Agentic Sdlc Orchestrator
Description
A governed, gated orchestration engine that drives a real Claude agent through a full SDLC: requirements, design, code, tests, docs, and security scanning, with human approval gates, bounded retries, rollback, re-planning, and full audit trails. Proven live by building a real URL shortener across three scenarios.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Agentic SDLC Orchestrator
**The deliverable being evaluated here is the orchestration engine** - a governed, gated, dependency-graph execution system that drives a real Claude agent through a full software delivery lifecycle: understanding a requirement, decomposing it into stages, executing them sequentially and in parallel, gating high-impact decisions on a human, retrying and rolling back on real failure, re-planning around it, and producing an audited, metric-backed trail of everything that happened.
A URL shortener service is the **worked example** the engine is proven against - the "customer" whose SDLC the orchestrator actually ran, live, against the real Anthropic API, three times over (greenfield, brownfield, ambiguous). Every claim below is backed by a real run: a `runId`, a persisted event log, and (for the two code-producing scenarios) a real `mvn test` execution — not a simulated or scripted demo.
Contents
- What was asked for, and where it lives
- Architecture
- Repository layout
- Setup and running it yourself
- Test results
- The three scenarios
- Reliability in practice: what the engine caught, live
- Scope boundaries (deliberate)
What was asked for, and where it lives
| Requirement | Implementation | Evidence |
|---|---|---|
| Requirement understanding | Requirements-Analysis stage — no tools, normalizes the input requirement and states assumptions explicitly rather than guessing |
Scenario 3 below: one vague sentence → an 8-feature-family ambiguity inventory, then a 7-entry assumption register with blast radii once resolved |
| Task decomposition | WorkflowGraph — a fixed 7-stage DAG with explicit dependsOn per stage |
[WorkflowGraph.java](orch |
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,