riskrails 0.0.0-stage → 3.0.0

package/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "riskrails",
+  "interface": {
+    "displayName": "RiskRails"
+  },
+  "plugins": [
+    {
+      "name": "riskrails",
+      "source": {
+        "source": "local",
+        "path": "./"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "productivity"
+    }
+  ]
+}

package/.claude-plugin/marketplace.json

@@ -0,0 +1,21 @@
+{
+  "name": "riskrails",
+  "owner": {
+    "name": "Ivan Kakurov"
+  },
+  "metadata": {
+    "description": "A weight-based engineering pipeline for Claude Code and Codex: each change is weighed on six axes, runs light, guarded or full, edits only the files its plan names, and ends at human approval — enforced by hooks, reviewed adversarially, routed to the cheap model tier by default.",
+    "version": "3.0.0"
+  },
+  "plugins": [
+    {
+      "name": "riskrails",
+      "source": {
+        "source": "url",
+        "url": "https://github.com/vanssata/claude-agentic-sdlc-module.git"
+      },
+      "version": "3.0.0",
+      "strict": true
+    }
+  ]
+}

package/.claude-plugin/plugin.json

@@ -0,0 +1,21 @@
+{
+  "name": "riskrails",
+  "version": "3.0.0",
+  "description": "A weight-based engineering pipeline for Claude Code and Codex: each change is weighed on six axes, runs light, guarded or full, edits only the files its plan names, and ends at human approval — enforced by hooks, reviewed adversarially, routed to the cheap model tier by default.",
+  "author": {
+    "name": "Ivan Kakurov"
+  },
+  "homepage": "https://github.com/vanssata/claude-agentic-sdlc-module#readme",
+  "repository": "https://github.com/vanssata/claude-agentic-sdlc-module",
+  "license": "MIT",
+  "keywords": [
+    "sdlc",
+    "agents",
+    "code-review",
+    "guardrails",
+    "model-routing",
+    "hooks"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/hooks.json"
+}

package/.codex-plugin/plugin.json

@@ -0,0 +1,37 @@
+{
+  "name": "riskrails",
+  "version": "3.0.0",
+  "description": "A weight-based engineering pipeline for Claude Code and Codex: each change is weighed on six axes, runs light, guarded or full, edits only the files its plan names, and ends at human approval — enforced by hooks, reviewed adversarially, routed to the cheap model tier by default.",
+  "author": {
+    "name": "Ivan Kakurov"
+  },
+  "homepage": "https://github.com/vanssata/claude-agentic-sdlc-module#readme",
+  "repository": "https://github.com/vanssata/claude-agentic-sdlc-module",
+  "license": "MIT",
+  "keywords": [
+    "sdlc",
+    "agents",
+    "code-review",
+    "guardrails",
+    "model-routing",
+    "hooks"
+  ],
+  "skills": "./skills/",
+  "hooks": "./hooks/codex-hooks.json",
+  "interface": {
+    "displayName": "RiskRails",
+    "shortDescription": "Weight-based engineering pipeline with enforced scope and cost-aware model routing.",
+    "longDescription": "Installs one dual-runtime module: an .ai/ engineering pipeline shared by Codex and Claude Code, agents rendered for whichever runtime you use, and three hooks that enforce the rules mechanically rather than by asking politely. Every change runs discovery → context → impact → risk tier → plan → implementation → test → adversarial review → security review → release report → human approval, with the stages scaled to the tier and none of them skipped. Each implementation step names the files it may touch and anything else is refused, including inside a multi-file apply_patch. Routine workload stays on the cheap tier; the expensive tiers are spent only on a named trigger, and a bundled zero-cost usage report shows where the tokens actually went. No agent commits, merges or deploys on its own initiative — the pipeline ends at human approval.",
+    "developerName": "Ivan Kakurov",
+    "category": "Developer Tools",
+    "capabilities": [
+      "Run a change through a risk-tiered pipeline with the gates its tier requires",
+      "Refuse edits outside the current approved step, file by file",
+      "Block force pushes, history rewrites, protected-branch pushes and secret staging",
+      "Survey an existing production codebase into a reusable .ai/ knowledge base",
+      "Audit a repository against the twelve plays of the AI-native SDLC",
+      "Report token usage and cost from local transcripts at zero model cost"
+    ],
+    "defaultPrompt": "Set up RiskRails in this repository with /rr-setup, then run my next change through /rr-build."
+  }
+}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ikakarov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.