CLAUDE.md examples from real projects

nextify-limitedReads credentialsCLAUDE.md

libra

nextify-limited/libra/CLAUDE.md

Management**: Built-in usage tracking and billing integration - **Sandbox Execution**: E2B and Daytona for secure code execution - **Context Management**: Smart context handling for AI conversations ## Local Service Addresses When running

naomiaroCLAUDE.md

waveform-playlist

naomiaro/waveform-playlist/CLAUDE.md

closure, check WHICH section a workspace ref lives in before suspecting a missed bump. **Security-key-only 2FA (since 2026-10-28): `changeset publish` cannot publish from this session

mozillaReads credentialsCLAUDE.md

kitsune

mozilla/kitsune/CLAUDE.md

include='*.html'`) and remove every reference — a missed one fails the build with `TemplateNotFound`. ## Security — GroupProfile visibility (CRITICAL) `GroupProfile` has three visibility levels (PUBLIC, PRIVATE, MODERATED). Django's `User.groups` returns

lst97CLAUDE.md

claude-code-sub-agents

lst97/claude-code-sub-agents/CLAUDE.md

tests for new logic, both UI and API. **Before committing:** - Run formatter, linter, and security scans. - Ensure commit messages explain *why*, not just *what*. ### Error Handling - Fail fast with descriptive

rustfinityCLAUDE.md

rustfinity

rustfinity/rustfinity/CLAUDE.md

tool for downloading and submitting challenges locally - **crates/rustfinity-runner**: Test runner that executes code in secure Docker containers - **crates/syntest**: Syntax-based testing library using Rust AST analysis ## Build and Test Commands

nohajcCLAUDE.md

anylinuxfs

nohajc/anylinuxfs/CLAUDE.md

builder/` — **Unmaintained.** Do not modify. ## Known Context See [GEMINI.md](GEMINI.md) for additional architectural context, security model, platform details, and workflow rules

soimyCLAUDE.md

clawdbot-channel-dingtalk

soimy/clawdbot-channel-dingtalk/CLAUDE.md

singleton. ### Core Module Responsibilities - **`src/channel.ts`** — Assembly layer only. Defines `dingtalkPlugin` (config, gateway, outbound, status, security, messaging, directory). Delegates all heavy logic to service modules. Keep this file thin. - **`src/gateway/inbound-handler.ts`** — Inbound

mediar-aiCLAUDE.md

terminator

mediar-ai/terminator/CLAUDE.md

integration - See `examples/simple_notepad_workflow/` for best practices - If CLI shows "(no parser)" → check `workflow_typescript.rs:379-398` **Security:** - ❌ **NEVER use `#id` selectors** (non-deterministic across machines) - ❌ Don't commit credentials - ✅ Use `role:Type

cachixReads credentialsCLAUDE.md

secretspec

cachix/secretspec/CLAUDE.md

Available Providers" table 4. `docs/src/content/docs/reference/providers.mdx` - Add a provider section **and** a row in the "Security Considerations" table 5. `docs/src/pages/index.astro` - Add to the `providerMetadata` array (top of file

actionbookReads credentialsCLAUDE.md

actionbook

actionbook/actionbook/CLAUDE.md

fields — otherwise concurrent sessions produce indistinguishable logs. Level controlled via `RUST_LOG` or `--verbose`. --- ### Security & Feature Boundaries - **CDP method security levels.** L1: read-only (screenshot, DOM read). L2: modification (click

DockerCLAUDE.md

mcp-gateway

docker/mcp-gateway/CLAUDE.md

Overview This is the **Docker MCP Gateway** - a CLI plugin that enables easy and secure running of Model Context Protocol (MCP) servers through Docker containers. The plugin acts

No other project uses it yet

archestra-aiCLAUDE.md

OpenAPPA

archestra-ai/OpenAPPA/CLAUDE.md

operation), *turn*, *tool call*, *emission*, *actor/agent*, and *harness*. Use the classical IFC or security term when it adds precision or establishes lineage, and gloss it for public readers at first

No other project uses it yet

iotexprojectCLAUDE.md

iotex-core / consensus

iotexproject/iotex-core/consensus/CLAUDE.md

proposer/endorser-is-a-valid-delegate checks run before `ProduceReceiveBlockEvent` etc. are emitted (`rolldpos.go`). Reordering this is a security break. ### Do not retain endorsements past round start - `endorsementmanager.go` discards endorsements older than the current round

Flux159CLAUDE.md

mcp-server-kubernetes

Flux159/mcp-server-kubernetes/CLAUDE.md

that's needed — CD handles the version bump, publish, and asset uploads from there. ## Security Fixes and Coordinated Disclosure When a change fixes a security issue tracked by a GHSA

amdReads credentialsCLAUDE.md

gaia

amd/gaia/CLAUDE.md

Never restate part 1 inside it. Two things are never collapsed: a 🔒 security finding with the @kovtcharov-amd tag, and a PR's Test plan. ### The shape ❌ **Technical-first

tom-james-watsonCLAUDE.md

breaktimer-app

tom-james-watson/breaktimer-app/CLAUDE.md

Settings, etc.) - **Styling**: CSS with Tailwind CSS - **Sounds**: Audio files for notifications - **Preload**: `preload.js` - Secure IPC bridge - **Fonts**: Inter font bundled in `public/fonts/` ### Types (`app/types/`) - Shared TypeScript definitions

silversteinCLAUDE.md

minutes

silverstein/minutes/CLAUDE.md

capture + streaming) │ │ ├── transcribe.rs # Batch transcription: whisper.cpp. Retained Parakeet config resolves to Whisper until secure transport exists │ │ ├── diarize.rs # Speaker diarization + attribution types (pyannote-rs, or energy-based from per-source stems

six2dezCLAUDE.md

burp-ai-agent

six2dez/burp-ai-agent/CLAUDE.md

exposes Burp operations to external AI agents over the Model Context Protocol (MCP). Targets security professionals running Burp Community or Professional on macOS / Linux / Windows. **Core Value:** Bring modern

nats-ioCLAUDE.md

nats.rs

nats-io/nats.rs/CLAUDE.md

fully async, Tokio-based client. > **The `nats` crate (synchronous client) is deprecated.** It receives security fixes only. All new > work happens in `async-nats`. Do not modify the `nats/` directory

AltanSCLAUDE.md

collie

AltanS/collie/CLAUDE.md

keeps the daily cadence.** A patch the operator must take today, data loss, a security fix, a broken update path, may carry ONE line directly under the release heading