Ordre 5 (wave 1, P11 + P5), review_version 1.1. - K7: `verdict: ALLOW | WARN | BLOCK` is required in review.md (strict error, soft warning for 1.0 reviews). New CLI lib/review/verdict-gate.mjs: 0 = ALLOW/WARN, 1 = BLOCK, 2 = could not decide (never green); a verdict greener than the file's own BLOCKERs or JSON block is exit 2. Realpath main guard (the old file:// guard exits 0 under a symlink - measured). - No finding is struck for length: succinctness trims only MINOR/SUGGESTION text (catalogue tier), keeps BLOCKER/MAJOR whole, counts trims; the coordinator lists what it declined to judge. - Claude Code's /code-review and /security-review run as the engine via the Skill tool (never --fix/--comment/--post/ultra); lib/review/engine-findings.mjs turns their findings into a reviewer payload; two catalogue keys (CODE_REVIEW_DEFECT, SECURITY_REVIEW_VULNERABILITY), catalogue 12 -> 14. An engine that did not run forbids ALLOW. - Every BLOCKER is written as a numbered `### Step R<n>` with its source finding (strict error REVIEW_MISSING_REMEDIATION_STEP). - P5: lib/review/recurrence.mjs - a finding class in two review.md files (current + git history, no new store) becomes one proposal, routed by the catalogue's memory_route; written only between Voyage markers in .claude/rules/voyage-review-lessons.md under a size budget, CLAUDE.md gets a pointer only; the operator approves every line (Phase 8.7). - Workflow substrate: catalogue enum in step; a missing reviewer or engine forbids ALLOW there too (it returned ALLOW on zero findings before). - Fixtures review-run-A/B said WARN over a BLOCKER; now BLOCK. Borrowed and credited in code: Superpowers (declined-to-judge), ai-native-sdlc (cap only nits; mistake/fix/check), Spec Kit (managed block; converge steps), Pocock (retro routing), Kiro (verdict file + gate; evidence per lesson), Cherny (engine -> brief control order; review -> memory; budget). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
10 KiB
trekplan
Voyage — a contract-driven Claude Code pipeline: brief, research, plan, execute, review, continue. Deep implementation planning and research with specialized agent swarms, external research, adversarial review, session decomposition, disciplined execution, and headless support.
Design principle: Context Engineering — build the right context by orchestrating specialized agents. Each step in the pipeline (brief → research → plan → execute) produces a structured artifact that the next step consumes. The load-bearing benefit is the parallel wall-clock + structured artifact handoffs; main-context relief is asserted-by-design, not measured (Δ ≈ 0 in the one PoC — see docs/T1-synthesis-poc-results.md).
Architecture slot. The plan command auto-discovers
architecture/overview.mdif present — any compatible producer plugs in (the architect plugin is no longer publicly distributed). Migration history (v3.0.0 extraction) → CHANGELOG.md.
Trinity context (informational). Voyage is Tier 1 (per-task) of a three-tier architecture. Asymmetry is a hard invariant: Voyage stays unaware of Tier 2/3; Handover 1 (brief format) is the only integration point, no producer is privileged, and brief-schema changes are breaking for downstream consumers (formalized as a public contract in v5.5.0). Tier 2/3 producer detail + the public contract →
docs/HANDOVER-CONTRACTS.md§Handover 1 (PUBLIC CONTRACT).
Cross-cutting invariant: brief framing must match operator intent. The brief is the pipeline's source of truth; operator intent lives in memory files — the pipeline must not polish a wrong premise. Enforced as the
brief_version 2.2gate (v5.5), all BLOCKER for briefs declaring ≥ 2.2: (1) explicitframing: preserve|refine|replace|new-directionfrontmatter,AskUserQuestion-validated in/trekbriefPhase 2.5; (2) memory-alignment asbrief-reviewerdimension 6; (3) mandatory## TL;DR. Existing 2.0/2.1 briefs stay valid;trekreviewbriefs are exempt. Full implementation + contract evolution →docs/HANDOVER-CONTRACTS.md§Handover 1 (PUBLIC CONTRACT).
Binding rule (operator decision, 2026-09-27): Voyage never starts Claude Code. Nothing Voyage ships may start a Claude Code session or model run: no
claudeCLI line, no Agent SDK, no spawned binary, no launch script. Work that needs another session becomes an order plus a starter line the user gives a session they open themselves (/trekexecutePhase 2.6,lib/util/session-orders.mjs); parallel work inside one session uses subagents. Enforced bytests/lib/no-claude-code-launch.test.mjs; its exemption list holds historical mentions plus one operator instrument (operator decision, 2026-10-02:docs/proevesett.mdtells a person how to run Anthropic's plugin eval tool on the fixed test set; Voyage itself starts nothing), each with a reason and an exact count.
Commands
| Command | Description | Orchestrator model |
|---|---|---|
/trekbrief |
Brief — interactive interview produces a task brief with explicit research plan; ends with the operator approving ## Intent + ## Goal (--approve <dir> does only that, then writes the trekbrief record); optionally orchestrates the pipeline |
session |
/trekresearch |
Research — deep local + external research, produces structured research brief. Opt-in --engine {swarm|deep-research} delegates the external phase to Claude Code's built-in /deep-research workflow (swarm default) |
session |
/trekplan |
Plan — brief-reviewer, explore, plan, review. Requires --brief or --project; halts unless the brief's intent is approved (hash-bound, stale on edit). Auto-discovers architecture/overview.md if present |
session |
/trekexecute |
Execute — disciplined plan/session-spec executor with failure recovery | session |
/trekreview |
Review — a gate: Claude Code's /code-review + /security-review as engine, then Voyage's brief control (which stops); writes review.md with a required verdict that lib/review/verdict-gate.mjs decides on (0 ALLOW/WARN · 1 BLOCK · 2 never green); proposes recurring finding classes as project memory, line by line (Handover 6) |
session |
/trekcontinue |
Continue — resumes the next session of a multi-session voyage project. Reads .session-state.local.json (Handover 7) and immediately begins executing |
session |
/trekendsession |
End-session — mark the current session complete and write session-state pointing at the next session. Helper for informal multi-session flows | session |
session = command frontmatter pins no model: (since v5.9.0), so the orchestrator follows the session model; sub-agent models come from the profile (see Model & effort below).
Full flag reference for each command (modes, --gates, --profile, breaking changes): see docs/command-modes.md.
STORM bounded loop — default-off, env-gated.
/trekresearchPhase 4.5 (dimension discovery, under the existingmaxDimensions: 8ceiling) and Phase 5 (bounded multi-turn follow-up) run only ateffort: highand only whenVOYAGE_STORM_ENABLED=1; unset, both are inert — Phase 5 becauselib/util/research-loop-cap.mjsgrants a budget of 0, Phase 4.5 because its skip-guard reads the flag directly (it never calls the cap).TREKRESEARCH_MAX_CONV_TURNS(default3, invalid values fall back to3) sets turns per dimension; the budget is that ×maxDimensions.VOYAGE_DISABLE_CAP_HOOK=1switches offhooks/scripts/pre-agent-cap.mjs, thePreToolUsegate that enforces the budget in the harness rather than trusting prose. The cap counts turns from its own append-only ledger. Adoption as a default is gated on the pre-registered measurement indocs/storm-measurement.md— decline is a no-op, adopt is one constant.
Review is a gate (review_version 1.1).
verdict:is required inreview.md(K7); exit 2 from the verdict gate is never green. No finding is struck for length — only MINOR/SUGGESTION text is trimmed, and counted. Project-memory lines are written only between Voyage's markers in the target repo's.claude/rules/voyage-review-lessons.md, each one operator-approved. Contract →docs/HANDOVER-CONTRACTS.md§Handover 6.
Agents
| Agent | Model | Role |
|---|---|---|
| planning-orchestrator | opus | Inline reference documentation for the planning pipeline workflow (brief-driven) |
| research-orchestrator | opus | Inline reference documentation for the research pipeline workflow |
| review-orchestrator | opus | Inline reference documentation for the review pipeline workflow |
| architecture-mapper | opus | Codebase structure, tech stack, patterns |
| dependency-tracer | opus | Import chains, data flow, side effects |
| task-finder | opus | Task-relevant files, functions, reuse candidates |
| risk-assessor | opus | Risks, edge cases, failure modes |
| test-strategist | opus | Test patterns, coverage gaps, strategy |
| git-historian | opus | Recent changes, ownership, hot files |
| research-scout | opus | External docs for unfamiliar tech (conditional, planning only) |
| convention-scanner | opus | Coding conventions: naming, style, error handling, test patterns |
| brief-reviewer | opus | Task brief quality (6 dimensions: completeness, consistency, testability, scope clarity, research plan validity, memory alignment) |
| brief-conformance-reviewer | opus | Brief conformance review (SC + Non-Goal traceability) |
| code-correctness-reviewer | opus | Code correctness review (7 dimensions) |
| review-coordinator | opus | Judge Agent — dedup + reasonableness filter + verdict |
| plan-critic | opus | Adversarial plan review (10 dimensions) |
| scope-guardian | opus | Scope alignment (creep + gaps) |
| session-decomposer | opus | Splits plans into headless sessions with dependency graph |
| synthesis-agent | opus | Distills Phase-5/7 exploration outputs into a findings digest (NW3 PoC — dormant, not wired; delegating Phase 7 alone yields Δ main-context ≈ 0, see docs/T1-synthesis-poc-results.md) |
| docs-researcher | opus | Official documentation, RFCs, vendor docs (Tavily, MS Learn) |
| community-researcher | opus | Community experience: issues, blogs, discussions |
| security-researcher | opus | CVEs, audit history, supply chain risks |
| contrarian-researcher | opus | Counter-evidence, overlooked alternatives |
Inventory (S33 reconcile, updated v5.10.1). 23 agent files = 20 spawnable (one,
synthesis-agent, ships dormant — Δ≈0, wired to nothing) + 3 orchestrator reference docs (planning-/research-/review-orchestratordocument the inline/trek*workflow, not spawnable capabilities). All 23 staymodel: opus(operator pin40d8742); the glue/mechanical/retrieval/dormant roles were reconsidered for a sonnet downgrade and kept opus — decision record:docs/voyage-vs-cc-balance-analysis.md§10.
Model & effort. On the Anthropic API,
opus= Opus 5.5 andsonnet= Sonnet 5.5 (both default reasoning effortmedium);fable= Fable 5.1 (the most capable model in Claude Code; defaulthigh, so xhigh must be chosen explicitly). An agent withouteffort:inherits the session level. Eight agents pin native per-spawneffort: highand the rest follow the session; none pins belowhigh— a different axis from briefphase_signals.effort(orchestration shape: which agents/passes run). Per-agent table + axes →docs/profiles.md§Model & effort axes.
Reference docs (read on demand)
- Architecture, workflows, project-directory contract, state, terminology:
docs/architecture.md - Quality infrastructure (
lib/validators, parsers, autonomy primitives, hooks):docs/architecture.md§Quality infrastructure - Autonomy gates (
--gates), Path A/B/C decision:docs/operations.md - Profile system (
--profile economy/balanced/premium/fable), lookup order, custom profiles:docs/operations.md - Observability (Stop hook, OTLP/textfile export, SSRF mitigation):
docs/operations.md - Handover contracts (the 7 pipeline handovers):
docs/HANDOVER-CONTRACTS.md