SpecSheriff
No code ships without a rule that warrants it.
SpecSheriff is a method of spec-anchored development, the tools that hold a project to it, and a worked example of it. The specification is a set of small rule nodes, each with a permanent identifier, a reason held apart from the requirement, and a status that says whether the specification's owner has read the wording. Every symbol in the code names the rule it implements, every test declares the rule it verifies, and every commit is checked against the rules it claims to serve — by deterministic checks, and by an independent reviewer that sees only the change and the text of those rules.
Installing it
claude plugin marketplace add non4me/SpecSheriff#release
claude plugin install specsheriff@specsheriff-marketplace
The branch release holds only releases, so a machine never reads the work in progress on main.
In a session, /plugin does the same. From a private fork or mirror, git must already be able to
read the repository with a credential it stores, which the background updates use too; a
GITHUB_TOKEN alone does nothing for them.