pm-ai-shipping: mandatory Evidence citations verified before reporting,
concrete subagent fan-out contract, read-only allowed-tools on both audits,
N+1/waterfall detection and a refute pass in the performance audit,
untrusted-input hardening across the kit, parallel audits in /ship-check,
severity anchors + report consolidation, repo-relative paths.
Repo: CHANGELOG.md as release source of truth with auto-tag-and-release on
merge to main (adapted from phuryn/claude-usage, minus the .vsix build),
Tests workflow on every PR/push, unit + docs-consistency test suite,
contributor-credit conventions in CONTRIBUTING, all manifests synced at 2.1.0.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011URgT9hYuNrXeCvzjnqRxJ
Introduce repo-level guidance for AI agents:
- CLAUDE.md: single source of truth (structure, design rules, versioning,
operational procedures). 65 skills, 36 commands, 8 plugins.
- AGENTS.md: thin pointer to CLAUDE.md for non-Claude agents.
- .gitignore: stop ignoring CLAUDE.md (now public); ignore CLAUDE.local.md
and keep ignoring _Internal/ (maintainer-only, never published).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>