Git-native agent governance core — task contracts and deterministic scope/verification checks that keep coding agents in their lanes.
SaferSkills independently audited wtcraft (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Git-native agent governance core.
>
wtcraft is a lightweight governance core for worktree-based agent workflows. It defines task contracts, tracks lifecycle state, and exposes deterministic scope and verification checks for CLIs, agents, and graphical clients.<p align="center"> <img src="https://raw.githubusercontent.com/zywkloo/wtcraft/main/wtcraft-icon.PNG" alt="wtcraft icon" width="120" /> </p>
pipx install wtcraft # pip / pipx (recommended — isolated venv)
npm install -g wtcraft # npm (global)
brew tap zywkloo/wtcraft https://github.com/zywkloo/wtcraft && brew install wtcraftShort alias available after install: wtc
wtcraft --version # print the installed CLI version
wtcraft init # scaffold harness into current repo
wtcraft init --local # scaffold locally; ignore via .git/info/exclude
wtcraft patch # append routing stubs to CLAUDE.md / AGENTS.md
wtcraft lang install --lang zh-CN # enforce output language in CLAUDE.md
wtcraft new feat/my-task # create worktree + task contract
wtcraft new --base origin/main feat/x # override the base branch/ref explicitly
wtcraft status # list active worktree contracts
wtcraft capabilities --json # discover machine-protocol features
wtcraft status --json --repo /repo # machine-readable status for a target repo
wtcraft check <worktree-name-or-path> # verify Scope / Off-limits
wtcraft verify <worktree-name-or-path> # run Verification commandswtcraft new resolves its base in this order: --base, then WTCRAFT_BASE_BRANCH, then origin/HEAD, then local main, local master, local develop, and finally the current branch.
After running wtcraft init, you can use these slash commands in Claude Code:
/planwt <task description>: Plan task + create worktree/finishwt <worktree-name>: Run verification and finish/statuswt: List active worktree task files<!-- wtcraft:models:start -->
.worktree-task.md) specifying Scope, Off-limits, and Verification steps.wtcraft check), test suite verification (wtcraft verify), and cleans up local worktree assets after a successful merge to keep the development disk clean. Additionally, in an upcoming release (integrating with PR #12), the Finisher will aggregate and report token telemetry to track cost, budget, and API usage per agent model (Coming Soon).<!-- wtcraft:models:end -->
| Command | Arguments | What it does | |
|---|---|---|---|
wtcraft init | [--patch-agent-files] [--local] [--repo <path>] | Scaffold harness files. Does not overwrite. --local keeps scaffold clone-local via Git-resolved .git/info/exclude. | |
wtcraft patch | [--repo <path>] | Alias for init --patch-agent-files. Appends routing stubs to CLAUDE.md / AGENTS.md. | |
wtcraft unpatch | [--repo <path>] | Remove the routing stub from CLAUDE.md / AGENTS.md. | |
wtcraft lang | `install\ | remove [--repo <path>]` | Add or remove language enforcement rules (e.g. install --lang zh-CN). |
wtcraft new | [--repo <path>] [--base <branch>] <type/name> | Create a worktree and local .worktree-task.md contract. | |
wtcraft status | [--json] [--repo <path>] | List active worktree tasks and their status. --json is the machine-readable status surface. | |
wtcraft check | [--json] [--repo <path>] <worktree-path-or-name> | Verify the worktree's changes stay within Scope / Off-limits boundaries. | |
wtcraft verify | [--json] [--repo <path>] <worktree-path-or-name> | Run the Verification commands declared in the worktree's contract. | |
wtcraft capabilities | --json | Report supported machine-protocol features for external launchers. | |
wtcraft --version | — | Print the installed CLI version. | |
wtcraft help | [command] | Show usage. |
AI agents (and human contributors) hallucinate, over-engineer, and accidentally break unrelated code. While parallel agents are useful, raw parallelism creates common problems: unclear handoffs, context pollution, and file collisions.
wtcraft provides a definitive safety harness. It focuses on handoff, boundaries, and deterministic containment, not just concurrency.
git worktree..worktree-task.md.No hosted platform is required. No custom runtime is required. You can use Aider, Cursor, Claude, or Devin — wtcraft simply wraps your working directory in a zero-trust governance layer.
bash tests/run_all.shApache-2.0. See LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.