Skip to content

v2.10.0 — 📖 Story-first front door + the Live Path goal

Choose a tag to compare

View all tags
@hamza-ali-shahjahan hamza-ali-shahjahan released this 08 Jul 17:27
v2.10.0
c248069
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The factory's front door now tells the story before the inventory — and its next goal is signed: set up once, verified-live in minutes. This release bundles the two cycles since v2.8.0: the story-first README + the Live Path goal (v2.10.0), and MCP-config security scanning (v2.9.0).

Highlights

  • 📖 A story-first README. The front door was a warehouse with a great foyer — the promise now leads and the catalog follows: a negation hero ("Not another AI coding setup"), the demo up top, the 11pm thesis, three true vignettes, one 6-row what's-inside table (the full 35-agent / 66-command / 42-playbook catalog is preserved verbatim in collapses), a comparison table that now includes the AI-app-builder (Lovable-class) category, and a two-doors quickstart. The framing rule shipped with it: localhost is where products are born, not where they live.
  • 🛣️ The Live Path goal (meta/goals/live-path.md, ACTIVE). The factory's next structural target, with agent-runnable evals: any scaffolded product reaches a verified live URL — domain, HTTPS, production-mode auth, verified email, analytics + error events, a real signup on the live site — in ≤15 minutes of human time with ≤5 dashboard actions (E1+E2), and product #2 ships with zero account-level re-setup (E3). Milestones: wire the live-assertion harness into /go-live → kill the four manual dead-ends (registrar/DNS, Neon, Clerk, Resend) → the account-aware fast path → scaffold the kill switch.
  • 🛡️ MCP configs are now an audited surface. /security-check gained a deterministic scanner (scripts/check-mcp-config.ts): inline credentials in mcpServers blocks, wildcard permission allowlists, bypassPermissions, plaintext http:// servers, and moving-tag pulls are flagged — inline credentials and wildcard allowlists are BLOCK-class failures. Both true-positive and false-positive fixtures sit on the eval regression floor.

What changed

v2.10.0 — story-first front door + the Live Path goal (shipped 2026-07-05, recorded at release)

  • README.md rebuilt promise-before-inventory; every count still real, every item still linked, every claim still badged.
  • meta/goals/live-path.md + brain/decision-log/2026-07-05-live-path-goal.md — the goal contract and its decision record.
  • stack/README.md honesty fix: the "product #2 in ~5 minutes" claim softened to measured reality (~25 min of per-product wiring today) and linked to the goal whose E3 earns the bold claim back with ledger receipts.
  • brain/learnings/2026-07-05.md — the distilled rules: counts are receipts, not pitches; audit adjacent docs' numbers when repositioning copy; never let the on-ramp read as the product.

v2.9.0 — MetaHarness ingestion

  • scripts/check-mcp-config.ts (new) + /security-check § 6 (new dimension) + two eval fixtures on the regression floor (12 → 14 cases).
  • references/metaharness/ cloned with a mining guide (study-only, per references discipline); three candidate patterns captured in brain/knowledge/ — score-before-scaffold, the Darwin measured-retention rule, capability-per-dollar — as candidates, not builds, per the factory-change gate.

Get started

curl -fsSL https://raw.githubusercontent.com/hamza-ali-shahjahan/hamzaish/main/install.sh | sh

Then open Claude Code and type /builder-mode <your idea>. New to terminals? Start at docs/start-here.md.

License

AGPL-3.0 — clean, no added clauses. Free for builders; commercial license on request.

Assets 2
Loading