claude-plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-plugin (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A global goals engine. Fully self-hostable, open-source (MIT platform / CC0 catalog), runs on your own infrastructure. Humanity declares shared Goals — research breakthroughs, great novels, successful prosecutions, cures, open datasets, whatever people actually want done — and a legion of diverse AI-augmented workflows pursues each Goal in parallel. Branches evolve, cross-pollinate, and get ranked by how far their outputs advance up each Goal's real-world outcome-gate ladder. The system is built for whatever people collectively care about next.
This repo contains substantial architecture and implementation work. The starter surfaces below help you navigate, extend, and connect — including via Obsidian if you use it.
Built by Jonathan Farnsworth ([email protected], GitHub @Jonnyton) — sole human author; the only co-authors are the project's own AI agents.
<!-- proof:start --> The engine runs on its own infrastructure and patches itself in public. The volatile facts below are linked to live state rather than copied here, so this section can't go stale:
.github/workflows/auto-fix-bug.yml and workflow/bug_investigation.py. Recent self-patches: the commit and Actions history.get_status MCP tool and rendered at tinyassets.io/fine-print — read the numbers there rather than trusting a copy here._FORCE_MOCK=True); no API keys: pip install -e .[dev] && pytest -q.Honest caveat (the site says this too): the user-facing outcome loop hasn't shipped a real external artifact yet — draft mode is on, OAuth is unwired, run_count is 0. What's proven today is the engine, the architecture, and the self-patching loop; the first shipped real-world outcome is the next milestone.
<sub>Repo facts refreshed 2026-06-14 by scripts/gen_discoverability.py (bounded — rewrites only between the markers).</sub> <!-- proof:end -->
A user's chatbot hits a capability gap → files it as a patch request → a daemon picks it up, drafts a fix, routes it through evidence gates, and ships when the gates are satisfied → the next summon starts smarter. No design committee drew this loop; it was pulled out of user-sim sessions where chatbot-personas filed the first patches against the system. Walk it on the site at /patch-loop; read the implementation in auto-fix-bug.yml + workflow/bug_investigation.py.
The entry path should reach functions, not just docs. Representative core:
workflow/universe_server.py (the universe / extensions / goals / gates / wiki / get_status tools).fantasy_daemon/__main__.py (LangGraph universe graph, SQLite checkpointer, pause/resume).workflow/graph_compiler.py (compiles a declarative branch into a runnable StateGraph; approval-gated node execution).workflow/node_eval.py.A coherent, dependency-verified stack (LangGraph / FastMCP / LanceDB / igraph / clingo) wired into a single self-patching engine; design philosophy with teeth (minimal primitives, fork-over-build, commons-first privacy); operational seriousness (canary-gated deploys, deploy receipts tied to source SHA, ~7,800 offline tests); and a system honest enough to file bugs against itself and state in public what it hasn't shipped yet.
Clone-to-green-tests in ~5 minutes on a clean machine:
git clone https://github.com/Jonnyton/Workflow.git
cd Workflow
python -m venv .venv && source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -e .[dev]
pytest -q # full suite — no API keys needed (tests mock providers)
ruff check # lints clean on a fresh cloneAll tests run offline with _FORCE_MOCK=True set in tests/conftest.py. No ANTHROPIC_API_KEY or similar required for CI or local dev. If any test fails on a clean clone, file an issue — that's a TEST-1 regression.
Cross-platform notes:
pathlib.Path — backslashes don't leak into tests.pyproject.toml).workflow/workflow_tray.py) is Windows-first; macOS/Linux support is work-in-progress. Platform code is cross-platform.python scripts/docview.py for large Markdown, text, and JSON filesbefore any raw whole-file read.
python scripts/capture_idea.py "Idea summary".
knowledge/ docs complement knowledge.db; they do not replace it.docs/exec-plans/ surface complements existing planning docs likeBUILD_PREP.md and RESTRUCTURE_PLAN.md; it does not invalidate them.
Durable coordination belongs in files, not only in chat.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.