What changed, release by release — latest: 0.21.0 — 2026-07-24. Installed the plugin, the slash commands, or the MCP server? They pin the catalog they shipped with; update any time to pick up new briefs.
bug report, 2026-07-23: a follow-up session on the same repo was asked for a finished growth run's findings and confidently enumerated the wrong corpus twice — the 11 reports were loose generic-named files at the repo root of a branch with no PR, and only the per-stage commit messages made them findable at all). Every conductor — all 39 playbooks, every family sequence, and the MCP server's make_conductor — now: creates reports/ before stage 1, so each brief's unchanged root-or-reports/ rule lands the whole run in one folder; stamps a provenance line under every report title (<playbook> · stage <N>/<M> · brief <id>); commits each report as it lands with the proven-recoverable message convention (reports: <FILE> — <stage title> (<playbook> <N>/<M>)), asked once at the go-ahead; writes INDEX.md next to the reports as the run's last write — date, stages with URLs, per-report finding counts (null reports marked as such), next steps — the one file a cold session starts from; and closes by offering a pull request whose body is the index plus a paste-ready handoff block (branch, directory, file list, read INDEX.md first). Same text in all three implementations (build.py, mcp/server.cjs, js/catalog-core.js); six sentences added or amended in the mcp-smoke parity guard. INDEX.md joins the reserved outputs no brief may claim. (ADR-17)
animated five-scene walkthrough — Brief → Run → Report → Studio → Commits — in the ledger's own voice: paper panels, ruled rows, mono metadata, one vermilion accent. Auto-advances with clickable stage tabs, pauses on hover/focus, honors prefers-reduced-motion (static on the Report scene). Schematic on purpose and labeled as such — but every artifact in it is real and linked: the BUGS.md finding (hash router), its severity and location, and both fix commits (683dff5, f8ffa35) from this repo's own FIXLOG. Self-contained HTML/CSS/JS; no assets, no dependencies. (The earlier screen-recording experiment is retired — a real terminal at any speed communicated nothing; the walkthrough shows the loop.)
coding agents against agentic-dev-os. Three reports committed unedited under examples/agentic-dev-os/ and rendered at /r/ado-* like every other report; the examples gallery gains a "Day-1, on a repo that isn't this one" section. The security audit (06) ran too and is deliberately unpublished until its top finding is fixed — the withholding is stated on the gallery, because the evidence rules apply to the marketing as much as the briefs.
findings in CHARTER.md, plus the ratified charter-as-input ruling). Every conductor — all 39 playbooks and every family sequence — now: reads CHARTER.md first when the repo has one (its goals, non-goals, and invariants bound every stage's recommendations); tells the operator what the run will do and asks for a go-ahead before stage 1; narrates every stage handoff in two or three plain sentences instead of advancing in silence; and ends with one ranked plain-words list of the strongest findings plus the offer to run 47 · The Fixer on exactly the operator's picks — no report-reading and no Studio required to act (reports stay on disk as the paper trail). Same text in all three implementations (build.py, mcp/server.cjs, js/catalog-core.js); four new canonical sentences added to the mcp-smoke parity guard.
intent drift. Where the Build family (141–144) gates a greenfield build on the template harness, Mission gives any existing repo a durable intent layer plus the recurring audits that hold work to it — the goal-prompts answer to heavyweight .ai/ planning-folder systems: a one-page contract and scheduled cross-examination instead of forty process files.
the commit record, then *interviews the operator*: the seven charter decisions arrive as numbered questions with evidence-backed candidates, and the brief hard-stops before drafting (141/143's mid-brief gate; unattended runs write the question sheet as a DRAFT charter and stop). Only the operator's answers plus undisputed evidence become CHARTER.md — problem, user, the job, non-goals, invariants, Now/Next/Not-now, done-looks-like; unanswered questions stay marked open, never quietly filled. The report *is* the artifact (142's pattern, no harness needed); ends by asking the operator to ratify and to wire a read-this-first pointer into the agent entry file.
it is*: orphan surfaces, phantom promises, non-goal breaches, half-built wings, effort drift, creep vectors. Every item gets a verdict candidate — formalize, finish, park, or kill — and re-runs turn drift into trend arrows; findings are Studio/Fixer-shaped.
stood when the window opened, what actually landed, stowaways, shortfall, silent re-scopes, verification honesty. Verdicts (keep/finish/formalize/revert) append to a run history, and each run opens by checking whether the last run's verdicts were executed.
measure the drift, ship the deletions.
only in old chats.
#AA7A55 (ΔE ≥ 20 to its nearest categoricalneighbor, 3:1+ on all pinned surfaces in both themes) and a compass symbol — added per the ADR-2 family recipe (brand.json categorical + FAMILY_ORDER + FAM_ICON + <symbol>).
venture reports chose (POSITIONING.md Option A "own the audit loop"; COMPETITIVE §10 bet 1 "lead with the loop, not the catalog size"):
the findings into commits"), and the micro-line opens with brief → report → commits instead of inventory counts. The H1 stays — every report endorsed it.
prompts for your agent" register (COMPETITIVE §7's camouflage warning) and into the filed-report + loop claim.
reports/ — and the three venture demo reports — renders as a styled /r/<slug> page (ledger typography, ruled tables, provenance up top: which brief wrote it, run against what, raw .md one click away). Built by the new report_page()/md_doc() in build.py; reports/ itself stays untouched dogfood output. The examples gallery, the FIXLOG links, and every brief's "see a real report" link now land on the rendered pages; sitemap covers all 38.
row scrolls (with an edge fade) instead of amputating How-it-works and Catalog; Examples joins the nav on every surface. Same fix on the landing page, the generated detail pages, and the examples gallery.
playbooks (Day-1, Triage & Fix, Face-Lift, Founder Funnel, Harden Before Ship, Zero to Shipped); the long tail collapses behind a "more sequences" disclosure; the sponsored/collab preview placeholders leave the landing page entirely until real partners exist (they keep their /p/ pages and the /partners walkthrough). The hero and summary playbook count now counts what the storefront shows (previews excluded).
SECURITY.md policy at the root(the old /SECURITY.md → audit-report redirect is retired in its favor); the examples gallery gains a "how to read one of these" note (severity / confidence grammar, verify-it-yourself guidance) and is re-cut to the ledger (it still carried the pre-0.15 brand).
60-second first report, and the dogfood proof, before any inventory — keeping the lint-guarded count line and families table.
POSITIONING.md/VERDICT.md so copy stays on-register) plus the launch runbook: maintainer checklist (raw-fetch counting on, npm publish, the 10–15s run clip, external dogfood), Show HN / awesome-list / r/ClaudeAI / X drafts, and the week-after WTP test from VERDICT act 1.
graph from the agent entry file (CLAUDE.md / AGENTS.md, README, CONTRIBUTING) and reports orphaned docs, unreachable scripts, files outside every stated taxonomy, and unwritten rules. Output BREADCRUMBS.md; its first run against this repo ships as reports/BREADCRUMBS.md, linked as the brief's example:.
run, …) moved from the repo root into reports/; all example: front matter, the examples gallery, the landing-page fix-log link, the Studio demo loader, and the Vercel redirects follow (old root URLs redirect permanently).
the dogfood-output class, classifies vitals.html / examples/ / manifest.json / metrics.json, and states the breadcrumb convention (everything reachable within two hops of CLAUDE.md); CONTRIBUTING states the two previously unwritten build gates for a new brief (og share card, README count) and links back to CLAUDE.md; README names vercel.json.
artifact the product sells, an audit report. Warm ink/paper palette (one TOKENS_CSS edit re-keys the landing page, b//p/ detail pages, Studio and Vitals), ruled numbered section headers, mono metadata voice, and ONE vermilion accent used like an auditor's red pen. The 17 family hues are demoted to metadata — dots, filing tabs, the famchip — never decoration. The brand mark is new: four audit bars, tallest flagged vermilion (build.BRAND_MARK), carried through the favicon, PWA icons (scripts/icons.py), and the OG home card (scripts/og.py). The hero now shows a real S2 finding from this repo's own BUGS.md, typeset on the shared severity ramp (--sev-2). The direction is pinned as specs/DESIGN_DIRECTION.md + ADR-12 in DECISIONS.md; UI changes must be rendered with node scripts/design-shot.cjs and the PNGs looked at before commit.
static crawlable catalog, bodies.json copy path, honest run-marking and funnel events, copy-hint variants, the success-gated quickstart door, the two-step plugin install, offer lines and analytics disclosures, the dormant star badge, clock-gated window chips, returning-user nudges, PWA/reminder machinery, two-step destructive gates, j/k navigation, the famchip, severity/motion tokens, and the /quality, /teams, /partners and /changelog pages. Severity and family-hue token values were re-derived for the warm palette so every pinned contrast guard still clears AA (FAMILY_MIX_LIGHT 62→58; the light --sev-ink flips to paper on the darker ochre chip).
repo's own surfaces (Funnel, Competitive, Revenue, AI, SEO, CRO, Retention, Proof, Activation, Forms, Checkout — all reports in the repo root) was synthesized into ROADMAP.md and shipped as one branch:
only the hint's explicit "✓ mark it run" and the card toggle record runs; funnel events (catalog_reached, quickview_open, examples_viewed, copy_install, mark_run, reminder round-trips) ride a shared track() with attribution; raw/ and prompts/ are noindexed so raw fetches stay a clean usage metric; the stale no-analytics line in the usage-metrics doc corrected.
the landing and all 141 b/ pages; every copy control is success-gated (a failed clipboard write shows an "open raw" link instead of a false "Copied"), coarse-pointer devices get a /raw/<id>.md bridge; conductor copies name the reports they write; the detail-page hint tees up Report Studio.
pages (honesty-forked for the Fixer); the hero dogfood claim rescoped to be literally true per leg, linter-enforced; an analytics disclosure naming Vercel Analytics and exactly what's counted; merchandising window chips gated by the viewer's clock (no stale "January drop" in July); the XSS evidence card repointed at a verifiable BUGS.md finding.
b//p/ pages get the landing'sanalytics, success-gated copy events, and a dismissible welcome-back strip; per-URL sitemap lastmod from a content-hash state file; og/ twitter/canonical tags completed across studio, vitals, and /examples/.
place that mentions Weekly Vitals; the opt-in reminder is staleness-aware (skips if Vitals ran <7 days ago, gated in the service worker and covered by a Node suite); a PWA install offer where periodic sync needs it; /changelog rendered from this file; "make it a standing appointment" links to the scheduled-run workflow at the mark moment.
and never silently overwrite; all five destructive actions use the same two-step arm pattern; role=status live regions and error states on every async input; fuzzy zero-state search fallback (distance-1) in catalog core.
brief + 35 playbook links) that JS hydrates on boot; brief bodies moved out of the inline payload to a precached bodies.json — index.html drops 595k → 231k raw (61% lighter); 35 per-playbook OG cards with a build-time drift guard; JSON-LD (BreadcrumbList + HowTo / ItemList) on all 176 detail pages.
skills/ output tree (one SKILL.md per brief);BRIEF=<id|slug> single-brief installer (SHA-verified, hermetically tested) with a per-brief install line on b/ pages; a native cursor-commands.zip; the Brief Forge authoring meta-prompt quoting the linter's literal rules (drift-tested); Studio gains Copy Synthesis prompt beside the Fixer; a build-generated /quality page explaining why the briefs don't rot, every claim evidence-linked.
/teams and /partners pages productizingonly what exists today (fork support, standing-audit action, plugin/MCP/ skills distribution) with pricing "on request"; both partner CTAs unified on a working GitHub issue template; a post-activation backer nudge shipped dark until a real backer URL exists.
Studio chips and the landing run-replay (AA text contrast in both themes, measured); API and Reliability family hues de-collided with a test-pinned minimum distance across all 21 families; motion tokens named once; j/k keyboard navigation over visible catalog cards; family chips on cards where color was the only family signal.
underline, footer bar, "All" chip — the --rainbow token is gone from tokens.css); the 22 family colors no longer spray across card borders, chips, finder icons, and kickers — they survive only where they mean something (family group headers, playbook storefront). Kickers, pipeline steps, and links share one neutral treatment; finder icons render as proper stroke outlines.
as its single primary chooser; the triage callout, goal pills, and "New here?" nags are gone; the three helper tools (picker, repo recommender, operator context) collapse into quiet disclosure links; the sticky toolbar is search + one neutral chip row (playbook chips dropped — playbooks live in their own section and pages). The 145-card list renders on intent (question, chip, search, or deep link) instead of dumping every card on first paint — the page shrinks from ~29,000px to ~7,000px.
Fig. 1 chart or duplicate stat blocks; the problem section states the problem in three sentences with real proof links instead of three cards; the simulated terminal "run replay" (labelled "not a screen capture") and the placeholder partner band are removed — partnerships move to a footer link; cards drop the "N lenses · N.Nk" trivia and the heavy per-row primary button for a compact quiet one.
for duplicate/reserved output filenames, id/filename drift, id format, example: targets, related: ids, tagline quoting, and family icon coverage. Brief contract hardened repo-wide: dated re-run-aware Phase 4, an optional reports/ directory for clean roots, and a null-report escape for briefs whose subject can be absent — all linted, permanently.
pointers across every confusion cluster (07↔85, 05↔123, 08↔86, …); the six weakest briefs rewritten to the house standard; example: links to the real dogfood reports; six new audits — 135 CLI Tool UX, 136 Library API Design, 137 Infra-as-Code, 138 Event Contracts, 139 Data Pipeline Quality, 140 Caching Strategy. 141 briefs.
get_brief("6") works), honesterror ranges, a list_playbooks tool, the MCP prompts capability (every brief in your client's prompt picker as goal-<slug>), stemmer and word-boundary matching fixes, and conductor stage-isolation + fetch-fallback + reports/ awareness — kept identical across build.py, server.cjs, and the site by a parity guard in the smoke test.
(/plugin marketplace add GhostlyGawd/goal-prompts → real /goal:bug-hunt names), generated from the briefs at build time; the curl installer gains a checksum fallback chain, stale-file removal, a .version stamp, and a hermetic test; CI workflow activated with an airtight rebuild-drift check; a ready-to-copy scheduled run-brief workflow; usage-metrics design doc.
recommendations from a public GitHub repo, honest dogfood evidence tiles replacing paraphrased quotes, toolbar diet, Audit Triage callout, lazy quick-views and client-composed conductors (smaller page), and an a11y/mobile batch.
js/report-parser.js and made truthful under test — ###-titled findings parse, severity/fixed read only from label positions, code fences are inert, unrecognized blocks are counted and disclosed; bulk severity chips, post-copy guidance, and share-selection permalinks; an OS-light default theme with family accents darkened to ≥3:1 in light mode; detail pages get saved-context copies, related: cross-links, and per-step playbook copy.
suites (catalog core, report parser, MCP smoke + parity) and the hermetic installer test — all wired into scripts/check and CI.
drawn from the self-audit report gallery:
--faint text tier lifted to WCAG AA in both themes; mono/sans faux-bold eliminated; a real text alternative for the schematic report mock; the Studio's GitHub-repo input now shows an error state on a failed load.
naming the report file it writes; the hero names the artifact ("a ready-made, copy-paste prompt") and leads with the free / no-signup / local offer; "MCP" and "conductor" are glossed; the partner band is labeled an example; the installer's SHA-256 verification is surfaced at the install line.
the catalog (meta, OG, hero, chart, and the og.png share card), and the build now fails if the README, family taxonomy, or og.png count drift.
URL + SoftwareApplication JSON-LD; shared disabled/press states; and a per-finding disposition recorded in every design/experience report.
--s1..--s9,--section/--section-tight) added to the token source; every half-pixel font size folded to its nearest integer and the biggest off-grid gaps/margins snapped to the grid (all imperceptible — TYPO T3/T5, LAYOUT L2/L4/L6); and the Proof section gains an honest animated *walk-through* of one real bug-hunt run ending on the real BUGS.md finding — reduced-motion-safe and explicitly labeled "not a screen capture" (SHOWCASE F1).
captured from the live tool, a real finding→commit before/after, a mobile hero stat-block, retention (copy-marks-a-run, welcome-back banner, export/import, opt-in weekly reminder), a maintainer credit, and an armed adoption badge that turns on only once GitHub stars are real (SHOWCASE F2/F3/F5, PROOF F2/F5, RETENTION R1–R4). No social proof is fabricated.
before the catalog, and the filter bar overflowed on phones:
sideways and delayed the value) and leads with the promise + one primary action; the nav "Get started" is demoted to an outline so a single filled CTA wins per viewport (Hierarchy audit F1).
bleed through its transparent lower edge — and the 21 family + 30 playbook chips collapse into single swipeable rows instead of ~8 stacked rows.
catalog is reachable in roughly half the scroll. Its entry points still live in the catalog's "start with a goal" chips and filter row.
audit F2), and the footer drops the how-to-use steps and second install box that duplicated "Three ways in".
toggle; the choice persists in localStorage), self-hosted full-coverage Schibsted Grotesk (display) + IBM Plex Sans (UI) replacing Archivo, and every brand asset — OG cards, home share card, PWA icons, manifest, favicons — unified on the #131417 ink and the 4-bar mark. Design tokens now live in one source (tokens.css) linked by every surface. (An earlier build shipped the webfonts accidentally ASCII-subset, so the live site fell back to system fonts; the full subsets fix that.)
129 Navigation & Wayfinding, 130 Menu & Command Surface, 131 Data Visualization, 132 Dashboard & Density, 133 Empty & Zero-Data States, 134 Iconography & Visual Language — plus three design playbooks: Wayfinding (129 → 130 → 54 → 104), Make Data Legible (131 → 132 → 54 → 56), and Total UI Overhaul (129 → 130 → 58 → 133 → 134 → 47). 135 briefs, 35 playbooks
repo (HIERARCHY, TYPOGRAPHY, COLOR, LAYOUT, STATES, BRAND) and the experience suite (COMPREHENSION, SHOWCASE, PROOF, RETENTION, ACTIVATION) — read-only audits of goal-prompts' own surfaces, dogfooded.
briefs across 21 families — each the standard read-only 4-phase audit that leaves one evidence-backed report:
Control & Authorization, 83 Input & Injection, 84 Threat Model & Abuse Cases; plus 85 Dependency Currency and 86 Keyboard & Screen- Reader Flow
93 Vendor Lock-In
Feedback-Loop; plus 97 Decision-Record
Quality, 101 Flaky-Test, 102 Test-Pyramid Balance
Token Adoption (Design); 106 Notification & Email, 107 In-App Search, 108 Account Lifecycle (Product); 109 Forms & Validation, 110 Checkout & Payment (Growth)
Versioning & Deprecation, 114 Rate-Limit & Quota Design, 115 Developer Portal & Onboarding
Grounding, 118 Prompt-Injection Red-Team, 119 Model Transparency, 120 Training-Data Provenance
Injection Readiness, 123 Capacity & Scalability, 124 Abuse & Overload Protection
Rights, 127 Encryption & Key Management, 128 Audit-Trail
Test Confidence, Ship a Public API, Responsible AI Review, Production Resilience, Privacy & Compliance, Make It Fast, Inherit a Codebase, Refactor Safely, Cost Down, Agent Cost Control, plus a themed (New-Year Reset) and a sponsored (Sponsored Speed Bundle) merchandising example. 129 briefs, 32 playbooks
visual proof, conversion credibility, retention, and activation — each the standard read-only 4-phase audit that leaves one evidence-backed report:
mental model — what it is, who it's for, how it works — from the first screen, or does the curse of knowledge win — writes COMPREHENSION.md
screenshots, demos, diagrams, before/after — or asserted in prose the visitor must take on faith — writes SHOWCASE.md
state, resurfaced value, well-timed nudges, and the churn cliffs that quietly lose users — writes RETENTION.md
counts, and guarantees that turn a skeptical stranger into a believer, placed where the decision is made — writes PROOF.md
account to first win, and the inspiring next step that seeds a habit — writes ACTIVATION.md
the get-it/want-it/keep-it arc that audits every surface a visitor meets for comprehension, conversion, and retention, then ships the biggest lifts as commits. 81 briefs, 17 playbooks
read-only 4-phase audit that leaves one evidence-backed report:
number/date formatting, plural and RTL gaps — writes I18N.md
copyleft reach, attribution owed — writes LICENSES.md
data, social unfurls — writes SEO.md
backfills, expand/contract ordering — writes MIGRATIONS.md
code, single points of human failure — writes OWNERSHIP.md
metric/trace/log coverage and SLOs, not just crash detection — writes TELEMETRY.md
radius, missing tests, rollback story, go/no-go — writes CHANGE-RISK.md
OSS Release-Ready (06 → 07 → 69, safe to make public). 75 briefs, 13 playbooks
re-run) via 47 · The Fixer, one finding per commit:
Venture, 48–53) had no OG image, so their /b/<id> pages unfurled a 404. scripts/og.py generates cards from front matter and the build now fails if a brief ships without one
dropping the site's last runtime third party — closes SECURITY 4
fonts (content-hash cache version); the catalog, Studio, and new Vitals Viewer work offline
vital becomes a sparkline with run-over-run deltas — client-side
download step; the report grammar is now documented and linted, and the Studio surfaces the impact chip
candidate niche, live in the sample gallery — every claim linked and dated
rarity-weighted scoring, in-page) and logs the miss; run tracker keeps timestamps and nudges when Weekly Vitals goes stale; playbook chips copy their conductor in one tap
source instead of hand-synced; MCP version reads from package.json; 3-digit hash-router ids; MCP package made publish-ready (npm publish itself still pending credentials). 68 briefs, 11 playbooks
company before it exists — 60 Opportunity Scan, 61 Niche Map, 62 Pain & Demand Mining, 63 Competitor Teardown, 64 Market Size & Timing, 65 Positioning & Wedge, 66 Moat & Model Check, 67 Venture Verdict. Repo-as-workspace: each brief web-researches one stage and leaves a sourced report; 67 rules go/pivot/kill against bars set before scoring
arithmetic is shown, and disconfirming evidence gets equal effort
(62·63·67, 72 hours of truth). Audit Triage (46) learns the pre-product signal. 68 briefs, 11 playbooks; the catalog now opens with Venture
design — 54 Visual Hierarchy, 55 Typography, 56 Color & Contrast, 57 Spacing & Layout, 58 Interaction States & Motion, 59 Brand Coherence. Evidence rules of the house: every visual claim cites a selector, token, or computed ratio
Fixer turns the findings into commits
/raw/family-design.md. 60 briefs, 9 playbooks
briefs it needs; 47 The Fixer turns audit reports into verified commits, one finding per commit on its own branch
with severity chips, and checked findings become a targeted Fixer prompt — entirely client-side
Topology, 51 Latency Budget, 52 Agent Readiness, 53 Config & Environment; two new playbooks (Triage & Fix, Retrieval Tune-Up). 54 briefs, 8 playbooks
prompt — '+ seq' on the site, make_conductor over MCP, plus per-family 'run all' conductors at /raw/family-<slug>.md
rarity-weighted suggest_briefs (IMPROVEMENTS 1); sample-report chips on audited cards (IMPROVEMENTS 2); scripts/check one-command gate and a real MCP smoke test (DX 1); linter tests including the lens-scoping regression (DX 2); baseline security headers (SECURITY 3); FIXLOG.md records it
running a private catalog
machine-readable catalog.json, and a zero-dependency MCP server (list_briefs / suggest_briefs / get_brief / get_playbook)
two bugs it found (copy-label race, empty-state self-XSS) fixed here
ending, lens counts — enforced on every deploy
ctrl/cmd-K; PWA manifest and icons
Agent (does the agent deliver?), Automation (does the process hold?), AI-UX (does the human trust it?), plus Feedback Loop Audit in Product
curl -fsSL https://goal-prompts.vercel.app/install | shinstalls all briefs as /goal:* Claude Code commands (+ commands.zip)
/#07 opens and highlights a brief; per-card link buttonnudge toward #28 Roadmap Synthesis after 5 runs
build.py pipeline: prompts/*.md → index.html