~ / rigs / dotkernel / dotboost

dotkernel/dotboost

Dotkernel Boost accelerates AI-assisted development by providing the essential context and structure that AI needs to generate high-quality, Dotkernel-specific code.

↗ GitHub ★ 9 no license updated 14d ago project Claude Code

share on X

ARCHETYPE

Fort Knox

Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.

CONTEXT TAX · EVERY TURN

~457 tokens

Featherweight · median rig: 2.3k · breakdown

GUARDRAILS

5/5

Blocks destructive commands · Protects secrets · Pre-tool screening hook · No YOLO mode · Sandbox or ask-first rules · details

Copy this rig

# review before running: this installs third-party code
$ npx degit dotkernel/dotboost/.claude ./rig-dotboost  # inspect, then merge into .claude/

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "permissions": {
    "deny": [
      "Bash(composer require:*)",
      "Bash(composer remove:*)",
      "Bash(composer update:*)",
      "Bash(composer install:*)",
      "Bash(composer global:*)",
      "Bash(npm install:*)",
      "Bash(npm i:*)",
      "Bash(npm ci:*)",
      "Bash(npm uninstall:*)",
      "Bash(npm update:*)",
      "Bash(yarn add:*)",
      "Bash(yarn remove:*)",
      "Bash(pnpm add:*)",
      "Bash(pnpm remove:*)",
      "Bash(git push:*)",
      "Bash(git reset --hard:*)",
      "Bash(git clean:*)",
      "Bash(git submodule:*)",
      "Bash(rm -rf:*)",
      "Edit(composer.json)",
      "Edit(composer.lock)",
      "Edit(package.json)",
      "Edit(package-lock.json)",
      "Edit(vendor/**)",
      "Edit(node_modules/**)",
      "Edit(data/**)",
      "Edit(log/**)",
      "Edit(public/uploads/**)",
      "Edit(**/Migration/**)",
      "Edit(**/Migrations/**)",
      "Edit(**/*.local.php)",
      "Edit(config/autoload/local.php)",
      "Edit(config/autoload/local.test.php)",
      "Write(composer.json)",
      "Write(composer.lock)",
      "Write(package.json)",
      "Write(vendor/**)",
      "Write(node_modules/**)",
      "Write(data/**)",
      "Write(log/**)",
      "Write(public/uploads/**)",
      "Write(**/Migration/**)",
      "Write(**/Migrations/**)",
      "Read(.env)",
      "Read(**/*.local.php)",
      "Read(config/autoload/local.php)",
      "Read(config/autoload/local.test.php)",
      "Read(data/oauth/**)"
    ],
    "ask": [
      "Bash(php ./vendor/bin/doctrine-migrations:*)",
      "Bash(vendor/bin/doctrine-migrations:*)",
      "Bash(php bin/doctrine:*)",
      "Bash(php ./bin/doctrine:*)",
      "Bash(php bin/cli.php:*)",
      "Bash(mysql:*)",
      "Bash(mariadb:*)",
      "Bash(git commit:*)",
      "Bash(git add:*)",
      "Bash(git checkout:*)",
      "Bash(git rebase:*)",
      "Bash(git merge:*)",
      "Edit(config/pipeline.php)",
      "Edit(config/config.php)",
      "Edit(config/autoload/authorization.global.php)",
      "Edit(config/autoload/authorization-guards.global.php)",
      "Edit(phpcs.xml)",
      "Edit(phpstan.neon)",
      "Edit(phpunit.xml)",
      "Edit(.github/**)",
      "Edit(CHANGELOG.md)",
      "Edit(README.md)",
      "Edit(SECURITY.md)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Edit|Write|MultiEdit|NotebookEdit",
        "hooks": [
          {
            "type": "command",
            "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/guard-protected-paths.sh\""
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/guard-bash.sh\""
          }
        ]
      }
    ]
  }
}

Skills (18)

dependency-policy dotkernel-application-variants dotkernel-core-submodule dotkernel-doctrine-entities dotkernel-dot-maker dotkernel-evolution-pattern dotkernel-feature-docs dotkernel-handler-naming dotkernel-input-validation dotkernel-module-structure dotkernel-openapi dotkernel-package-status dotkernel-psr-standards dotkernel-qa-gate dotkernel-responses dotkernel-security dotkernel-testing dotkernel-troubleshooting

Subagents (1)

dotkernel-reviewer

model: inherit

Reviews changes in any Dotkernel application (API, Admin, Frontend, Light, Queue or a derived project) against that project's structure, naming, contract-evolution, security and PSR conventions. Use p

Hooks (6)

event	matcher	runs
SessionStart	startup\|resume\|clear	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/session-start.sh"
PreToolUse	Edit\|Write\|MultiEdit\|NotebookEdit	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/guard-protected-paths.sh"
PreToolUse	Bash	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/guard-bash.sh"
PostToolUse	Edit\|Write\|MultiEdit	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/normalize-file.sh"
PostToolUse	Edit\|Write\|MultiEdit	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/php-lint.sh"
PostToolUse	Edit\|Write\|MultiEdit	bash "$CLAUDE_PROJECT_DIR/.claude/hooks/markdown-lint.sh"

Slash commands (10)

/dk-bootstrap/dk-check/dk-deprecate/dk-document/dk-hygiene/dk-module/dk-review/dk-route/dk-test/dk-trace

Permissions

deny (48)

Bash(composer require:*)

Bash(composer remove:*)

Bash(composer update:*)

Bash(composer install:*)

Bash(composer global:*)

Bash(npm install:*)

Bash(npm i:*)

Bash(npm ci:*)

Bash(npm uninstall:*)

Bash(npm update:*)

Bash(yarn add:*)

Bash(yarn remove:*)

Bash(pnpm add:*)

Bash(pnpm remove:*)

Bash(git push:*)

Bash(git reset --hard:*)

Bash(git clean:*)

Bash(git submodule:*)

Bash(rm -rf:*)

Edit(composer.json)

Edit(composer.lock)

Edit(package.json)

Edit(package-lock.json)

Edit(vendor/**)

Edit(node_modules/**)

Edit(data/**)

Edit(log/**)

Edit(public/uploads/**)

Edit(**/Migration/**)

Edit(**/Migrations/**)

Edit(**/*.local.php)

Edit(config/autoload/local.php)

Edit(config/autoload/local.test.php)

Write(composer.json)

Write(composer.lock)

Write(package.json)

Write(vendor/**)

Write(node_modules/**)

Write(data/**)

Write(log/**)

Write(public/uploads/**)

Write(**/Migration/**)

Write(**/Migrations/**)

Read(.env)

Read(**/*.local.php)

Read(config/autoload/local.php)

Read(config/autoload/local.test.php)

Read(data/oauth/**)

ask (23)

Bash(php ./vendor/bin/doctrine-migrations:*)

Bash(vendor/bin/doctrine-migrations:*)

Bash(php bin/doctrine:*)

Bash(php ./bin/doctrine:*)

Bash(php bin/cli.php:*)

Bash(mysql:*)

Bash(mariadb:*)

Bash(git commit:*)

Bash(git add:*)

Bash(git checkout:*)

Bash(git rebase:*)

Bash(git merge:*)

Edit(config/pipeline.php)

Edit(config/config.php)

Edit(config/autoload/authorization.global.php)

Edit(config/autoload/authorization-guards.global.php)

Edit(phpcs.xml)

Edit(phpstan.neon)

Edit(phpunit.xml)

Edit(.github/**)

Edit(CHANGELOG.md)

Edit(README.md)

Edit(SECURITY.md)

allow (29)

Bash(composer check)

Bash(composer cs-check)

Bash(composer cs-fix)

Bash(composer static-analysis)

Bash(composer test)

Bash(composer clear-config-cache)

Bash(composer development-status)

Bash(composer dump-autoload)

Bash(php ./vendor/bin/phpcs:*)

Bash(php ./vendor/bin/phpcbf:*)

Bash(php ./vendor/bin/phpstan:*)

Bash(php ./vendor/bin/phpunit:*)

Bash(markdownlint-cli2:*)

Bash(./node_modules/.bin/markdownlint-cli2:*)

Bash(php -l:*)

Bash(php -v)

Bash(php -m)

Bash(date +%F)

Edit(docs/features/**)

Write(docs/features/**)

Edit(documentation/features/**)

Write(documentation/features/**)

Bash(git status:*)

Bash(git diff:*)

Bash(git log:*)

Bash(git show:*)

Bash(git branch:*)

Bash(git ls-files:*)

Bash(git config --get:*)

Context tax

Instructions: 0MCP tool schemas (est.): 0Skill metadata: 370Subagent metadata: 87

ALWAYS-LOADED FILES (claude-code)

No root instruction file.

Estimate: characters ÷ 4 for instruction files and skill/subagent descriptions; MCP schema sizes from typical tool counts. Harnesses with deferred tool loading pay less. Method

Guardrails 5/5

✓

Blocks destructive commands

4 deny/ask rule(s) e.g. Bash(git push:*)

✓

Protects secrets

Denies reads like Read(.env)

✓

Pre-tool screening hook

2 PreToolUse hook(s)

✓

No YOLO mode

Permission prompts stay on

✓

Sandbox or ask-first rules

23 ask rule(s), e.g. Bash(php ./vendor/bin/doctrine-migrations:*)

Badge

Add to your README:

[![AgentRigs](https://agentrigs.dev/badge/rig/dotkernel/dotboost.svg)](https://agentrigs.dev/r/dotkernel/dotboost)

Indexed from commit c1d2d6f51f0b on 2026-10-09. Data is structure only — env values and anything secret-looking are stripped.

Similar rigs

ruvnet/ruflo

🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native

★ 74.1k project Claude CodeCodex 5 mcp 136 skills 80 agents 20 hooks 1d ago

Fort Knox 35.3k tok ·

Donchitos/Claude-Code-Game-Studios

Turn Claude Code into a full game dev studio — 49 AI agents, 72 workflow skills, and a complete coordination system mirroring real studio hierarchy.

★ 25.9k project Claude Code 73 skills 49 agents 12 hooks 1d ago

Fort Knox 11.6k tok ·

FlorianBruniaux/claude-code-ultimate-guide

The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.

★ 6,094 project Claude CodeCodexCopilot 8 mcp 80 skills 6 agents 9 hooks 6d ago

Fort Knox 33.8k tok ·

trailofbits/claude-code-config

Opinionated defaults, documentation, and workflows for Claude Code at Trail of Bits

★ 2,120 setup Claude Code 2 hooks 2mo ago

Fort Knox 0 tok ·