my-ai-coding-workflow

agent
Security Audit
Warn
Health Warn
  • No license — Repository has no license file
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 25 GitHub stars
Code Warn
  • Code scan incomplete — No supported source files were scanned during light audit
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

Production-grade AI coding instructions, curated skills, and a 3-stage review pipeline (Planning → Critical Review → Diff Audit) built after 4,500+ hours with AI agents. Agent-agnostic.

README.md

I Spent 4,500+ Hours Coding with AI. This Is the Claude Code Setup I Ended Up With.

The engineering instructions, curated skills, and three-stage review workflow I use to keep AI-assisted development fast, controlled, and verifiable.


Table of Contents


1. The Story Behind This Setup

This repository is not a speculative prompt collection.

It is the setup I arrived at after spending an estimated 4,500+ hours actively building, debugging, refactoring, and deploying software alongside AI coding agents.

[!NOTE]
The 4,500+ hours figure is a personal working estimate based on roughly six productive hours per day over a little more than two years of daily engineering work. It is not tracked automated telemetry.

The Tooling Journey

My day-to-day workflow evolved across multiple waves of AI developer tooling:

  • Cursor for inline completions and multi-file agent edits.
  • Claude Code CLI for autonomous terminal-driven task loops and micro-diff inspections.
  • Antigravity IDE & Gemini CLI for multi-agent workflows, skill architectures, and background automations.
  • Codex, OpenCode, and Amazon Q, exploring how different models reason about API contracts, context limits, and tool-calling.

I do not claim equal usage across all these platforms. What became clear through thousands of hours across all of them was a universal pattern:

Unconstrained AI coding agents fail predictably.
They suffer from confirmation bias, over-engineer simple utilities into speculative generic frameworks, write code against hallucinated APIs, quietly reformat adjacent files, and declare "tests pass!" without actually executing them.

This repository represents the guardrails, prompts, and behavioral directives I built to reduce those failure modes. It is a practical, personal setup designed for real production work.


2. Core Engineering Philosophy

Principle Why It Matters in AI-Assisted Engineering
1. Correctness Over Speed An agent that writes 500 lines in 10 seconds is a liability if 20 of those lines introduce silent race conditions or break API contracts.
2. Simplicity (Ponytail & YAGNI) Models reflexively invent factory patterns, wrappers, and speculative abstractions. We enforce the minimal surgical code that solves the problem.
3. Plan Before Implementation Forcing an agent to inspect the codebase and write an approved plan first prevents the classic "edit 12 files blindly, break the build, and scramble" loop.
4. Independent Plan Criticism An agent reviewing its own plan in the same turn suffers from self-confirmation bias. Plans must be challenged by an adversarial senior-engineering prompt in a fresh context.
5. Diff Inspection Over Summaries Never trust an agent's conversational summary of what it did. Audit git status, git diff, and git diff --cached. The diff is the only ground truth.
6. Executable Verification Assertions require evidence. An agent must run test suites, reproduction scripts, or dry-runs and output exit codes before claiming completion.
7. Safe Retries & Idempotency State-changing operations must have explicit retry semantics and deduplication. In distributed systems and agent loops, replay safety is mandatory.
8. Deterministic Arithmetic LLMs must never perform mental math on currency, tax, or markups in text. Mathematical operations are strictly delegated to deterministic code.
9. Scoped Tenant Authorization Tools must preserve caller identity and authorization context; agents never execute with ambient root or uncontained privilege.
10. Explicit Blast-Radius Gates Schema migrations, public API contract changes, new third-party dependencies, and destructive shell commands require explicit human sign-off.

Note that the approval gates in CLAUDE.md are behavioral instructions the agent follows, not mechanically enforced security boundaries; real enforcement comes from your coding tool's native permission settings.


3. The Three-Prompt Review Workflow

Rather than allowing an agent to jump straight from user prompt to code editing, non-trivial engineering tasks follow a structured progression:

flowchart TD
    User([Task Request]) --> Classify{Task Lifecycle}
    Classify -->|Spike / Bounded| Quick[Direct TDD & Minimal Fix]
    Classify -->|Architectural / Breaking| Brainstorm[Brainstorm & Spec Approval]
    Brainstorm --> P1[1. Planning Prompt]
    P1 -->|Inspects repo & drafts plan| Plan[Implementation Plan]
    Plan --> P2[2. Critical Plan Review]
    P2 -->|Red-teams assumptions in fresh context| RevPlan[Approved Plan]
    RevPlan --> Code[Implementation & TDD]
    Code --> P3[3. Production Readiness Review]
    P3 -->|Audits git diff, staged files & runs tests| Done([Reviewed & Ready to Merge])

Lifecycle Routing

  • Spike: 1 cheap probe command -> 2-sentence finding.
  • Bounded: Covers isolated repairs and 1-3 file non-breaking enhancements. Propose in chat for approval first if altering public API contracts, database schemas, or financial logic; otherwise execute autonomously.
  • Architectural: Subsystems, multi-service features, or breaking contract changes -> Strictly executes the 3-stage review pipeline below.

Stage 1: Planning (prompts/planning.md)

  • Job: Inspect the repository, map requirements to acceptance criteria, and define how each criterion will be verified.
  • Safety Boundary: Hard instruction: "Stop once the plan is saved and wait for my approval. Do not touch implementation code."
  • What It Prevents: Premature code generation against hallucinated file paths, wrong package versions, or incorrect architectural assumptions.
  • Visual Architecture Modeling: For smaller, direct flows, inline Mermaid diagrams work well. But once an architecture involves multiple services, cross-cutting class dependencies, or evolving business logic, text alone can obscure integration blind spots. In those scenarios, I generate a visual model before locking in an approach. For creating clean, editorial-grade architecture diagrams, I frequently reference Cathryn Lavery's diagram-design.

Stage 2: Critical Plan Review (prompts/critical-plan-review.md)

  • Job: Act as an independent senior principal engineer red-teaming the plan before a single line of code is written. Run in a fresh context or subagent to reduce confirmation bias.
  • Focus: Identifies race conditions, missing error boundaries, timeout policies, idempotency risks, and over-engineering.
  • The YAGNI Brake: Explicitly forces the model to distinguish genuine failure modes from low-probability hypothetical edge cases, stopping speculative complexity before it starts.
  • What It Prevents: The agent confidently executing an architectural flaw that would require a complete rewrite later.

Stage 3: Production Readiness Review (prompts/production-readiness-review.md)

  • Job: Audit the raw git state (git status, git diff, git diff --cached, and untracked files) against the approved plan. Run in a fresh context or subagent.
  • Focus: Hunts for logical bugs, null-pointer boundaries, integration breaks, secrets leakage, and uncommitted artifacts.
  • Remediation Rule: Fix confirmed issues with the smallest targeted edit. If a fix requires architectural changes or alters public contracts, it must pause and ask first.
  • What It Prevents: Merging orphaned untracked files, broken staged diffs, weakened test assertions, or cosmetic reformatting regressions.

4. Curated Skills & Upstream Attribution

Rather than accumulating dozens of overlapping, noisy plugins, this setup incorporates a lean, carefully selected collection of open-source skill packs.

[!TIP]
Global by Design: CLAUDE.md is designed as a global instruction set (used as your global ~/.claude/CLAUDE.md, or adapted for GEMINI.md / agent system prompt) to establish baseline engineering behavior across every project you touch. The three review prompts in prompts/ are your personal operational templates, used as prompt suffixes during non-trivial tasks rather than committed to client codebases.

Superpowers

Repository: obra/superpowers by Jesse Vincent (Obra)
License: MIT

Jesse Vincent's superpowers suite provides foundational process discipline for agentic development:

Skill Upstream Runbook Role in This Setup
using-superpowers skills/using-superpowers Metacontroller establishing workflow discipline at session start.
brainstorming skills/brainstorming Explores user intent, trade-offs, and design before plan authoring.
writing-plans skills/writing-plans Formats structured, measurable implementation plans.
systematic-debugging skills/systematic-debugging Enforces 4-step root cause tracing before proposing fixes to bugs.
test-driven-development skills/test-driven-development Enforces strict Red -> Green -> Refactor cycles for business logic.
verification-before-completion skills/verification-before-completion Mandates running terminal verification commands before claiming success.
requesting-code-review skills/requesting-code-review Performs automated diff reviews checking spec compliance and scope creep.
finishing-a-development-branch skills/finishing-a-development-branch Safely handles branch integration, PR creation, or cleanup without silent merges.

Ponytail

Repository: DietrichGebert/ponytail by Dietrich Gebert
License: MIT

AI models inherently generate boilerplate. If you ask for a date utility, they may install moment.js or write a generic time-travel class. ponytail enforces the "Lazy Senior Developer" mindset:

  • The Ponytail Ladder: YAGNI -> Existing codebase utilities -> Standard library -> Native platform APIs -> Installed dependencies -> Minimum working code.
  • Surgical Edits: Modifies only the lines strictly required to satisfy the request. Unrelated formatting or adjacent refactoring is forbidden.
  • Root-Cause Focus: Solves problems where callers originate rather than wrapping symptoms downstream.

I Have ADHD

Repository: ayghri/i-have-adhd by ayghri
License: MIT

This is an interaction and communication preference, not a testing or correctness framework:

  • Lead with the Answer: Direct command, file path, or finding in sentence one.
  • Chunked Information: Caps bullet lists at 5 items to avoid cognitive overload.
  • Externalized Progress: Shows Step X of Y on multi-step migrations.
  • Zero Conversational Noise: Eliminates pleasantries, fake time estimates, and motivational closers.

5. Repository Structure

my-ai-coding-workflow/
├── README.md                      # Architecture, philosophy & attribution
├── CLAUDE.md                      # Master engineering directives (Claude Code & global rules)
└── prompts/
    ├── planning.md                # Stage 1: Codebase inspection & plan draft template
    ├── critical-plan-review.md    # Stage 2: Adversarial plan red-teaming template
    └── production-readiness-review.md # Stage 3: Diff-grounded code & test audit template
  • CLAUDE.md is the master reference template for your engineering directives and rules. In Claude Code, place it in your global ~/.claude/CLAUDE.md. It applies across every project you touch (backend, frontend, microservices) without polluting individual repositories.
  • prompts/ contains the three sequential review prompts. Store them in your personal prompt manager, notes, or IDE snippets to append as prompt suffixes during architectural builds.

6. Adoption Guide

Step 1: Set Up Global Directives

Instead of committing configuration files to every project repository, set up CLAUDE.md once in your global AI coding agent configuration:

  • Claude Code CLI: Copy CLAUDE.md to your global ~/.claude/CLAUDE.md.
  • Gemini CLI / Antigravity: Add these directives to your global ~/.gemini/GEMINI.md.
  • Cursor: Paste the directives into Cursor Settings > Rules (User Rules).

Every repository you open will immediately inherit the lifecycle routing, risk approval gates, Ponytail ladder, idempotency, and verification rules.

Step 2: Use the Three Prompts as Suffixes

Keep the files in prompts/ in your personal prompt toolkit or snippet manager. When working on non-trivial architectural changes, use them as prompt suffixes:

  1. When planning a feature: Append the contents of prompts/planning.md to your prompt:
    <Your task description>
    ---
    <Append prompts/planning.md>
    
  2. When red-teaming the plan: Open a fresh context or subagent, paste the draft plan, and append prompts/critical-plan-review.md.
  3. Before merging or completing: Run a final check by prompting the agent with prompts/production-readiness-review.md to audit the raw git diff and verify passing tests.

7. Credits

All upstream skills and referenced tooling belong to their respective creators and are used under their original open-source licenses:

Built by Vaibhav through thousands of hours of building real systems with AI agents.

Reviews (0)

No results found