CLAUDE.md examples from real projects

kaansenol5CLAUDE.md

VibeOS

kaansenol5/VibeOS/CLAUDE.md

mountable on macOS - [x] Interrupts - GIC-400 working! Keyboard via IRQ, boots at EL3 (Secure) - [x] Timer - 10ms tick (100Hz), used for uptime tracking - [x] System Monitor - GUI app showing

Open-Source-LegalCLAUDE.md

OpenContracts

Open-Source-Legal/OpenContracts/CLAUDE.md

issue #820): operational exceptions are caught and returned as error strings to the LLM; security exceptions (`PermissionError`, `ToolConfirmationRequired`) propagate. - Pre-execution checks run on every call (not cached): permission validation

daymadePipes a download into a shellCLAUDE.md

claude-code-skills

daymade/claude-code-skills/CLAUDE.md

commands from another working directory, use the [fixed command entry](daymade-skill/skill-creator/references/fixed-command-entry.md). For security scans, use its [absolute owner-script recipe](daymade-skill/skill-creator/references/publishing-and-packaging.md#step-6-security-review). Before

umputunReads credentialsCLAUDE.md

ralphex

umputun/ralphex/CLAUDE.md

# ralphex Autonomous plan execution with Claude Code - Go rewrite of ralph.py. ## LLM Documentation See

ishaan1013CLAUDE.md

shadow

ishaan1013/shadow/CLAUDE.md

task management. The platform provides both local and remote execution modes with enterprise-grade security. ### Core Architecture **Monorepo Structure** (Turborepo managed): - `apps/frontend/` - Next.js 15 + React 19 application with real-time

ducktorsCLAUDE.md

turborepo-remote-cache

ducktors/turborepo-remote-cache/CLAUDE.md

symbol — callers, callees, which execution flows it participates in — use `context({name: "symbolName"})`. - For security review, `explain({target: "fileOrSymbol"})` lists taint findings (source→sink flows; needs `analyze --pdg`). ## Never

psd-toolsCLAUDE.md

psd-tools

psd-tools/psd-tools/CLAUDE.md

public surface: a new or renamed symbol, a new parameter, a corrected annotation - `[security]` — security fixes - `[docs]` — documentation only - `[ci]` — what a user installs: the wheels, platforms or sdist contents

No other project uses it yet

amir20CLAUDE.md

dtop

amir20/dtop/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

geodroReads credentialsCLAUDE.md

lerd

geodro/lerd/CLAUDE.md

report issues use `Refs #N` and stay open until the stable release ships — **except** security issues, which close once the fix merges to main. - PR/issue comment style: casual plain prose

rmusser01Reads credentialsCLAUDE.md

tldw_server

rmusser01/tldw_server/CLAUDE.md

appropriate HTTP status codes - Provide meaningful error messages - Log errors with context using loguru ### Security Best Practices - Validate all user input - Use parameterized queries for database operations - Never log sensitive

ghostwrightReads credentialsCLAUDE.md

phantom

ghostwright/phantom/CLAUDE.md

docker-entrypoint.sh # Docker bootstrap (wait for deps, model pull, init) docs/ # Documentation (architecture, channels, mcp, security, etc.) ``` ## Architecture Overview Message flow: Slack message -> SlackChannel adapter -> ChannelRouter -> SessionManager (find/create session) -> PromptAssembler (base

kizuna-ai-labCLAUDE.md

sokuji

kizuna-ai-lab/sokuji/CLAUDE.md

# CLAUDE.md This file provides guidance to Claude Code (claude.ai/code) when working with code

jekalminDeletes or force-pushesCLAUDE.md

extended_openai_conversation

jekalmin/extended_openai_conversation/CLAUDE.md

image` (vision API), `change_config` (runtime config updates), `reload_skills`, `download_skill` (from GitHub). ### Security - Workspace restriction for file operations (default: `extended_openai_conversation/`) - Shell command deny patterns

No other project uses it yet

win4rCLAUDE.md

ClawTeam-OpenClaw

win4r/ClawTeam-OpenClaw/CLAUDE.md

DATA_DIR` relocates team/task/inbox state but NOT global config. ## Cross-cutting conventions ### Path discipline (security-critical) Every user-supplied name (team, agent, user, plan ID, inbox recipient…) must flow through

spring-projectsReads credentialsCLAUDE.md

spring-ai-examples

spring-projects/spring-ai-examples/CLAUDE.md

support Implements OAuth2 authentication for weather data access. Resolves rate limiting issues and improves security. ``` **Good (simple):** ``` fix: resolve port conflicts in integration tests ``` **Bad:** ``` 🤖 Generated with Claude Code: Fixed

thalesgroup-certReads credentialsCLAUDE.md

Watcher

thalesgroup-cert/Watcher/CLAUDE.md

test` first, then later into `master`. Minimum 80% test coverage expected for new code. - Security vulnerabilities go through GitHub Security Advisories, not public issues (see `SECURITY.md`). - Full user/admin documentation

akitaonrailsReads credentialsCLAUDE.md

ai-jail

akitaonrails/ai-jail/CLAUDE.md

developer-friendly CLI. ai-jail is a developer-friendly accident guard, not a hard-security or malware/invasion boundary. It defends against a trusted-but-fallible agent's mistakes (a mistyped

nrslibReads credentialsCLAUDE.md

takt

nrslib/takt/CLAUDE.md

fallback-heavy logic. TAKT is a local tool: no audit trails, tamper-resistance, or security theater. - Filenames mostly `kebab-case`. Conventional Commit style with occasional `(#issue)` suffix. - Don't commit

xrplevmCLAUDE.md

node

xrplevm/node/CLAUDE.md

surface) types/ # Core types (address prefixes, denominations) testutil/ # Test helpers tests/ # Integration tests security/ # Security audit scope and threat model ``` ## Security Audits This repo is configured for monthly AI-assisted

marmelabCLAUDE.md

atomic-crm

marmelab/atomic-crm/CLAUDE.md

migration `, states the approval, references that record, and passes the same ` `. The built-in security warning on a relayed approval is expected. - **Wants changes**: dispatch a fresh `orchestrator` with