CLAUDE.md examples from real projects

RelaticleReads credentialsCLAUDE.md

relaticle

Relaticle/relaticle/CLAUDE.md

=== .ai/relaticle/architecture rules === # Architecture Relaticle is a modular monolith: the CRM core lives in `app

SupabaseCLAUDE.md

postgres

supabase/postgres/CLAUDE.md

style compliance specs run against built images | | `.claude/skills/pg-security-release-analysis/` | Skill for triaging upstream PG quarterly security releases into a CVE/impact catalog — see below | ## Building and testing Exact commands verified against `nix/docs/build-postgres.md

kenn-ioCLAUDE.md

roborev

kenn-io/roborev/CLAUDE.md

prompt), `compact` (consolidated multi-agent), `fix` (background worktree fix) ### Review types Empty/`"review"` (standard), `"security"`, `"design"` — changes the system prompt ### Migrations SQLite schema changes are numbered migrations in `internal/storage/migrations.go`, recorded

security-unionCLAUDE.md

videocall-rs

security-union/videocall-rs/CLAUDE.md

Before making any recommendation or assessment about transport protocols (WebTransport, WebSocket, QUIC, datagrams, reliability), security design, or performance trade-offs, delegate to the relevant specialist agent first. Do not reason

DialmasterOrgCLAUDE.md

Youtarr

DialmasterOrg/Youtarr/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

lane711Deletes or force-pushesCLAUDE.md

sonicjs

lane711/sonicjs/CLAUDE.md

Routes: `packages/core/src/routes/admin.ts`, `admin-content.ts` Use `codegraph_explore` to inspect current patterns before building new pages. ## Security - Never expose secrets in code or tests. - Validate all user input at the boundary

relaticleReads credentialsCLAUDE.md

relaticle

relaticle/relaticle/CLAUDE.md

=== .ai/relaticle/architecture rules === # Architecture Relaticle is a modular monolith: the CRM core lives in `app

No other project uses it yet

RackulaLivesCLAUDE.md

Rackula

RackulaLives/Rackula/CLAUDE.md

release approval gate; it runs `versions deploy` only, so it never touches routes. Security headers come from `scripts/gen-headers.mjs`, which transcribes `deploy/security-headers.conf` by value and is parity-checked in CI. They

leonvanzylReads credentialsCLAUDE.md

autocoder

leonvanzyl/autocoder/CLAUDE.md

directory. ## Testing ### Python ```bash ruff check . # Lint mypy . # Type check python test_security.py # Security unit tests (12 tests) python test_security_integration.py # Integration tests (9 tests) python -m pytest test_client.py # Client tests

bohanwoodCLAUDE.md

debi

bohanwood/debi/CLAUDE.md

remote monitoring - `in_target()`: Executes commands within the target installation environment - `prompt_password()`: Securely handles password input with validation ## Important Configuration Variables The script uses 80+ configuration options. Key ones

OpenBankProjectCLAUDE.md

OBP-API

OpenBankProject/OBP-API/CLAUDE.md

deliberately left alone pending a contract decision). Personal notes, working memos and security findings live in `_DO_NOT_COMMIT_/`, which is gitignored but still visible to you on disk — treat

dsd2077CLAUDE.md

CyberVerse

dsd2077/CyberVerse/claude.md

real root cause. - Reject fixes that only patch symptoms. - Reject changes that damage architecture, security, performance, maintainability, or type safety. - Prefer minimal correct fixes over large unnecessary rewrites. - Explain

Macro-Deck-AppCLAUDE.md

Macro-Deck

Macro-Deck-App/Macro-Deck/CLAUDE.md

documentation. Comment only for a reason the code cannot express: a security or trust assumption, a compatibility or protocol constraint, a platform workaround, an ordering or race requirement, deliberately surprising

sachaosCLAUDE.md

todoist

sachaos/todoist/CLAUDE.md

Directory compliant) - Contains API token, color preferences, date formats - Permissions enforced to 0600 for security - **Cache**: Stored in `$HOME/.cache/todoist/cache.json` - Full sync from Todoist API using sync token - Enables offline browsing

trailofbitsCLAUDE.md

buttercup

trailofbits/buttercup/CLAUDE.md

scheduler --tail=-1 --prefix | grep "WAIT_PATCH_PASS -> SUBMIT_BUNDLE" ``` ## Security Considerations - All untrusted code execution happens in isolated Docker containers - DinD (Docker-in-Docker) provides additional isolation - Redis queues

tinyfish-ioReads credentialsCLAUDE.md

bigset / backend

tinyfish-io/bigset/backend/CLAUDE.md

other datasets; `authContext` (Clerk userId + workflow run id) is captured for caller-attribution in security logs and the `CAPABILITY_VIOLATION` PostHog event. See the security note

fynnflueggeCLAUDE.md

agtx

fynnfluegge/agtx/CLAUDE.md

paths exactly (agtx seeds each worktree into `trustedWorkspaces` when the root is trusted). **`AgentDialog::security` splits the table** — trust/bypass prompts are the user's decision: with `auto_trust = false` (default

userdocsCLAUDE.md

qbittorrent-nox-static

userdocs/qbittorrent-nox-static/CLAUDE.md

technical expert in Bash scripting. Follow the guidelines in CLAUDE.md exactly. Prioritize secure, robust, and efficient code using proper quoting, error handling, and the "do one thing well" philosophy. Never

No other project uses it yet

FOGProjectCLAUDE.md

fogproject

FOGProject/fogproject/CLAUDE.md

landing new capability there first keeps it from falling further behind. See the Secure Boot signing work (`fogproject#961`, later ported to `working-1.6` in `8226cd9`) for what happens when

easysoftCLAUDE.md

zentaopms

easysoft/zentaopms/CLAUDE.md

Uses strict types declaration in newer files - Extensive use of custom framework classes ### Security - Custom authentication and authorization system - Input filtering via `lib/filter/` - SQL injection protection through DAO layer ### Performance