Checks that defend themselves
The state file is signed: edit it by hand and every command refuses until you choose to keep the change or restore the last good copy (repair --accept or --restore). Evidence that names a missing file, or a command that cannot fail, is refused. Four checks (go-no-go, system-design-read, architecture-explained, promo-rendered) can only be passed by a person pressing Confirm in the dashboard. Claude cannot edit or read the key files.
Tamper-evident and accident-proof, not a sandbox: a process that already has your shell can do what you can.
A check before every push
scripts/check.sh runs the whole test suite, the plugin validator, shell and JavaScript syntax and confirms the generated site data is current. scripts/install-git-hooks.sh makes it run before each git push, and the same script runs on GitHub when Actions is available.
Hyperfigure: explain an idea as a working object
/hyperskill-figure builds an interactive isometric figure: a cache key as a pin-tumbler lock, a rate limiter as a turnstile. It has a drawing kit (SVG, WebGL, optional 3D), nine worked examples and audits. Derived from Anatomy by Ryan (MIT); the notice stays with it. Needs Node 20.10+ and Chrome for its checks.
Ten visual styles, with build rules
Skeuomorphism, Neumorphism, Glassmorphism, Claymorphism, Brutalism, Minimalism, Maximalism, Liquid Glass, Bento Grid and Spatial UI. Each has a recipe, its traps and the checks it must pass (style-recipes.md), plus a designed example to play and try live in the dashboard. One style per product: a pick here replaces a pick from the long list.
Helper agents, priced by difficulty
Work is split into tasks and each goes to the cheapest helper that can do it well: Haiku for lookups, Sonnet at medium or high effort for coding, Opus for architecture and review. Tasks that touch the same files never run together, a failed task moves up a tier, and every tier's model and effort can be changed per project from the dashboard to keep a project cheap.
Opt-in tools, not bundled
last30days (what people said in the last 30 days, as evidence, never as proof of demand), Scrapling (bulk public data, within each site’s terms, never to get past bot protection) and REA (analysing a bundle you ship). Each is registered with its risks and does nothing until you ask. Diagram Design, Hallmark and Humanizer are bundled unmodified.
Self-hosted building blocks
GlitchTip (errors), Gotify (alerts), Windmill (automation), Vikunja (tasks), celld and RAG-Anything (questions over your own documents). Each is a tracked check with its licence caveat written next to it and a plain description of what “done” means, including the cost of running it yourself.
Honest about its limits
Tests cover the tracker, registry, hooks, dashboard and site, not model behaviour. Windows and macOS are untested, third-party skill text was read at README level, and the LibreOffice route of hs-convert could not be run in the build sandbox. The full list is under Limits.