project-init Plugin Workflow

Scaffold, 4-layer documentation auto-sync, and verification (v2.2.0)

project-init Plugin Workflow Scaffold, 4-layer documentation auto-sync, and verification (v2.2.0) 01 / Developer 02 / Plugin Commands 03 / Generated Harness (.claude/) 04 / Auto-Sync Layers (in generated project) 05 / Documentation & Audit Automatic sync triggers Developer · code first, then init · Developer Developer code first, then init /init-project · 17-step scaffold · Plugin Commands · v2.2.0 /init-project 17-step scaffold v2.2.0 Generated Harness · CLAUDE.md + .claude/ · Generated Harness (.claude/) Generated Harness CLAUDE.md + .claude/ secret-scan.sh · PreToolUse, 17 patterns · Generated Harness (.claude/) · warn-only secret-scan.sh PreToolUse, 17 patterns warn-only Plan Rule · on plan-mode exit · Auto-Sync Layers (in generated project) › Automatic sync triggers Plan Rule on plan-mode exit PostToolUse Hook · on Write / Edit · Auto-Sync Layers (in generated project) › Automatic sync triggers PostToolUse Hook on Write / Edit /sync-docs · doc-sync-checker agent · Plugin Commands · manual layer /sync-docs doc-sync-checker agent manual layer commit-msg Hook · on git commit · Auto-Sync Layers (in generated project) › Automatic sync triggers commit-msg Hook on git commit Docs Updated · quality 0-100 · Documentation & Audit Docs Updated quality 0-100 /health-check · audit 0-200, A-F · Documentation & Audit /health-check audit 0-200, A-F installs installs verify Legend Agent logic Policy Context / trace Cloud service External system

Quality Signals

  • • CLAUDE.md quality: 0-100, six criteria
  • • Commands and architecture weigh 20 pts each
  • • /health-check: 0-200 across 7 check stages
  • • Read scores as Before/After deltas

Security Defaults

  • • 17 secret patterns incl. AWS, GitHub, Slack
  • • Context-aware AWS secret key lookbehind
  • • Deny list blocks rm -rf, force push, eval
  • • || true makes the scan warn, not block

Adoption Tips

  • • Run /init-project after code exists
  • • Repeat /sync-docs as the operating routine
  • • Pre-v2.1 projects: fix settings.json manually
  • • *.md files are skipped by the secret scan