or auditing GitHub Actions workflows, before making a repository public, when a supply-chain review flags CI gaps, or when standardizing CI hardening across GitHub projects. GitHub-specific by design — GitLab CI and Forgejo Actions are out of scope.

Create the foundational Architecture Decision Record (ADR) sequence for a new project. Use after bootstrap-project, when establishing decision documentation, or when standardizing ADR practices.