add-dep
CommandVet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.
Sanctioned lane for non-behavioral work — docs-only edits, dependency bumps, reverts. Type-scaled gates; no TDD demanded of prose.
> /plugin marketplace add arbiterForge/codeArbiter
description: Sanctioned lane for non-behavioral work — docs-only edits, dependency bumps, reverts. Type-scaled gates; no TDD demanded of prose. argument-hint: "<docs|deps|revert> <description or SHA>"
The sanctioned path for work that has no behavioral surface to test-drive. Three types, each with the gates that fit it — and nothing it doesn't need. Everything still exits through `commit-gate` (classification `docs` / `chore` / `revert`) and lands via branch/PR.
**docs** — README, comments, CHANGELOG, `.codearbiter/` prose, typo fixes.
anti-slop copy pass on any user-facing doc in the change; `commit-gate`.
and `docs/**`; not codeArbiter's own framework bodies), load `{{PLUGIN_ROOT}}/includes/anti-slop-design/INDEX.md`, then `core.md` and the `medium-documents` leaf (§7.A.1), and run the §3.A em-dash ban and the §3.B copy self-audit over the authored prose before `commit-gate`. The `H-13` PostToolUse reminder surfaces §3.A separator dashes as you write, so the pass is a confirmation, not a discovery.
**deps** — bump an existing dependency's version (manifest + lockfile together, never one without the other).
supply chain, changelog of the bump); affected local tests green under `{{PLUGIN_ROOT}}/includes/verification-boundary.md`; exhaustive exact-head hosted CI before merge; `commit-gate`.
`{{CMD:feature}}` or `{{CMD:fix}}`.
**revert** — back out a named commit.
`verification-boundary`, exhaustive exact-head hosted CI before merge; the commit message references the reverted SHA and the reason; `commit-gate`.
fixing a defect the suite missed, open `{{CMD:fix}}` afterward to pin it.
1. Classify `$ARGUMENTS` into one of the three types. Anything with a behavioral code change beyond a mechanical revert is NOT a chore — redirect to `{{CMD:feature}}` or `{{CMD:fix}}` and stop. 2. Run the type's gates above. 3. Exit through `commit-gate` with the matching classification, then `finishing-a-development-branch` as usual.
MUST reject a change containing behavioral code (beyond the revert itself) — that is `{{CMD:feature}}` or `{{CMD:fix}}` territory. MUST keep manifest and lockfile changes in the same commit for `deps`. MUST run impact-bounded local verification for `deps` and `revert` and require exhaustive exact-head hosted CI before merge. MUST run the anti-slop copy pass on any user-facing doc a `docs` change authors or edits. Never skips `commit-gate`.
Open-source governance and hard gates for AI coding agents across Claude Code, Codex CLI, and Pi.
Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.
Inspect ADR health read-only; optionally select one ADR with --adr N.
Assemble the governance record for a range — commits, overrides, ADRs, sprint auto-decisions, open questions, checkpoint findings…
Periodic multi-reviewer sweep of the whole codebase — surfaces a triaged checkpoint report.
Implement tasks incrementally — build, test, verify, commit. Add "auto" to run the whole plan in one approved pass.