Plugin

writ

Hybrid RAG rule retrieval and workflow enforcement for Claude Code. A five-stage pipeline (BM25 + vector + graph traversal + two-pass ranking) retrieves the right coding rules for each task in under 1ms from a Neo4j knowledge graph,. 726x context reduction vs loading a full rulebook at 10K rules. A mode and gate state machine enforces workflow discipline at the tool-call boundary: - writes are blocked until plans and tests are approved. - Ships with 276 rules across 12 domains (Security, Clean Code, DRY, SOLID, Architecture, Testing, Error Handling, Performance, Scaling, API Design, Process, Documentation). - AI agents can propose new rules through a structural gate; frequency-driven graduation and human review control what stays.

• Published source
• Repository

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Runs shell commands Code that starts system commands on the machine it runs on.
• Starts other processes Code that launches separate programs.
• Sends data to outside servers Code that posts data to network addresses.
• Refers to credential files Code that names files such as SSH keys or cloud credentials.
• Evaluates code at runtime Code that builds and runs code while it executes.
• Runs hooks automatically Hooks that execute without being called explicitly.
• Reads AI and developer logins Code that refers to AI tool credentials or publishing tokens, such as .npmrc.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.