CLAUDE.md examples from real projects

easysoftCLAUDE.md

zentaopms

easysoft/zentaopms/CLAUDE.md

Uses strict types declaration in newer files - Extensive use of custom framework classes ### Security - Custom authentication and authorization system - Input filtering via `lib/filter/` - SQL injection protection through DAO layer ### Performance

tinyfish-ioReads credentialsCLAUDE.md

bigset / backend

tinyfish-io/bigset/backend/CLAUDE.md

other datasets; `authContext` (Clerk userId + workflow run id) is captured for caller-attribution in security logs and the `CAPABILITY_VIOLATION` PostHog event. See the security note

userdocsCLAUDE.md

qbittorrent-nox-static

userdocs/qbittorrent-nox-static/CLAUDE.md

technical expert in Bash scripting. Follow the guidelines in CLAUDE.md exactly. Prioritize secure, robust, and efficient code using proper quoting, error handling, and the "do one thing well" philosophy. Never

FOGProjectDeletes or force-pushesCLAUDE.md

fogproject

FOGProject/fogproject/CLAUDE.md

files: the config, cache, SSL certs, the published CA, compiled `.mo` files, and the Secure Boot signed artifacts - **Do NOT run this after `copybacktrunk.sh`** — it will overwrite git with

rustfinityCLAUDE.md

rustfinity

rustfinity/rustfinity/CLAUDE.md

tool for downloading and submitting challenges locally - **crates/rustfinity-runner**: Test runner that executes code in secure Docker containers - **crates/syntest**: Syntax-based testing library using Rust AST analysis ## Build and Test Commands

nextify-limitedReads credentialsCLAUDE.md

libra

nextify-limited/libra/CLAUDE.md

Management**: Built-in usage tracking and billing integration - **Sandbox Execution**: E2B and Daytona for secure code execution - **Context Management**: Smart context handling for AI conversations ## Local Service Addresses When running

naomiaroCLAUDE.md

waveform-playlist

naomiaro/waveform-playlist/CLAUDE.md

closure, check WHICH section a workspace ref lives in before suspecting a missed bump. **Security-key-only 2FA (since 2026-10-28): `changeset publish` cannot publish from this session

whitphxCLAUDE.md

stlite

whitphx/stlite/CLAUDE.md

latest CPython patch release of that minor to pick up security fixes. Renovate opens patch-only PRs for `.python-version`, and the `check-python-version` CI job (`.github/scripts/check-python-version.sh`) fails when

mozillaReads credentialsCLAUDE.md

kitsune

mozilla/kitsune/CLAUDE.md

include='*.html'`) and remove every reference — a missed one fails the build with `TemplateNotFound`. ## Security — GroupProfile visibility (CRITICAL) `GroupProfile` has three visibility levels (PUBLIC, PRIVATE, MODERATED). Django's `User.groups` returns

nohajcCLAUDE.md

anylinuxfs

nohajc/anylinuxfs/CLAUDE.md

builder/` — **Unmaintained.** Do not modify. ## Known Context See [GEMINI.md](GEMINI.md) for additional architectural context, security model, platform details, and workflow rules

lst97CLAUDE.md

claude-code-sub-agents

lst97/claude-code-sub-agents/CLAUDE.md

tests for new logic, both UI and API. **Before committing:** - Run formatter, linter, and security scans. - Ensure commit messages explain *why*, not just *what*. ### Error Handling - Fail fast with descriptive

soimyCLAUDE.md

clawdbot-channel-dingtalk

soimy/clawdbot-channel-dingtalk/CLAUDE.md

singleton. ### Core Module Responsibilities - **`src/channel.ts`** — Assembly layer only. Defines `dingtalkPlugin` (config, gateway, outbound, status, security, messaging, directory). Delegates all heavy logic to service modules. Keep this file thin. - **`src/gateway/inbound-handler.ts`** — Inbound

mediar-aiCLAUDE.md

terminator

mediar-ai/terminator/CLAUDE.md

integration - See `examples/simple_notepad_workflow/` for best practices - If CLI shows "(no parser)" → check `workflow_typescript.rs:379-398` **Security:** - ❌ **NEVER use `#id` selectors** (non-deterministic across machines) - ❌ Don't commit credentials - ✅ Use `role:Type

cachixReads credentialsCLAUDE.md

secretspec

cachix/secretspec/CLAUDE.md

Available Providers" table 4. `docs/src/content/docs/reference/providers.mdx` - Add a provider section **and** a row in the "Security Considerations" table 5. `docs/src/pages/index.astro` - Add to the `providerMetadata` array (top of file

archestra-aiCLAUDE.md

OpenAPPA

archestra-ai/OpenAPPA/CLAUDE.md

operation), *turn*, *tool call*, *emission*, *actor/agent*, and *harness*. Use the classical IFC or security term when it adds precision or establishes lineage, and gloss it for public readers at first

No other project uses it yet

actionbookReads credentialsCLAUDE.md

actionbook

actionbook/actionbook/CLAUDE.md

fields — otherwise concurrent sessions produce indistinguishable logs. Level controlled via `RUST_LOG` or `--verbose`. --- ### Security & Feature Boundaries - **CDP method security levels.** L1: read-only (screenshot, DOM read). L2: modification (click

DockerCLAUDE.md

mcp-gateway

docker/mcp-gateway/CLAUDE.md

Overview This is the **Docker MCP Gateway** - a CLI plugin that enables easy and secure running of Model Context Protocol (MCP) servers through Docker containers. The plugin acts

No other project uses it yet

amdReads credentialsCLAUDE.md

gaia

amd/gaia/CLAUDE.md

Never restate part 1 inside it. Two things are never collapsed: a 🔒 security finding with the @kovtcharov-amd tag, and a PR's Test plan. ### The shape ❌ **Technical-first

No other project uses it yet

iotexprojectCLAUDE.md

iotex-core / consensus

iotexproject/iotex-core/consensus/CLAUDE.md

proposer/endorser-is-a-valid-delegate checks run before `ProduceReceiveBlockEvent` etc. are emitted (`rolldpos.go`). Reordering this is a security break. ### Do not retain endorsements past round start - `endorsementmanager.go` discards endorsements older than the current round

Flux159CLAUDE.md

mcp-server-kubernetes

Flux159/mcp-server-kubernetes/CLAUDE.md

that's needed — CD handles the version bump, publish, and asset uploads from there. ## Security Fixes and Coordinated Disclosure When a change fixes a security issue tracked by a GHSA