Agent Skill
2/7/2026

quality-checker

Validate skill quality, completeness, and adherence to standards. Use before packaging to ensure skill meets quality requirements. Use when relevant to the task.

J
jmagly
78GitHub Stars
1Views
npx skills add jmagly/ai-writing-guide

SKILL.md

Namequality-checker
DescriptionValidate skill quality, completeness, and adherence to standards. Use before packaging to ensure skill meets quality requirements. Use when relevant to the task.
<div align="center">

AIWG

Multi-agent AI framework for Claude Code, Copilot, Cursor, Warp, and 6 more platforms

200+ agents, 67+ CLI commands, 400+ deployable agent/skill/command/rule artifacts, 8 core frameworks + training marketplace plugin, 27 addons. SDLC workflows, digital forensics, research management, marketing operations, media curation, ops infrastructure, knowledge base, and fine-tuning dataset curation — all deployable with one command.

npm i -g aiwg        # install globally
aiwg use sdlc        # deploy SDLC framework

npm version npm downloads License: MIT GitHub Stars Node Version TypeScript 10 Platforms

Get Started · Features · Agents · CLI Reference · Documentation · Community

Discord Telegram

</div>

Installation Troubleshooting

If aiwg is not found after npm i -g aiwg, the npm global bin directory is not on your PATH. Confirm and fix:

which aiwg                              # empty? PATH is the issue
npm config get prefix                   # find npm's global prefix (bin lives under here)
echo 'export PATH="$(npm config get prefix)/bin:$PATH"' >> ~/.zshrc   # or ~/.bashrc
source ~/.zshrc                         # or restart your shell

You can also invoke AIWG without adjusting PATH by using npx aiwg <command>. For a broader health check — version, deployed providers, missing dependencies, kernel-skill probes — run aiwg doctor, which surfaces the same PATH guidance on every invocation if the binary isn't reachable.


What AIWG Is

AIWG is a deployment tool and support utility for AI context. At its core, aiwg use copies markdown and YAML source files into the specific paths each AI platform looks in — .claude/agents/, ~/.codex/skills/, .cursor/rules/, .github/prompts/, and six more — so one source of truth works across 10 platforms.

Around that core, AIWG ships agent-facing utilities for things the base platforms do not handle on their own: persistent artifact memory (.aiwg/), background orchestration, autonomous loops, artifact indexing, cost telemetry, health diagnostics, and more. These are tools the agent calls when you ask for something AIWG-shaped — you stay in chat. Most are opt-in. The deployment layer works standalone as plain text files the platform reads natively.

Project scope (recommended) vs user scope (global)

aiwg use writes artifacts at one of two scopes. Both are first-class supported (see ADR-NUA-001 in .aiwg/studies/novice-user-adoption/):

  • Project scope — default. Run aiwg use sdlc from a project root and the artifacts land in ./.claude/agents/, ./.claude/skills/, etc. One project's agent set never bleeds into another's session. This is the recommended default for most use cases.
  • User scope (global install)aiwg use sdlc --scope user writes to ~/.claude/agents/, ~/.claude/skills/, etc. Same artifact set loads into every session, regardless of project. Fits "AIWG in every conversation" workflows and is the canonical mode for OpenClaw and Hermes (whose primary discovery is user-scope).

The trade-off is real: when the same agent set loads into every session, context from one project can bleed into reasoning about another. Research (REF-720, Lost in Multi-Turn Conversation, MSR/Salesforce 2025) measured a 39% capability drop when this happens. The non-blocking project-isolation warning surfaces the trade-off at deploy time so the scope choice is informed. Neither scope is wrong; pick the one that fits the workflow.

See docs/cli-reference.md (under aiwg use → "Scope models") for the per-provider details and the global-install rough-edge inventory.

Simple Building Blocks

AIWG ships five primitive artifact types. All are plain text:

  • Agents — specialized personas (Security Auditor, Test Architect) with a scoped toolset
  • Skills — natural-language workflows the platform auto-invokes on trigger phrases
  • Commands — explicit slash invocations (/flow-security-review-cycle)
  • Rules — enforcement directives the platform loads into every session
  • Behaviors — lifecycle hooks that fire on events (pre-write, post-session)

Each is a single .md file with YAML frontmatter. Nothing executes until an AI platform reads it.

Why It Compounds

Because the primitives are text, they compose without runtime coordination:

  • One agent file becomes one member of a 180-agent SDLC team that reviews architecture, tests, security, and compliance in parallel.
  • One skill becomes a natural-language entry point — "run security review" routes to the right multi-agent flow on every platform that supports skills.
  • One framework (SDLC, forensics, marketing) bundles dozens of agents + skills + rules + templates that cross-reference each other. Deploying a framework deploys a working multi-agent ecosystem.
  • The .aiwg/ directory gives those agents a shared memory — artifacts from Monday's requirements session are read by Thursday's test design.
  • Flows orchestrate Primary Author → Parallel Reviewers → Synthesizer → Archive patterns that no single-prompt workflow can match.

The leverage is not in any one file. It is that hundreds of small files — each independently readable and editable — snap together into workflows that would otherwise take a bespoke agent platform to build.

This is also where the research background lives. AIWG implements patterns from cognitive science (Miller 1956, Sweller 1988), multi-agent systems (Jacobs et al. 1991, MetaGPT, AutoGen), and software engineering (Cooper's stage-gate, FAIR Principles, W3C PROV) — applied as file conventions and deployment rules, not as a runtime you depend on.

How You Actually Use AIWG

The user surface is the conversation with your AI tool. You install AIWG, deploy a framework, and then talk to the agent normally — "help me start a project", "run a security review", "find me a deploy workflow." The agent does the AIWG-specific work for you.

The CLI exists mostly for the agent to call under the hood. The commands a user typically runs by hand are a short list:

  • aiwg use <framework> — deploy AIWG to your project (one-time per framework, per project)
  • aiwg wizard — guided first-run setup
  • aiwg new <project> — scaffold a new project
  • aiwg status — what's deployed and engaged in this workspace
  • aiwg doctor — health check
  • aiwg refresh — keep the install current

Everything else is agent territory. Discovery (aiwg discover), artifact lookup (aiwg show), the index, agent loops, mission control, MCP — those are tools the agent invokes during a chat when you ask for something AIWG-shaped. You stay in the conversation; the agent handles the lookups, runs the loops, and reports back.

Turn the agent-side tooling on (it's on by default once you aiwg use) when you want persistence, parallelism, or automation. Turn it off and the deployed agents, skills, and rules still work — they are still text files the platform reads natively.

What AIWG Is Not

  • Not a prompt library. Prompts are the artifacts, not the product. The product is placing the right prompts where the platform finds them.
  • Not an LLM runtime. AIWG never calls a model. The AI platform you already use does that; AIWG configures what it sees.
  • Not a framework you import into your app. Nothing is imported at build time. Your project gets a .aiwg/ directory (artifacts) and a few provider-specific context dirs (deployed copies). Delete them and your app is unchanged.

Who It's For

If you have used AI coding assistants and thought "this is amazing for small tasks but falls apart on anything complex," AIWG is the missing infrastructure layer that scales AI assistance to multi-week projects.


What Problems Does AIWG Solve?

Base AI assistants (Claude, GPT-4, Copilot without frameworks) have three fundamental limitations:

1. No Memory Across Sessions

Each conversation starts fresh. The assistant has no idea what happened yesterday, what requirements you documented, or what decisions you made last week. You re-explain context every morning.

Without AIWG: Projects stall as context rebuilding eats time. A three-month project requires continuity, not fresh starts every session.

With AIWG: The .aiwg/ directory maintains 50-100+ interconnected artifacts across days, weeks, and months. Later phases build on earlier ones automatically because memory persists. Agents read prior work via @-mentions instead of regenerating from scratch.

The segmented structure also makes large projects tractable. As code files grow, the project doesn't become harder to reason about — agents load only the slice of memory relevant to the current task (@requirements/UC-001.md, @architecture/sad.md, @testing/test-plan.md) rather than the entire codebase. Each subdirectory is a focused knowledge domain that fits comfortably in context, while cross-references keep everything connected.

The artifact index (aiwg index) takes this further. Without any tooling, agents often need to browse 3-6 documents before finding what they need. AIWG's structured artifacts reduce this to 2-3. With the index enabled, agents resolve artifact lookups in one query more often than not — a direct hit on the right requirement, architecture decision, or test case without browsing.

2. No Recovery Patterns

When AI generates broken code or flawed designs, you manually intervene, explain the problem, and hope the next attempt works. There is no systematic learning from failures, no structured retry, no checkpoint-and-resume.

Without AIWG: Research shows 47% of AI workflows produce inconsistent outputs without reproducibility constraints (R-LAM, Sureshkumar et al. 2026). Debugging is trial-and-error.

With AIWG: The agent loop implements closed-loop self-correction — execute, verify, learn from failure, adapt strategy, retry. External Ralph survives crashes and runs for 6-8+ hours autonomously. Debug memory accumulates failure patterns so the agent doesn't repeat mistakes.

3. No Quality Gates

Base assistants optimize for "sounds plausible" not "actually works." A general assistant critiques security, performance, and maintainability simultaneously — poorly. No domain specialization, no multi-perspective review, no human approval checkpoints.

Without AIWG: Production code ships without architectural review, security validation, or operational feasibility assessment.

With AIWG: 162 specialized agents provide domain expertise — Security Auditor reviews security, Test Architect reviews testability, Performance Engineer reviews scalability. Multi-agent review panels with synthesis. Human-in-the-loop gates at every phase transition. Research shows 84% cost reduction keeping humans on high-stakes decisions versus fully autonomous systems (Agent Laboratory, Schmidgall et al. 2025).


The Six Core Components

1. Memory — Structured Semantic Memory

The .aiwg/ directory is a persistent artifact repository storing requirements, architecture decisions, test strategies, risk registers, and deployment plans across sessions. This implements Retrieval-Augmented Generation patterns (Lewis et al., 2020) — agents retrieve from an evolving knowledge base rather than regenerating from scratch.

Each artifact is discoverable via @-mentions (e.g., @.aiwg/requirements/UC-001-login.md). Context sharing between agents happens through artifacts: the requirements analyst writes use cases, the architecture designer reads them.

2. Reasoning — Multi-Agent Deliberation with Synthesis

Instead of a single general-purpose assistant, AIWG provides 162 specialized agents organized by domain. Complex artifacts go through multi-agent review panels:

Architecture Document Creation:
  1. Architecture Designer drafts SAD
  2. Review Panel (3-5 agents run in parallel):
     - Security Auditor    → threat perspective
     - Performance Engineer → scalability perspective
     - Test Architect       → testability perspective
     - Technical Writer     → clarity and consistency
  3. Documentation Synthesizer merges all feedback
  4. Human approval gate → accept, iterate, or escalate

Research shows 17.9% accuracy improvement with multi-path review on complex tasks (Wang et al., GSM8K benchmarks, 2023). Agent specialization means security review is done by a security specialist, not a generalist.

3. Learning — Closed-Loop Self-Correction (Ralph)

Ralph executes tasks iteratively, learns from failures, and adapts strategy based on error patterns. Research from Roig (2025) shows recovery capability — not initial correctness — predicts agentic task success.

Ralph Iteration:
  1. Execute task with current strategy
  2. Verify results (tests pass, lint clean, types check)
  3. If failure: analyze root cause → extract structured learning → adapt strategy
  4. Log iteration state (checkpoint for resume)
  5. Repeat until success or escalate to human after 3 failed attempts

External Ralph adds crash resilience: PID file tracking, automatic restart, cross-session persistence. Tasks run for 6-8+ hours surviving terminal disconnects and system reboots.

4. Verification — Bidirectional Traceability

AIWG maintains links between documentation and code to ensure artifacts stay synchronized:

// src/auth/login.ts
/**
 * @implements @.aiwg/requirements/UC-001-login.md
 * @architecture @.aiwg/architecture/SAD.md#section-4.2
 * @tests @test/unit/auth/login.test.ts
 */
export function authenticateUser(credentials: Credentials): Promise<AuthResult> {

Verification types: Doc → Code, Code → Doc, Code → Tests, Citations → Sources. The retrieval-first citation architecture reduces citation hallucination from 56% to 0% (LitLLM benchmarks, ServiceNow 2025).

5. Planning — Phase Gates with Cognitive Load Management

AIWG structures work using Cooper's Stage-Gate methodology (1990), breaking multi-month projects into bounded phases with explicit quality criteria and human approval:

Inception → Elaboration → Construction → Transition → Production
   LOM          ABM            IOC            PR

Cognitive load optimization follows Miller's 7±2 limits (1956) and Sweller's worked examples approach (1988):

  • 4 phases (not 12)
  • 3-5 artifacts per phase (not 20)
  • 5-7 section headings per template (not 15)
  • 3-5 reviewers per panel (not 10)

6. Style — Controllable Voice Generation

Voice profiles provide continuous control over AI writing style using 12 parameters (formality, technical depth, sentence variety, jargon density, personal tone, humor, directness, examples ratio, uncertainty acknowledgment, opinion strength, transition style, authenticity markers).

Built-in voices: technical-authority (docs, RFCs), friendly-explainer (tutorials), executive-brief (summaries), casual-conversational (blogs, social). Create custom voices from your existing content with /voice-create.


A Real Project Walkthrough

Here is how the six components work together across a project lifecycle. How long each phase takes depends entirely on the project — AIWG is a force multiplier, not a clock. Most projects arrive at a complete, reviewed document set in hours to a day. What takes time is the human work that matters: reviewing, editing, and making decisions. The more input your team provides, the better the output. AIWG memory lets operators participate through the tools they already use — industry-standard documents and templates, issues, and knowledge bases.

Inception

/intake-wizard "Build customer portal with real-time chat" --interactive

Memory: Intake forms capture goals, constraints, stakeholders in .aiwg/intake/ Planning: Executive Orchestrator guides through structured questionnaire Reasoning: Requirements Analyst drafts initial use cases, Product Designer reviews UX Verification: Requirements reference intake forms, ensuring alignment Human Gate: Stakeholder reviews intake → approves transition to Elaboration

Elaboration

/flow-inception-to-elaboration

Memory: Architecture doc, ADRs, threat model, test strategy accumulate in .aiwg/ Reasoning: Multi-agent review panel — Architecture Designer drafts, Security Auditor + Performance Engineer + Test Architect critique in parallel, Documentation Synthesizer merges Learning: Ralph iterates on ADRs (generate options, evaluate against constraints, refine) Style: Technical documents use technical-authority, stakeholder summaries use executive-brief Human Gate: Architect reviews SAD, security team approves threat model

Construction

/flow-elaboration-to-construction
/ralph "Implement authentication module" --completion "npm test passes"

Learning: Ralph handles implementation iterations — execute, verify (run tests), learn ("async race condition in token refresh"), adapt (add synchronization), retry Verification: Code references requirements (@implements UC-001), tests reference code Memory: Test plans, implementation, deployment scripts accumulate across iterations Human Gate: Code review approves merges, QA approves test results

Transition

/flow-deploy-to-production
/flow-hypercare-monitoring 14

Planning: Deployment checklist — monitoring, rollback plan, incident response Learning: Ralph retries deployment steps if validation fails Verification: Deployment scripts reference architecture (which services, what order) Human Gate: Operations team reviews deployment plan → approves production release


Quantified Claims and Evidence

AIWG makes specific, falsifiable claims backed by peer-reviewed research:

ClaimEvidenceSource
84% cost reduction with human-in-the-loop vs fully autonomousAgent Laboratory studySchmidgall et al. (2025)
47% workflow failure rate without reproducibility constraintsR-LAM evaluationSureshkumar et al. (2026)
0% citation hallucination with retrieval-first vs 56% generation-onlyLitLLM benchmarksServiceNow (2025)
17.9% accuracy improvement with multi-path reviewGSM8K benchmarksWang et al. (2023)
18.5x improvement with tree search on planning tasksGame of 24 resultsYao et al. (2023)

Full references: docs/research/


When to Use AIWG (and When Not To)

Good Fit

Multi-week or multi-month projects where requirements evolve, multiple stakeholders have different concerns, quality gates are required, auditability matters, or context exceeds conversation limits.

Examples: New product features with architecture/security/operational implications, legacy system migrations requiring phased rollback strategies, research projects needing literature review and reproducibility, compliance-heavy domains (healthcare, finance, aerospace) needing audit trails.

Not the Best Fit

Single-session tasks where no memory is needed, quality gates are overkill, and overhead exceeds value.

Examples: "Write a Python script to parse this CSV," "Fix this typo," "Explain how this code works."

The Trade-off

AIWG adds structure (templates, phases, gates) that slows trivial tasks but scales to complex multi-week workflows. If your project fits in a single conversation, use a base assistant. If it spans days, weeks, or months, AIWG provides the infrastructure to maintain quality and context.

User intent → AIWG CLI → Deploy agents + rules + templates → AI platform
                │                                                │
                ▼                                                ▼
         "aiwg use sdlc"                              Claude Code / Copilot /
                │                                     Cursor / Warp / Factory /
                ▼                                     OpenCode / Codex / Windsurf
         ┌──────────────┐
         │ 188 Agents   │  Specialized AI personas with domain expertise
         │ 50 Commands  │  CLI + slash commands for workflow automation
         │ 128 Skills   │  Natural language workflow triggers
         │ 35 Rules     │  Enforcement patterns (security, quality, anti-laziness)
         │ 334 Templates│  SDLC artifact templates with progressive disclosure
         └──────────────┘
                │
                ▼
         .aiwg/ artifacts ← Persistent project memory across sessions

How It Works

For visual diagrams of AIWG's architecture, deploy flow, and discovery model, see docs/architecture-overview.md. The prose walkthrough lives in docs/how-it-works.md.

At a glance — AIWG is a deploy-time tool. aiwg use copies plain-text files into your AI platform's native directories and exits. Nothing runs in the background; the AI platform's own loader handles everything from there.

flowchart LR
  subgraph Source["AIWG framework source"]
    direction TB
    KERN[16 kernel skills<br/>~15-25k tokens]
    STD[~385 standard skills<br/>read from $AIWG_ROOT]
    AGENT[200+ agents]
    RULES[60+ rules]
    TPL[100+ templates]
  end

  CLI([aiwg use sdlc<br/>--provider X]) --> DEPLOY

  subgraph DEPLOY["Deploy step (one-shot)"]
    direction TB
    COPY[Copy kernel skills, agents,<br/>rules to provider-native dirs]
    INDEX[Build artifact index<br/>~/.local/share/aiwg/index/]
    CTX[Emit AIWG.md + AGENTS.md<br/>at project root]
  end

  Source --> CLI
  DEPLOY --> Project

  subgraph Project["Your project (after deploy)"]
    direction TB
    PLAT[.claude/skills/<br/>.codex/agents/<br/>.warp/agents/ ...]
    AIWGMD[AIWG.md / .hermes.md /<br/>WARP.md / AGENTS.md]
    ART[.aiwg/<br/>requirements/<br/>architecture/<br/>...]
  end

  Project --> SESS

  subgraph SESS["AI session (Claude / Codex / Hermes / etc.)"]
    direction TB
    NATIVE[Platform-native loader<br/>reads provider dir]
    DISC([Optional: aiwg discover<br/>+ aiwg show])
  end

  classDef optional stroke-dasharray: 5 5,fill:#fef9e7
  class DISC optional
  class INDEX optional

Multi-agent orchestration — once deployed, AIWG coordinates specialized agents through phase-gated workflows:

You: "transition to elaboration phase"

AIWG: [Step 1] Requirements Analyst   → Analyze vision document, generate use case briefs
      [Step 2] Architecture Designer  → Baseline architecture, identify technical risks     } parallel
      [Step 3] Security Architect     → Threat model, security requirements                 }
      [Step 4] Documentation Synth.   → Merge reviews into Architecture Baseline Milestone
      [Step 5] Human Gate             → GO / CONDITIONAL_GO / NO_GO decision
      [Step 6] → Next phase or iterate

The orchestration pattern: Primary Author → Parallel Reviewers → Synthesizer → Human Gate → Archive. Agents run in parallel where possible, with human-in-the-loop checkpoints at phase transitions.


Features

  • 188 specialized agents — domain experts across testing, security, architecture, DevOps, cloud, frontend, backend, data engineering, documentation, and more
  • 50 CLI commands — framework deployment, project scaffolding, iterative execution, metrics, reproducibility validation
  • 128 workflow skills — natural language triggers for regression testing, forensics, voice profiles, quality gates, and CI/CD integration
  • 35 enforcement rules — anti-laziness detection, token security, citation integrity, executable feedback, failure mitigation across 6 LLM archetypes
  • 334 artifact templates — progressive disclosure templates for requirements, architecture, testing, security, deployment, and more
  • 8 platform support — deploy to Claude Code, Copilot, Cursor, Warp, Factory AI, OpenCode, Codex, and Windsurf
  • 8 core frameworks + training marketplace plugin — SDLC, Digital Forensics, Marketing Operations, Research Management, Media Curation, Ops Infrastructure, Knowledge Base, Security Engineering, plus aiwg-training for fine-tuning dataset curation (corpus-to-dataset pipeline with DPO/KTO/ORPO/SimPO export)
  • 27 addons — semantic-memory kernel, llm-wiki (Obsidian-native knowledge base), RLM recursive decomposition, voice profiles, testing quality, mutation testing, UAT automation, and more
  • Agent Loop — iterative task execution with automatic error recovery and crash resilience (6-8 hour sessions)
  • RLM addon — recursive context decomposition for processing 10M+ tokens via sub-agent delegation
  • YAML metalanguage — declarative schema-validated workflow definitions (JSON Schema 2020-12)
  • MCP server — Model Context Protocol integration for tool-based AI workflows
  • Bidirectional traceability — @-mention system linking requirements → architecture → code → tests
  • FAIR-aligned artifacts — W3C PROV provenance, GRADE quality assessment, persistent REF-XXX identifiers
  • Reproducibility validation — deterministic execution modes, checkpoints, configuration snapshots

Quick Start

Prerequisites: Node.js >=20.0.0 and an AI platform (Claude Code, GitHub Copilot, Cursor, Warp Terminal, or others). New installs should prefer Node 24. See Prerequisites Guide for details.

Verifying releases (v2026.5.3+): Every AIWG release ships with Sigstore-anchored npm provenance, a signed git tag, a cosign keyless tarball signature, and a signed CycloneDX SBOM. Verification is optional but recommended:

npm view aiwg@2026.5.3 --json | jq .dist.attestations

Full walkthrough at docs/releases/verifying.md. Adopt the same pattern for your own packages: docs/security/supply-chain-hardening.md.

Install & Deploy

# Install globally
npm install -g aiwg

# Deploy to your project
cd your-project
aiwg use sdlc              # Full SDLC framework (98 agents, 38 rules, 200+ templates)
aiwg use forensics         # Digital forensics & incident response (13 agents, 10 skills)
aiwg use marketing         # Marketing operations (37 agents, 87+ templates)
aiwg use media-curator     # Media archive management (6 agents, 9 commands)
aiwg use research          # Research workflow automation (8 agents, 8-stage pipeline)
aiwg use rlm               # RLM addon (recursive context decomposition)
aiwg use all               # Everything

# Or scaffold a new project
aiwg new my-project

# Check installation health
aiwg doctor

Customize Without Forking

Author project-specific rules, skills, agents, addons, or frameworks directly under .aiwg/{extensions,addons,frameworks,plugins}/<name>/. No fork, no rebuild. Discovered automatically by aiwg use.

aiwg new-bundle my-team-rules --type extension --starter rule
# edit the rule, then:
aiwg use my-team-rules
aiwg doctor --project-local      # health check (counts, validation, drift)
aiwg promote my-team-rules        # graduate to upstream when proven

The bundle is byte-identical in shape to its upstream form, so aiwg promote is a hash-verified copy with zero rewrite. See the customization guide for the three paths (project-local, fork, corpus).

Claude Code Plugin (Alternative)

/plugin marketplace add jmagly/ai-writing-guide
/plugin install sdlc@aiwg

Multi-Platform Deployment

aiwg use sdlc                          # Claude Code (default)
aiwg use sdlc --provider copilot       # GitHub Copilot
aiwg use sdlc --provider cursor        # Cursor
aiwg use sdlc --provider warp          # Warp Terminal
aiwg use sdlc --provider factory       # Factory AI
aiwg use sdlc --provider opencode      # OpenCode
aiwg use sdlc --provider openai        # OpenAI/Codex
aiwg use sdlc --provider windsurf      # Windsurf

First-Party Integrators

Some partners ship AIWG bundled in their runtime — no aiwg use step required. Install the partner tool and AIWG is already wired up.

PartnerInstallWhat you get
Omniusnpm i -g omniusAIWG framework set, skills, agents, and rules embedded in the Omnius autonomous coding agent. Discoverable through aiwg discover from inside Omnius sessions, surfaceable through Omnius's MCP and REST bridges.

If you ship a product that bundles AIWG and want to be listed here, open an issue at https://github.com/jmagly/aiwg/issues.


What You Get

Frameworks (6)

FrameworkAgentsTemplatesWhat It Does
SDLC Complete98200+Full software development lifecycle — Inception through Production with multi-agent orchestration, quality gates, and DORA metrics
Forensics Complete138Digital forensics and incident response — evidence acquisition, timeline reconstruction, IOC extraction, Sigma rule hunting. NIST SP 800-86, MITRE ATT&CK, STIX 2.1
Media/Marketing Kit3787+End-to-end marketing operations — strategy, content creation, campaign management, brand compliance, analytics, and reporting
Media Curator6Intelligent media archive management — discography analysis, source discovery, quality filtering, metadata curation, multi-platform export (Plex, Jellyfin, MPD)
Research Complete86Academic research automation — paper discovery, citation management, RAG-based summarization, GRADE quality scoring, FAIR compliance, W3C PROV provenance
Ops Complete123Operational infrastructure — incident management, runbooks, troubleshooting workflows
Security Engineering25Applied security beyond STRIDE/OWASP — cryptographic primitive selection, chain-of-trust integrity, authentication-factor architecture, degraded-mode design, runtime secret hygiene, supply-chain trust, physical-access threats. Pattern-based, product-agnostic

Addons (27)

AddonWhat It Does
RLMRecursive context decomposition — process 10M+ tokens via sub-agent delegation with parallel fan-out
Writing QualityContent validation, AI pattern detection, authentic voice enforcement
Testing QualityTDD enforcement, mutation testing, flaky test detection and repair
Voice Framework4 built-in voice profiles (technical-authority, friendly-explainer, executive-brief, casual-conversational) with create/blend/apply skills
UAT-MCP ToolkitUser acceptance testing with MCP-powered test execution, coverage tracking, and regression detection
AIWG EvalsAgent evaluation framework — archetype resistance testing (Roig 2025), performance benchmarks, quality scoring
Agent LoopIterative task execution engine (aiwg ralph / aiwg agent-loop-ext) — automatic error recovery, crash resilience, completion tracking
Agentic Installersetup.aiwg.io/v1 SetupManifest installer — cross-platform install workflows with recovery
AIWG DevAIWG development tooling — extension scaffolding, local-source dev mode
DaemonPersistent daemon mode — background sessions, task queue, health monitoring
LLM WikiObsidian-native knowledge base for LLM agents — semantic linking, vault integration
NLP ProdProduction NLP pipelines — entity extraction, classification, summarization
Prose IntegrationOpenProse contract grammar integration — declarative service contracts
Semantic MemorySemantic memory kernel — query, capture, lifecycle management for agent memory
Context CuratorContext pre-filtering to remove distractors — production-grade agent reliability
Verbalized SamplingProbability distribution prompting — 1.6-2.1x output diversity improvement
Guided ImplementationBounded iteration control for issue-to-code automation
Skill FactoryDynamic skill generation and packaging at runtime
Doc IntelligenceDocument analysis, PDF extraction, documentation site scraping
Color PaletteWCAG-compliant color palette generation with trend research
Auto MemoryAutomatic memory seed templates for new project context initialization
Agent PersistenceAgent state management for session continuity
AIWG HooksLifecycle event handlers — pre-session, post-write, workflow tracing
AIWG UtilsCore meta-utilities (auto-installed with any framework)
Droid BridgeFactory Droid orchestration — multi-platform agent bridge
Star PromptRepository star prompt for success celebration

Agents (188)

Specialized AI personas deployed to your platform with defined tools, responsibilities, and operating rhythms.

SDLC Agents (90)

DomainAgentsExamples
Testing & Quality11Test Engineer, Test Architect, Mutation Analyst, Regression Analyst, Laziness Detector, Reliability Engineer
Security & Compliance9Security Auditor, Security Architect, Compliance Checker, Privacy Officer, Citation Verifier
Architecture & Design12Architecture Designer, API Designer, Cloud Architect, System Analyst, Product Designer, Decision Matrix Expert
DevOps & Cloud8AWS Specialist, Azure Specialist, GCP Specialist, Kubernetes Expert, DevOps Engineer, Multi-Cloud Strategist
Backend & Data10Django Expert, Spring Boot Expert, Data Engineer, Database Optimizer, Software Implementer, Incident Responder
Frontend & Mobile6React Expert, Frontend Specialist, Mobile Developer, Accessibility Specialist, UX Lead
AI/ML & Performance5AI/ML Engineer, Performance Engineer, Cost Optimizer, Metrics Analyst
Code Quality11Code Reviewer, Debugger, Dead Code Analyzer, Technical Debt Analyst, Legacy Modernizer
Documentation7Technical Writer, Documentation Synthesizer, Documentation Archivist, Context Librarian
Requirements & Planning7Requirements Analyst, Requirements Reviewer, Intake Coordinator, RACI Expert
Agent/Tool Smiths9AgentSmith, CommandSmith, MCPSmith, SkillSmith, ToolSmith
Governance & Meta3Executive Orchestrator, Recovery Orchestrator, Migration Planner

Forensics Agents (13)

AgentWhat It Does
Forensics OrchestratorCoordinates full investigation lifecycle from scoping through reporting
Triage AgentQuick volatile data capture following RFC 3227 volatility order
Acquisition AgentEvidence collection with chain of custody and SHA-256 hash verification
Log AnalystAuth.log, syslog, journal, and application log analysis for brute force, privilege escalation, lateral movement
Persistence HunterSweeps cron, systemd, SSH keys, LD_PRELOAD, PAM modules, kernel modules — maps to MITRE ATT&CK
Container AnalystDocker, containerd, Kubernetes forensics — privilege escalation, container escapes, eBPF monitoring
Network AnalystConnection state, DNS, traffic patterns — beaconing, C2, data exfiltration detection
Memory AnalystVolatility 3 memory forensics — process analysis, rootkit detection, credential extraction
Cloud AnalystAWS/Azure/GCP audit logs, IAM review, network flows, API activity anomaly detection
Timeline BuilderMulti-source event correlation — chronological incident timelines with attribution
IOC AnalystIOC extraction, enrichment, STIX 2.1 formatting — actionable IOC register
Recon AgentTarget reconnaissance — system topology, services, users, network baselines
Reporting AgentStructured forensic reports — executive summary, technical findings, timeline, remediation

Marketing Agents (37)

DomainAgents
StrategyCampaign Strategist, Brand Guardian, Positioning Specialist, Market Researcher, Content Strategist, Channel Strategist
CreationCopywriter, Content Writer, Email Marketer, Social Media Specialist, SEO Specialist, Graphic Designer, Art Director
ManagementCampaign Orchestrator, Production Coordinator, Traffic Manager, Asset Manager, Workflow Coordinator
AnalyticsMarketing Analyst, Data Analyst, Attribution Specialist, Reporting Specialist, Budget Planner
CommunicationsPR Specialist, Crisis Communications, Corporate Communications, Internal Communications, Media Relations

Research Agents (8)

Discovery Agent, Acquisition Agent, Documentation Agent, Citation Agent, Quality Agent, Archival Agent, Provenance Agent, Workflow Agent

Media Curator Agents (6)

Discography Analyst, Source Discoverer, Acquisition Manager, Quality Assessor, Metadata Curator, Completeness Tracker


Rules (35)

Enforcement patterns that prevent common AI failure modes. Rules deploy automatically with their framework.

Core Rules (10) — Always Active

RuleSeverityWhat It Enforces
no-attributionCRITICALAI tools are tools — never add attribution to commits, PRs, docs, or code
token-securityCRITICALNever hard-code tokens; use heredoc pattern for scoped lifetime; file permissions 600
versioningCRITICALCalVer YYYY.M.PATCH with NO leading zeros; npm rejects leading zeros
citation-policyCRITICALNever fabricate citations, DOIs, or URLs; only cite verified sources; GRADE-appropriate hedging
anti-lazinessHIGHNever delete tests to pass, skip tests, remove features, or weaken assertions; escalate after 3 failures
executable-feedbackHIGHExecute tests before returning code; track execution history; max 3 retries with root cause analysis
failure-mitigationHIGHDetect and recover from 6 LLM failure archetypes: hallucination, context loss, instruction drift, safety, technical, consistency
research-before-decisionHIGHResearch codebase before acting: IDENTIFY → SEARCH → EXTRACT → REASON → ACT → VERIFY
instruction-comprehensionHIGHFully parse all instructions before acting; track multi-part requests to completion
subagent-scopingHIGHOne focused task per subagent; <20% context budget; no delegation chains deeper than 2 levels

SDLC Rules (34) — Active with Framework

Actionable feedback, mention wiring, HITL gates, agent fallback, provenance tracking, TAO loop, reproducibility validation, SDLC orchestration, agent-friendly code, agent generation guardrails, artifact discovery, HITL patterns, human gate display, thought protocol, reasoning sections, few-shot examples, best output selection, reproducibility, progressive disclosure, conversable agent interface, auto-reply chains, criticality panel sizing, qualified references.

Research Rules (2) — Active with Research

Research metadata (FAIR-compliant YAML frontmatter), index generation (auto-generated INDEX.md per FAIR F4).


Skills (128)

Natural language workflow triggers. Say "what's the project status?" and the project-awareness skill activates.

CategorySkillsExamples
Regression Testing12regression-check, regression-baseline, regression-bisect, regression-performance, regression-api-contract, regression-cicd-hooks, regression-learning
Voice & Writing6voice-create, voice-analyze, voice-apply, voice-blend, ai-pattern-detection, brand-compliance
Testing & Quality8auto-test-execution, test-coverage, test-sync, mutation-test, flaky-detect, flaky-fix, tdd-enforce, qa-protocol
Forensics & Security8linux-forensics, memory-forensics, cloud-forensics, container-forensics, sigma-hunting, log-analysis, ioc-extraction, supply-chain-forensics
SDLC & Workflow10sdlc-accelerate, sdlc-reports, gate-evaluation, approval-workflow, iteration-control, risk-cycle, parallel-dispatch, decision-support
Documentation6doc-sync, doc-scraper, doc-splitter, llms-txt-support, pdf-extractor, source-unifier
Artifacts & Traceability6artifact-orchestration, artifact-metadata, artifact-lookup, traceability-check, claims-validator, citation-guard
Research2grade-on-ingest, auto-provenance
Infrastructure5config-validator, template-engine, code-chunker, decompose-file, workspace-health
Iteration4agent-loop, issue-driven-ralph, cross-task-learner, reflection-injection
Other19performance-digest, competitive-intel, audience-synthesis, skill-builder, skill-enhancer, skill-packager, quality-checker, nl-router, tot-exploration, and more

Framework Deep Dives

SDLC Complete — Full Software Development Lifecycle

The SDLC framework implements a phase-gated development lifecycle with 90 specialized agents, 34 enforcement rules, and 170+ artifact templates. Natural language commands drive phase transitions with automated quality gates.

 ┌──────────┐    ┌─────────────┐    ┌──────────────┐    ┌────────────┐    ┌────────────┐
 │ CONCEPT  │───▶│  INCEPTION  │───▶│ ELABORATION  │───▶│CONSTRUCTION│───▶│ TRANSITION │
 │          │    │             │    │              │    │            │    │            │
 │ Intake   │    │ Vision      │    │ Architecture │    │ Code       │    │ Deploy     │
 │ Wizard   │    │ Requirements│    │ Risk Retire  │    │ Test       │    │ Hypercare  │
 │ Solution │    │ Stakeholder │    │ Prototype    │    │ Review     │    │ Handoff    │
 │ Profile  │    │ Analysis    │    │ API Design   │    │ Iterate    │    │ Knowledge  │
 └──────────┘    └──────┬──────┘    └──────┬───────┘    └─────┬──────┘    └────────────┘
                        │                  │                   │
                     ┌──▼──┐            ┌──▼──┐            ┌──▼──┐
                     │ LOM │            │ ABM │            │ IOC │    ← Quality Gates
                     │Gate │            │Gate │            │Gate │
                     └─────┘            └─────┘            └─────┘

 LOM = Lifecycle Objectives Milestone    ABM = Architecture Baseline Milestone
 IOC = Initial Operational Capability

SDLC Flow Commands (24):

CommandPhaseWhat It Does
/intake-wizardConceptGenerate project intake form from natural language description
/intake-startConcept→InceptionValidate intake, kick off with agent assignments
/intake-from-codebaseConceptScan existing codebase, generate intake from analysis
/flow-concept-to-inceptionConcept→InceptionPhase transition with intake validation and vision alignment
/flow-inception-to-elaborationInception→ElaborationArchitecture baselining and risk retirement
/flow-elaboration-to-constructionElaboration→ConstructionIteration planning, team scaling, full-scale development
/flow-construction-to-transitionConstruction→TransitionIOC validation, production deployment, operational handover
/flow-discovery-trackAnyPrepare validated requirements one iteration ahead of delivery
/flow-delivery-trackAnyTest-driven development, quality gates, iteration assessment
/flow-iteration-dual-trackAnySynchronized Discovery + Delivery workflows
/flow-deploy-to-productionTransitionStrategy selection, validation, automated rollback, regression gates
/flow-incident-responseOperationsTriage, escalation, resolution, post-incident review (ITIL)
/flow-security-review-cycleAnyContinuous security validation, threat modeling, vulnerability management
/flow-performance-optimizationAnyBaseline, bottleneck ID, optimization, load testing, SLO validation
/flow-retrospective-cycleAnyStructured feedback, improvement tracking, action items
/flow-change-controlAnyBaseline management, impact assessment, CCB review, communication
/flow-risk-management-cycleAnyContinuous risk identification, assessment, tracking, retirement
/flow-compliance-validationAnyRequirements mapping, audit evidence, gap analysis, attestation
/flow-knowledge-transferTransitionAssessment, documentation, shadowing, validation, handover
/flow-team-onboardingAnyPre-boarding, training, buddy assignment, 30/60/90 day check-ins
/flow-hypercare-monitoringTransition24/7 support, SLO tracking, rapid issue response
/flow-gate-checkAnyMulti-agent phase gate validation with comprehensive reporting
/flow-handoff-checklistAnyHandoff validation between phases and tracks
/flow-guided-implementationConstructionBounded iteration with issue-to-code automation

SDLC Accelerate — Idea to Construction-Ready in One Command:

# From a description
aiwg sdlc-accelerate "AI-powered code review tool with GitHub integration"

# From existing codebase
aiwg sdlc-accelerate --from-codebase .

# Resume interrupted pipeline
aiwg sdlc-accelerate --resume

Generates intake form, vision document, use cases, architecture baseline, risk register, test strategy, and deployment plan — all with human approval gates between phases.

Dual-Track Iteration Model:

        ┌─────────────────────────────────────────────────┐
        │                ITERATION N                       │
        │                                                  │
        │  Discovery Track          Delivery Track         │
        │  (Next iteration)         (Current iteration)    │
        │                                                  │
        │  ┌─────────────┐          ┌──────────────┐      │
        │  │ Requirements│          │ Implement    │      │
        │  │ Research    │          │ Test         │      │
        │  │ Design      │          │ Review       │      │
        │  │ Validate    │          │ Deploy       │      │
        │  └─────┬───────┘          └──────┬───────┘      │
        │        │                         │               │
        │        └────────────┬────────────┘               │
        │                     │                            │
        │              ┌──────▼──────┐                     │
        │              │ Iteration   │                     │
        │              │ Assessment  │                     │
        │              └─────────────┘                     │
        └─────────────────────────────────────────────────┘

Metrics & Quality Tracking:

Metric CategoryMetrics Tracked
DORA (4)Deployment Frequency, Lead Time, Change Failure Rate, MTTR
Velocity (3)Story Points, Cycle Time, Throughput
Flow (3)WIP Limits, Flow Efficiency, Blocked Items
Quality (13)Test Coverage (4), Defect Metrics (4), Code Quality (3), Technical Debt (2)
Operational (16)SLO/SLI (5), Infrastructure (4), Incidents (4), Cost (3)

Forensics Complete — Digital Forensics & Incident Response

Full DFIR investigation workflow following NIST SP 800-86, with MITRE ATT&CK mapping and Sigma rule hunting.

 ┌──────────┐    ┌──────────┐    ┌────────────┐    ┌──────────┐    ┌──────────┐
 │  SCOPE   │───▶│  TRIAGE  │───▶│  ACQUIRE   │───▶│ ANALYZE  │───▶│  REPORT  │
 │          │    │          │    │            │    │          │    │          │
 │ Profile  │    │ Volatile │    │ Evidence   │    │ Log      │    │ Executive│
 │ target   │    │ data     │    │ collection │    │ Timeline │    │ summary  │
 │ system   │    │ capture  │    │ Chain of   │    │ IOC      │    │ Findings │
 │          │    │ RFC 3227 │    │ custody    │    │ Sigma    │    │ Timeline │
 └──────────┘    └──────────┘    └────────────┘    └──────────┘    └──────────┘
                                       │
                                  SHA-256 hash
                                  verification

Investigation Commands:

/forensics-profile          # Build target system profile via SSH
/forensics-triage           # Quick triage following RFC 3227 volatility order
/forensics-acquire          # Evidence acquisition with chain of custody
/forensics-investigate      # Full multi-agent investigation workflow
/forensics-timeline         # Build correlated event timeline
/forensics-hunt             # Threat hunt using Sigma rules
/forensics-ioc              # Extract and enrich IOCs
/forensics-report           # Generate forensic investigation report
/forensics-status           # Show investigation dashboard

Bundled Sigma Rules (8):

RuleWhat It Detects
SSH Brute ForceRepeated failed SSH authentication attempts
Unauthorized SUIDUnexpected SUID/SGID binaries
LD_PRELOAD RootkitLibrary injection via LD_PRELOAD
Cron PersistenceUnauthorized crontab modifications
Kernel Module LoadSuspicious kernel module insertion
PAM BackdoorPAM configuration tampering
SSH Key InjectionUnauthorized authorized_keys modifications
Systemd PersistenceSuspicious systemd unit creation

Supported Evidence Sources:

SourceAgentAnalysis
Auth logsLog AnalystBrute force, privilege escalation, lateral movement
Syslog / journalLog AnalystSystem events, service anomalies
Network connectionsNetwork AnalystC2 beaconing, data exfiltration, DNS tunneling
Docker/containerdContainer AnalystContainer escapes, image tampering, eBPF monitoring
Memory dumpsMemory AnalystProcess injection, rootkits, credential extraction
AWS/Azure/GCPCloud AnalystAPI anomalies, IAM abuse, network flow analysis
File systemPersistence HunterCron, systemd, SSH keys, PAM, kernel modules

Media/Marketing Kit — Campaign Lifecycle

 ┌──────────┐    ┌──────────┐    ┌──────────┐    ┌──────────┐    ┌──────────┐
 │ STRATEGY │───▶│ CREATION │───▶│  REVIEW  │───▶│ PUBLISH  │───▶│ ANALYZE  │
 │          │    │          │    │          │    │          │    │          │
 │ Research │    │ Copy     │    │ Brand    │    │ Schedule │    │ KPIs     │
 │ Audience │    │ Design   │    │ Legal    │    │ Channels │    │ Reports  │
 │ Strategy │    │ Content  │    │ Quality  │    │ Launch   │    │ ROI      │
 └──────────┘    └──────────┘    └──────────┘    └──────────┘    └──────────┘

37 agents across strategy, creation, management, analytics, and communications. 87+ templates covering campaign intake, brand guidelines, content briefs, social playbooks, email sequences, PR kits, and analytics dashboards.

Media Curator — Intelligent Archive Management

# Full curation pipeline
/curate "Pink Floyd"

# Step by step
/analyze-artist "Pink Floyd"           # Identify eras, catalog structure
/find-sources "Pink Floyd" "DSOTM"     # Discover across YouTube, Archive.org, Bandcamp
/acquire                               # Download with format selection
/tag-collection                        # Apply metadata, embed artwork, rename
/check-completeness                    # Gap analysis against canonical discography
/assemble "Pink Floyd live 1973"       # Build thematic compilations
/export --format plex                  # Export to Plex, Jellyfin, MPD, or archival
/verify-archive                        # SHA-256 integrity verification

Quality tiers: Tier 1 (Official/Lossless) → Tier 2 (High Quality) → Tier 3 (Acceptable) → Tier 4 (Avoid). Standards: ID3v2.4, Vorbis Comments, MusicBrainz, PREMIS 3.0, W3C PROV-O.

Research Complete — Academic Research Pipeline

 ┌──────────┐    ┌──────────┐    ┌──────────┐    ┌──────────┐
 │ DISCOVER │───▶│ ACQUIRE  │───▶│ DOCUMENT │───▶│ ARCHIVE  │
 │          │    │          │    │          │    │          │
 │ Search   │    │ Download │    │ RAG      │    │ OAIS     │
 │ databases│    │ PDF      │    │ summaries│    │ lifecycle│
 │ Rank     │    │ Metadata │    │ Citations│    │ FAIR     │
 │ results  │    │ extract  │    │ GRADE    │    │ W3C PROV │
 └──────────┘    └──────────┘    └──────────┘    └──────────┘

8-stage pipeline: Discovery → Acquisition → Documentation → Citation → Quality Assessment → Synthesis → Gap Analysis → Archival. Persistent REF-XXX identifiers. GRADE scoring (HIGH/MODERATE/LOW/VERY LOW). Unpaywall integration for open access papers.


Voice Framework — Content Voice Consistency

4 built-in voice profiles with create, analyze, blend, and apply skills:

ProfileWhen to UseCharacteristics
technical-authorityAPI docs, architecture guidesPrecise terminology, confident assertions, specific metrics
friendly-explainerTutorials, onboardingAccessible language, analogies, encouragement
executive-briefStatus reports, proposalsBottom-line-first, quantified impact, action-oriented
casual-conversationalBlog posts, social mediaNatural rhythm, opinions, varied structure
# Apply a voice to content
"Apply technical-authority voice to docs/architecture.md"

# Create a custom voice from existing content
/voice-create --source "blog-posts/*.md" --name "company-voice"

# Analyze writing patterns in a voice sample
/voice-analyze docs/existing-content.md

# Blend two voices
/voice-blend technical-authority casual-conversational --ratio 70:30

# Detect AI patterns and suggest authentic alternatives
/ai-pattern-detection docs/generated-content.md

MCP Server — Model Context Protocol Integration

AIWG includes a built-in MCP server for tool-based AI workflow integration:

# Start MCP server
aiwg mcp serve

# Install into Claude Desktop
aiwg mcp install claude

# Show capabilities
aiwg mcp info

The MCP server exposes AIWG's artifact management, workflow execution, and project health capabilities as tools that any MCP-compatible AI platform can invoke programmatically.


Agent Evaluation Framework

Test agent quality with archetype resistance testing based on Roig (2025) failure patterns:

# Evaluate a specific agent
/eval-agent security-auditor

# Test archetype resistance
/eval-agent test-engineer --category archetype

# Run performance benchmarks
/eval-agent code-reviewer --category performance

Test Categories:

CategoryTestsWhat It Validates
Archetype4Grounding (hallucination resistance), Substitution (scope adherence), Distractor (context noise), Recovery (failure handling)
Performance3Latency, token efficiency, parallel execution capability
Quality3Output format compliance, correct tool usage, scope adherence

Target score: >=85% per agent. Results include passed/failed breakdown with evidence.


Bidirectional Traceability — @-Mention System

Link requirements to architecture to code to tests with semantic @-mentions:

<!-- In a use case document -->
This use case @implements(UC-001) the authentication flow
described in @architecture(SAD-section-3.2).

<!-- In a test file -->
// @tests(UC-001) @depends(auth-service)
describe('authentication flow', () => { ... });

Mention Commands:

/mention-wire         # Analyze codebase and inject @-mentions for traceability
/mention-validate     # Validate all @-mentions resolve to existing files
/mention-report       # Generate traceability report
/mention-lint         # Lint @-mentions for style consistency
/mention-conventions  # Display naming conventions and placement rules

Relationship qualifiers: @implements, @tests, @depends, @derives-from, @blocked-by, @supersedes. Enables queries like "what implements UC-001?" and "what tests cover the auth module?"


Configuration & Customization

Workspace Structure

your-project/
├── .aiwg/                    # SDLC artifacts (persistent project memory)
│   ├── intake/               # Project intake forms
│   ├── requirements/         # Use cases, user stories, NFRs
│   ├── architecture/         # SAD, ADRs, system diagrams
│   ├── planning/             # Phase plans, iteration plans
│   ├── risks/                # Risk register, mitigations
│   ├── testing/              # Test strategy, plans, results
│   ├── security/             # Threat models, security gates
│   ├── deployment/           # Deployment plans, runbooks
│   ├── reports/              # Generated status reports
│   ├── ralph/                # In-session agent loop state
│   ├── ralph-external/       # External Ralph crash-resilient state
│   ├── research/             # Research corpus and findings
│   ├── forensics/            # Investigation artifacts
│   ├── working/              # Temporary files (safe to delete)
│   └── frameworks/           # Installed framework registry
│       └── registry.json
├── .claude/                  # Claude Code deployment
│   ├── agents/               # 162 agent definitions
│   ├── commands/             # Slash commands
│   ├── skills/               # 86 skill definitions
│   └── rules/                # RULES-INDEX.md + on-demand full rules
├── .github/                  # GitHub Copilot deployment
├── .cursor/                  # Cursor deployment
├── .warp/                    # Warp Terminal deployment
└── CLAUDE.md                 # Project instructions (auto-generated)

Creating Custom Extensions

# Add a custom agent
aiwg add-agent my-domain-expert

# Add a custom command
aiwg add-command my-workflow

# Add a custom skill
aiwg add-skill my-capability

# Scaffold a complete addon
aiwg scaffold-addon my-addon

# Scaffold a complete framework
aiwg scaffold-framework my-framework

# Validate all extension metadata
aiwg validate-metadata

Capability Discovery — aiwg discover + aiwg show

The headline operator surface for finding and reading AIWG capabilities. Most AIWG skills (~385 of 400) are not loaded into your platform's flat skill listing — they stay at $AIWG_ROOT and are reached on demand through aiwg discover (find) and aiwg show (fetch). The kernel set on disk is small on purpose: 9 framework quickrefs + 6 self-maintenance ops = 15 skills, well under every supported platform's skill-listing budget.

# Find a skill by capability
aiwg discover "deploy production"           # → flow-deploy-to-production
aiwg discover "create intake"               # → intake-* family
aiwg discover "audit security" --type skill --limit 5
aiwg discover "<phrase>" --json             # stable schema for sub-agents

# Fetch the full body of a specific artifact (companion to discover)
aiwg show skill flow-deploy-to-production
aiwg show agent aiwg-steward
aiwg show command discover
aiwg show rule no-attribution

The kernel quickrefs ship curated, validated discovery phrases per capability domain — phrases tested against the live scorer to surface the right top-3 candidates. The 6 self-maintenance ops (steward, aiwg-doctor, aiwg-refresh, aiwg-status, aiwg-help, use) stay loaded so the agent retains repair surfaces even when discovery itself is broken. See docs/discovery-and-kernel-skills.md for the full best-practices guide, ASCII flow diagrams, and verification steps.

Artifact Index — aiwg index

# Build searchable artifact index
aiwg index build
aiwg index build --force --verbose

# Search artifacts by keyword
aiwg index query "authentication" --json

# Show dependency graph for an artifact
aiwg index deps .aiwg/requirements/UC-001.md --json

# Index statistics
aiwg index stats --json

The index supports multiple graphs: project graph (.aiwg/ artifacts), codebase graph (src/ / test/ / tools/), and framework graph (agentic/code/ + docs/).

Doc Sync — Bidirectional Documentation

# Audit doc drift (dry run)
aiwg doc-sync code-to-docs --dry-run

# Sync docs to match code
aiwg doc-sync code-to-docs

# Bidirectional reconciliation
aiwg doc-sync full --interactive

Reproducibility Validation

# Show/set execution mode (strict = temperature 0, fixed seed)
aiwg execution-mode

# Create execution snapshot
aiwg snapshot

# Create workflow checkpoint
aiwg checkpoint

# Validate workflow reproducibility
aiwg reproducibility-validate

Thresholds: compliance audit (100%), security scan (100%), test generation (95%).


Issue-Driven Development

AIWG integrates with issue trackers for 2-way human-AI collaboration:

# Create issues from any backend (Gitea, GitHub, Jira, Linear, local files)
/issue-create "Implement OAuth2 flow" --labels "feature,auth"

# List and filter issues
/issue-list --state open --labels "priority:high"

# Drive an issue with agent loop — posts status to issue thread
/issue-driven-ralph 42

# Auto-sync issues from commits and artifacts
/issue-sync

# Close with comprehensive summary and verification
/issue-close 42

The /address-issues command orchestrates issue-thread-driven agent loops with automatic progress posting and human feedback incorporation at each cycle.


Daemon Mode & Messaging Integration

Daemon Mode

# Background file watching, cron scheduling, IPC
aiwg daemon start

See Daemon Guide for background agent orchestration.

Messaging Integration

Bidirectional Slack, Discord, and Telegram bots for remote agent control:

# Connect to messaging platforms
aiwg messaging connect slack
aiwg messaging connect discord
aiwg messaging connect telegram

See Messaging Guide for setup and configuration.


See It In Action

# Generate project intake from natural language
/intake-wizard "Build customer portal with real-time chat"

# Accelerate from idea to construction-ready
/sdlc-accelerate "AI-powered code review tool"

# Phase transition with automated gate check
/flow-inception-to-elaboration

# Iterative task execution — "iteration beats perfection"
/ralph "Fix all failing tests" --completion "npm test passes"

# Long-running tasks with crash recovery (6-8 hours)
/ralph-external "Migrate to TypeScript" --completion "npx tsc --noEmit exits 0"

# Process massive codebases with recursive context decomposition
/rlm-query "src/**/*.ts" "Extract all exported interfaces" --model haiku
/rlm-batch "src/components/*.tsx" "Add TypeScript types" --max-parallel 4

# Digital forensics investigation
/forensics-investigate
/forensics-triage
/forensics-timeline

# Scan codebase for agent-readiness
/codebase-health --format text

# Decompose large files into agent-friendly modules
/decompose-file src/large-file.ts --execute

# Deploy to production with rollback gates
/flow-deploy-to-production

# Security assessment
/security-audit

# Voice transformation
"Apply technical-authority voice to docs/architecture.md"
"Create a voice profile based on our existing blog posts"

Platform Support

All 8 platforms receive agents, commands, skills, and rules. Deployment adapts to each platform's conventions automatically.

PlatformStatusAgentsCommandsSkillsRulesDeploy Command
Claude CodeTested.claude/agents/.claude/commands/.claude/skills/.claude/rules/aiwg use sdlc
GitHub CopilotTested.github/agents/.github/agents/.github/skills/.github/copilot-rules/--provider copilot
Warp TerminalTested.warp/agents/ + WARP.md.warp/commands/.warp/skills/.warp/rules/--provider warp
Factory AITested.factory/droids/.factory/commands/.factory/skills/.factory/rules/--provider factory
CursorTested.cursor/agents/.cursor/commands/.cursor/skills/.cursor/rules/--provider cursor
OpenCodeTested.opencode/agent/.opencode/commands/.opencode/skill/.opencode/rule/--provider opencode
OpenAI/CodexTested.codex/agents/~/.codex/prompts/~/.codex/skills/.codex/rules/--provider openai
WindsurfExperimentalAGENTS.md.windsurf/workflows/.windsurf/skills/.windsurf/rules/--provider windsurf

CLI Reference (50 Commands)

CategoryCommandsDescription
Maintenancehelp, version, doctor, updateInstallation health, updates, diagnostics
Frameworkuse, list, removeDeploy, inspect, and remove frameworks
ProjectnewScaffold new project with AIWG structure
Workspacestatus, migrate-workspace, rollback-workspaceWorkspace health and migration
MCPmcp serve, mcp install, mcp infoModel Context Protocol server
Catalogcatalog list, catalog info, catalog searchBrowse available extensions
Pluginsinstall-plugin, uninstall-plugin, plugin-status, package-plugin, package-all-pluginsPlugin management
Scaffoldingadd-agent, add-command, add-skill, add-template, scaffold-addon, scaffold-extension, scaffold-frameworkCreate new extensions
Ralphralph, ralph-status, ralph-abort, ralph-resume, ralph-external, ralph-memory, ralph-configIterative execution engine
Metricscost-report, cost-history, metrics-tokensToken usage and cost tracking
Indexindex build, index query, index deps, index statsArtifact discovery and dependency graphing
Documentationdoc-syncBidirectional doc-code synchronization
SDLCsdlc-accelerateIdea-to-construction-ready pipeline
Code Analysiscleanup-auditDead code and unused export detection
Reproducibilityexecution-mode, snapshot, checkpoint, reproducibility-validateDeterministic workflow validation
Toolsmithruntime-infoRuntime environment detection
Utilityprefill-cards, contribute-start, validate-metadataDevelopment utilities

Quick Reference

# Deploy frameworks
aiwg use sdlc                    # SDLC framework
aiwg use forensics               # Forensics framework
aiwg use all                     # Everything
aiwg use sdlc --provider copilot # Deploy to GitHub Copilot

# Project management
aiwg new my-project              # Scaffold new project
aiwg status                      # Workspace health
aiwg doctor                      # Installation diagnostics

# Iterative execution (Agent Loop)
aiwg ralph "Fix all tests" --completion "npm test passes"
aiwg ralph-status                # Check loop progress
aiwg ralph-abort                 # Cancel running loop
aiwg ralph-resume                # Resume interrupted loop
aiwg ralph-external "Migrate to TS" --completion "tsc --noEmit exits 0"

# Artifact discovery
aiwg index build                 # Build artifact index
aiwg index query "authentication" --json
aiwg index deps .aiwg/requirements/UC-001.md --json

# Documentation sync
aiwg doc-sync code-to-docs --dry-run
aiwg doc-sync full --interactive

# Metrics
aiwg cost-report                 # Session cost breakdown
aiwg metrics-tokens              # Token usage

# SDLC accelerate
aiwg sdlc-accelerate "Project description"
aiwg sdlc-accelerate --from-codebase .

Architecture

Extension System

AIWG uses a unified extension system with 10 extension types, all deployable across 8 platforms:

TypeCountDescription
Agents188Specialized AI personas with defined tools, responsibilities, and operating rhythms
Commands50CLI commands and slash commands for workflow automation
Skills128Natural language workflow triggers activated by conversation patterns
Rules35Enforcement patterns deployed as consolidated index with on-demand full-rule loading
Templates334Progressive disclosure document templates for all SDLC phases
Frameworks6Complete workflow systems (SDLC, Forensics, Marketing, Research, Media Curator, Ops)
Addons21Feature bundles extending frameworks (RLM, Voice, Testing Quality, UAT, Ring)
HooksvariesLifecycle event handlers (pre-session, post-write, workflow tracing)
ToolsvariesExternal utility integrations (git, jq, npm)
MCP ServersvariesModel Context Protocol server integrations

Multi-Agent Orchestration

                    ┌─────────────────────┐
                    │ Executive Orchestrator│
                    └──────────┬──────────┘
                               │
              ┌────────────────┼────────────────┐
              ▼                ▼                 ▼
      ┌──────────────┐ ┌──────────────┐ ┌──────────────┐
      │Primary Author│ │  Reviewer 1  │ │  Reviewer 2  │  ← Parallel
      │(e.g. Req.   │ │(e.g. Security│ │(e.g. Test    │
      │  Analyst)    │ │  Architect)  │ │  Architect)  │
      └──────┬───────┘ └──────┬───────┘ └──────┬───────┘
             └────────────────┼────────────────┘
                              ▼
                    ┌─────────────────────┐
                    │  Documentation      │
                    │  Synthesizer        │  ← Merge all reviews
                    └──────────┬──────────┘
                               ▼
                    ┌─────────────────────┐
                    │  Human Gate         │  ← GO / NO_GO decision
                    └──────────┬──────────┘
                               ▼
                    ┌─────────────────────┐
                    │  .aiwg/ Archive     │  ← Persistent artifacts
                    └─────────────────────┘

YAML Metalanguage

AIWG is pioneering a declarative YAML metalanguage for multi-agent workflow orchestration. Schema-validated YAML defines agent topology, workflow DAGs, gate conditions, and artifact contracts — while natural language handles behavioral logic.

# Example: flow definition (schema-validated)
flow:
  id: inception-to-elaboration
  model: opus
  entry_criteria:
    gate: LOM
    artifacts:
      - path: .aiwg/requirements/vision-document.md
        required: true
  steps:
    - id: requirements-analysis
      agent: requirements-analyst
      parallel_group: reviews
    - id: architecture-baseline
      agent: architecture-designer
      parallel_group: reviews
    - id: synthesis
      agent: documentation-synthesizer
      depends_on: [requirements-analysis, architecture-baseline]
  exit_criteria:
    gate: ABM
    decision: [GO, CONDITIONAL_GO, NO_GO]

JSON Schema definitions for flow.yaml, agent.yaml, rule.yaml, and skill.yaml at agentic/code/frameworks/sdlc-complete/schemas/metalanguage/.

Project Artifacts (.aiwg/)

All SDLC artifacts persist in .aiwg/ — structured project memory that survives across AI sessions:

.aiwg/
├── intake/           # Project intake forms, solution profiles
├── requirements/     # Use cases, user stories, NFRs
├── architecture/     # SAD, ADRs, diagrams
├── planning/         # Phase plans, iteration plans
├── risks/            # Risk register, mitigations
├── testing/          # Test strategy, test plans
├── security/         # Threat models, security gates
├── deployment/       # Deployment plans, runbooks
├── reports/          # Generated status reports
├── ralph/            # Agent loop state and history
└── frameworks/       # Installed framework registry

This segmentation is what makes large projects manageable. Individual code files inevitably grow, but the project knowledge stays organized into focused domains. An agent working on a deployment problem loads @.aiwg/deployment/ and @.aiwg/architecture/ — not the entire codebase. An agent debugging a test failure loads the relevant requirement, the test plan, and the specific source file. Context stays sharp regardless of project size.

aiwg index amplifies this further — it builds a searchable artifact index so agents resolve lookups in a single query instead of browsing. Without tooling: 3-6 documents to find what's needed. With AIWG structure: 2-3. With the index: usually 1.


Agent Loop — Autonomous Long-Running Agent Orchestration

The Agent Loop is the core execution philosophy: iteration beats perfection. Instead of getting everything right on the first attempt, the agent executes in a retry loop where errors become learning data. Ralph supports both in-session loops and crash-resilient external loops that run indefinitely — surviving process crashes, terminal disconnects, and system reboots.

In-Session Ralph (Minutes to Hours)

# Iterative task execution with automatic error recovery
/ralph "Fix all failing tests" --completion "npm test passes with 0 failures"
/ralph "Reach 80% coverage" --completion "coverage report shows >80%" --max-iterations 20

# Issue-driven Ralph — posts cycle status to issue threads, incorporates human feedback
/issue-driven-ralph 42    # Drives issue #42 with 2-way human-AI collaboration

External Ralph — Crash-Resilient Autonomous Agents (Hours to Days)

External Ralph runs as a persistent background process with PID file tracking, crash recovery, and automatic restart. The agent continues working even if your terminal disconnects or the host reboots.

# Long-running autonomous task (6-8+ hours, survives crashes)
/ralph-external "Migrate entire codebase to TypeScript" \
  --completion "npx tsc --noEmit exits 0" \
  --timeout 480

# Autonomous code review loop
/ralph-external "Review and fix all security vulnerabilities" \
  --completion "npm audit shows 0 vulnerabilities"

# Continuous integration loop
/ralph-external "Get all tests passing on Node 18 and 22" \
  --completion "npm test passes on both versions"

External Ralph features:

  • Crash resilience — PID file recovery, automatic restart on process death
  • Checkpoint system — saves progress at each iteration boundary, resumes from last checkpoint
  • Cross-session persistence — state stored in .aiwg/ralph-external/, survives terminal disconnects
  • Debug memory — learns from failure patterns across iterations, applies lessons to subsequent attempts
  • Episodic memory/ralph-reflect shows accumulated learnings and strategy evolution
  • Completion reports — detailed iteration history saved to .aiwg/ralph/

Scheduled and Remote Agents

# Schedule recurring autonomous agent tasks
/schedule create "Run security audit" --cron "0 9 * * 1"    # Every Monday 9am
/schedule create "Check dependency updates" --cron "0 0 * *" # Monthly

# Remote agent triggers — execute on schedule from anywhere
/schedule list
/schedule run <trigger-id>

Ralph Control

/ralph-status     # Check current/previous loop status
/ralph-resume     # Resume interrupted loop from last checkpoint
/ralph-abort      # Cancel running loop (optionally revert changes)
/ralph-memory     # View debug memory entries and failure patterns
/ralph-reflect    # View episodic memory and strategy evolution
/ralph-analytics  # Execution metrics and performance history

How It Works

Each iteration follows the TAO loop (Thought → Action → Observation):

Iteration N:
  1. THINK  — Analyze current state + accumulated learnings from iterations 1..N-1
  2. ACT    — Make changes based on task + debug memory + failure patterns
  3. VERIFY — Run completion command (tests, build, lint, coverage, etc.)
  4. LEARN  — If verification fails, extract root cause → store in debug memory
  5. DECIDE — Pass? → Complete. Fail? → Iterate. Max retries? → Escalate to human.

The debug memory system implements executable feedback: the agent doesn't just retry — it learns what went wrong and why, then applies that knowledge to the next attempt. After 3 failed attempts at the same root cause, it escalates to a human rather than looping forever.

Research foundation: Self-Refine (Madaan et al., NeurIPS 2023), ReAct (Yao et al., ICLR 2023), METR 2025 (recovery capability dominates agentic task success), Reflexion (Shinn et al., 2023).


RLM — Recursive Context Decomposition

Process codebases and documents far beyond any model's context window:

# Query: fan-out across files, gather results
/rlm-query "src/**/*.ts" "Extract all exported interfaces" --model haiku

# Batch: parallel processing with configurable concurrency
/rlm-batch "src/components/*.tsx" "Add TypeScript types" --max-parallel 4

# Status: monitor decomposition progress
/rlm-status

The RLM addon decomposes large inputs into chunks, delegates each to a sub-agent, and synthesizes results. Processes 10M+ tokens through recursive delegation.

Research foundation: Recursive Language Models (Zhang, Kraska, Khattab — MIT CSAIL, 2026).


Research Foundations

AIWG's architecture is grounded in peer-reviewed research across cognitive science, multi-agent systems, software engineering, and AI safety. Full corpus: research-papers (168 papers). Entries ordered highest to lowest GRADE evidence quality within each category.

Cognitive Foundations

Multi-Agent Systems & Orchestration

Reasoning & Planning

Self-Correction & Iterative Refinement

Stage-Gate, SDLC & Traceability

Software Engineering & Agent-Computer Interface

Context Engineering & Memory

Agent Memory & Knowledge Systems

Recursive Context Decomposition

  • Zhang, A.L., Kraska, T. & Khattab, O. (2026). Recursive Language Models. arXiv:2512.24601. MIT CSAIL. (10M+ token processing, up to 3x cheaper than summarization)

Provenance, Reproducibility & Research Management

AI Safety & Failure Modes

Task Decomposition & Declarative Pipelines

Training, Alignment & In-Context Learning

RAG, Retrieval & Tool Use

Domain Knowledge & Specialization

Constrained Generation & Output Validation

LLM Serving & Local Deployment

MCP & Agentic Standards

Full research background, citations, and methodology: docs/research/


Why AIWG

For Individual Developers

Turn your AI coding assistant from a stateless autocomplete into a project-aware development partner. Without AIWG, every time your AI assistant restarts you lose all context. With AIWG, the .aiwg/ directory maintains requirements, architecture decisions, test strategies, and project history across sessions. The agent loop means you can hand off complex multi-step tasks ("migrate this module to TypeScript") and walk away — the agent iterates until completion or escalates when stuck.

For Engineering Teams

Standardize how your team works with AI across 8 platforms. Whether your team uses Claude Code, Copilot, Cursor, or Warp, everyone gets the same agents, rules, and workflows. The 35 enforcement rules prevent common AI mistakes: deleting tests to make them pass, fabricating citations, hard-coding tokens, or silently dropping features. Human-in-the-loop gates at phase transitions ensure no AI output reaches production without human review.

For Platform Engineers

Deploy consistent AI-augmented workflows across your organization. AIWG's extension system lets you create custom agents, commands, and skills specific to your domain, then deploy them to any supported platform. The scaffolding commands (aiwg add-agent, aiwg scaffold-addon, aiwg scaffold-framework) make it easy to build and distribute organizational capabilities.

For Researchers

Standards-aligned implementation of multi-agent systems with full provenance. AIWG operationalizes FAIR Principles (G20, EU, NIH endorsement), W3C PROV for provenance tracking, and GRADE methodology for evidence quality. The research framework manages paper discovery, citation integrity, and archival lifecycles. All 138+ research paper citations are grounded in verified sources — no hallucinated references.

For Security Teams

Forensics-grade investigation workflows and security review automation. The Forensics Complete framework provides 13 specialized agents for digital forensics and incident response, with NIST SP 800-86 evidence handling, MITRE ATT&CK mapping, Sigma rule hunting, and STIX 2.1 IOC formatting. Security review cycles integrate into the SDLC with automated threat modeling and vulnerability management.


AIWG vs Manual AI Workflows

CapabilityWithout AIWGWith AIWG
Context persistenceLost on every restart.aiwg/ survives across sessions
Multi-agent coordinationManual prompt switchingOrchestrated parallel reviews with synthesis
Quality enforcementHope for the best35 rules auto-enforced (anti-laziness, token security, citation integrity)
Error recoveryStart overAgent loop iterates with learned debug memory
Long-running tasksBabysit the terminalExternal agent loop runs 6-8+ hours crash-resilient
TraceabilityGrep and hope@-mention system with bidirectional linking
ReproducibilityNon-deterministicStrict mode (temperature=0), checkpoints, validation
Platform switchingRewrite all prompts--provider copilot deploys identical workflows
Citation integrityAI may hallucinateRetrieval-first architecture, GRADE-assessed sources only
Phase managementAd-hocStage-gate with human approval at transitions

Standards & Compliance

StandardHow AIWG Uses It
FAIR Principles (G20, EU, NIH)Findable, Accessible, Interoperable, Reusable artifact management
W3C PROVProvenance tracking for all generated artifacts
GRADE (WHO, Cochrane, NICE)Evidence quality assessment for research citations
OAIS (ISO 14721)Archival lifecycle management for research corpus
NIST SP 800-86Digital forensics evidence handling
MITRE ATT&CKThreat technique mapping in forensics framework
STIX 2.1Indicator of Compromise formatting
Sigma RulesThreat detection rule format
IEEE 830Requirements specification traceability
MCP (Linux Foundation)Model Context Protocol for tool integration
CalVerCalendar versioning (YYYY.M.PATCH)

Documentation

Getting Started

Customize

By Audience

Practitioners:

Technical Leaders:

Researchers & Evaluators:

Platform Guides

Framework Documentation

Extension System

AIWG's unified extension system enables dynamic discovery, semantic search, and cross-platform deployment:

Advanced Topics


Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

Quick contributions:

  • Found an AI pattern? Open an issue
  • Have a better rewrite? Submit a PR to examples/
  • Want to add an agent? Use aiwg add-agent or see docs/development/agent-template.md
  • Want to add a skill? Use aiwg add-skill
  • Want to create an addon? Use aiwg scaffold-addon

Community & Support


Usage Notes

AIWG is optimized for token efficiency. Rules deploy as a consolidated index (~200 lines) instead of 35 individual files (~9,321 lines). Most users on Claude Pro or similar plans will have no issues. See Usage Notes for rate limit guidance.


License

MIT License — Free to use, modify, and distribute. See LICENSE.

Important: This framework does not provide legal, security, or financial advice. All generated content should be reviewed before use. See Terms of Use for full disclaimers.


Sponsors

<table> <tr> <td width="33%" align="center">

Roko Network

The Temporal Layer for Web3

Enterprise-grade timing infrastructure for blockchain applications.

</td> <td width="33%" align="center">

Selfient

No-Code Smart Contracts for Everyone

Making blockchain-based agreements accessible to all.

</td> <td width="33%" align="center">

Integro Labs

AI-Powered Automation Solutions

Custom AI and blockchain solutions for the digital age.

</td> </tr> </table>

Interested in sponsoring? Contact us


Acknowledgments

Research foundations: Built on established principles from cognitive science (Miller 1956, Sweller 1988), multi-agent systems (Jacobs et al. 1991, MetaGPT, AutoGen), software engineering (Cooper 1990, RUP), and recent AI systems research (ReAct, Self-Refine, DSPy, SWE-Agent). Implements standards from FAIR Principles, OAIS (ISO 14721), W3C PROV, GRADE evidence assessment, and MCP protocol (Linux Foundation).

Platforms: Thanks to Anthropic (Claude Code), GitHub (Copilot), Warp, Factory AI, Cursor, and the OpenCode community for building the platforms that enable this work.


<div align="center">

Back to Top

Made with determination by Joseph Magly

</div>
Skills Info
Original Name:quality-checkerAuthor:jmagly