CoTend

CI License

Pre-release AI development governance framework for people who build software with AI.

CoTend v2.01 is available as a GitHub Open Beta for Codex. The Plugin package version is 2.1.0-beta.1; it is not yet available in the Public Plugin Directory and is not a stable release.

CoTend helps developers keep AI-assisted software projects understandable, verifiable, and under control without having to manually coordinate every development detail. It gives the AI a repeatable way to start or resume a project, continue an approved plan, verify work, diagnose failures, prepare model handoffs, and stop when a human decision is required.

CoTend is not a coding model, IDE, hosted service, or sample app. It is a governance layer for an AI coding tool. The current pre-release adapter targets Codex; support for other platforms is future work, not a current compatibility claim.

Install from GitHub (Open Beta)

The GitHub Marketplace route is validated with codex-cli 0.144.1. Add the CoTend repository as a personal Marketplace, then install its Plugin:

codex plugin marketplace add lhh1301506137/CoTend
codex plugin add cotend@cotend

Start a new Codex task, search /cotend in the Skill picker, select CoTend Init, and then describe the project you want to initialize or resume. Existing-task catalog refresh and the complete Desktop restart lifecycle remain beta coverage gaps.

Refresh the Git-backed Marketplace clone:

codex plugin marketplace upgrade cotend

Remove CoTend and its Marketplace entry:

codex plugin remove cotend@cotend
codex plugin marketplace remove cotend

These commands intentionally update the current user's Codex Plugin and Marketplace state. The repository verification scripts later in this document use redirected disposable roots instead.

What CoTend changes

Without a durable workflow, an AI can lose project context, declare work complete without enough evidence, repeat failed fixes, or continue through a decision that belongs to you. CoTend adds a lightweight structure around development:

  • one normal entry for starting or resuming a project;
  • a plan tree that connects the current task to the larger goal;
  • evidence-backed checks before completion claims;
  • explicit separation between AI verification and your acceptance;
  • read-only diagnosis when you withhold edit permission;
  • controlled advisor and model-takeover handoffs;
  • hard stops for product decisions, secrets, payments, destructive actions, and public release.

The workflow stays thin for simple work and becomes more detailed only when project risk or complexity requires it.

The normal workflow

  1. Start or resume. Ask CoTend to initialize or resume the current project.
  2. Read the readiness report. CoTend inspects the project, recovers available project truth, reports conflicts or risks, and tells you whether it is ready.
  3. Give the next instruction. The first initialization or takeover report stops for your next instruction instead of silently beginning unrelated work.
  4. Continue within existing authority. CoTend follows the plan tree, verifies each completed leaf, and derives the next leaf while the parent goal remains open.
  5. Decide at real boundaries. If new understanding changes the product direction, or an action affects public or irreversible state, CoTend stops and asks you.

A bare Continue can advance already-authorized work. It cannot answer a pending human-only question.

Common requests

These starter prompts describe the main workflows:

  • Use CoTend to initialize or resume this project.
  • Use CoTend to continue the current project.
  • Use CoTend to diagnose this issue without changing files.

For an independent stronger-model review or possible takeover, ask CoTend to prepare a model handoff. CoTend keeps prior conclusions separate from verified facts so the receiving model can reason independently, then returns the advisor-or-takeover choice to you.

How the ten Skills fit together

You are not expected to manage ten commands in ordinary use. CoTend Init is the normal start or resume entry; the other Skills are delegated, contextual, advanced, or supporting capabilities.

Display name Skill ID Role
CoTend Init cotend-init Default visible entry for initialization, update, repair, migration, and resume.
CoTend Project Init cotend-project-init Delegated Auto Mode engine that classifies project state and prepares governance.
CoTend Collaboration cotend-collaboration Shared governance core for plans, evidence, review, risk, acceptance, and continuation.
CoTend Diagnose Only cotend-diagnose-only Contextual read-only root-cause analysis when edits are not authorized.
CoTend Semantic Alignment cotend-semantic-alignment Direct writable entry for confirming or repairing product meaning before affected implementation continues.
CoTend Model Upgrade cotend-model-upgrade Advanced advisor, trial, takeover, rollback, and milestone handoff workflow.
CoTend Session Handoff cotend-session-handoff Explicit-only same-Primary session transfer with frozen state and freshness preflight.
CoTend Tooling cotend-tooling Evidence-backed capability catalog, evaluation, and read-only project inventory without automatic adoption or installation.
Grill Me grill-me MIT-licensed clarification companion for resolving a plan one decision at a time.
Karpathy Guidelines karpathy-guidelines MIT-licensed implementation-discipline companion for simpler, verifiable code changes.

The eight CoTend-owned Skills use the cotend- prefix. The two bundled companions retain their upstream identities and license notices.

Current availability

CoTend v2.01 is a repository-verified GitHub Open Beta pre-release. GitHub release authorization does not authorize a Public Plugin Directory submission or publication.

Area Current state
Source carrier Ten Codex Skills are adopted in skills/ as target cotend-codex-r000017, with 104 Skill files and an exact verified source lineage.
Package candidate GitHub release v2.01 contains [email protected]: 10 Skills and 115 total package files. The unpublished 48-file rc.2 candidate remains historical and is not overwritten.
Isolated lifecycle Package add, install, discovery, coexistence, remove, recovery, and cleanup are verified in redirected disposable roots.
GitHub Marketplace carrier Repository-root discovery, redirected install/update/remove/recovery, and package lifecycle checks cover the ten-Skill v2.01 carrier; public-source installation is rechecked after release.
Submission materials English listing, three starter prompts, five positive cases, three negative cases, and release-note structure exist as a repository draft.
Public installation GitHub Open Beta is available through the personal Marketplace commands above. The Plugin has not been submitted to or published in the Public Plugin Directory.
External readiness Repository Logo assets are ready, but Portal format is not yet verified. Publisher identity, public support and legal URLs, availability, and policy attestations remain unresolved.
Reviewer execution The five positive and three negative cases have a deterministic disposable fixture kit; model behavior remains a reviewer contract and has not been run by an external directory reviewer.
Desktop coverage Basic picker visibility and new-task refresh have evidence; the complete production Desktop lifecycle is not yet verified.

Use the GitHub Marketplace commands for normal installation. The Release ZIP and its SHA-256 sidecar provide an auditable offline package artifact.

Accounts, data, and infrastructure

The CoTend skills-only package does not add a CoTend account, hosted backend, API key, database, or MCP server. Codex or ChatGPT platform login, network access, permissions, model behavior, and data-handling rules still apply. Review your platform settings before using any AI coding tool with sensitive files.

CoTend project records must not store secrets. Public, destructive, paid, or otherwise irreversible actions remain human-controlled.

Maintainer build and verification

These commands build and verify local, gitignored artifacts. They do not install CoTend for the current user, write a Marketplace, open the submission Portal, or publish anything.

python -m pip install --disable-pip-version-check --requirement requirements-ci.txt
python scripts/build_codex_plugin.py --output dist/cotend --json
python scripts/verify_codex_plugin_package.py --repository-only
python scripts/verify_plugin_submission_materials.py
python scripts/prepare_reviewer_fixtures.py
python scripts/build_release_archive.py --check-tag v2.01
python scripts/verify_repository_maturity.py
python -m unittest discover -s tests
python scripts/check_repository.py
python scripts/verify_production_plugin_lifecycle.py
python scripts/verify_github_marketplace_carrier.py
python scripts/verify_remote_github_marketplace.py

The repository-only package mode is suitable for clean CI runners. On a Codex maintainer workstation, omit --repository-only to additionally run the Codex-bundled official Plugin Creator validator. The final three lifecycle commands require the Codex CLI. They redirect runtime write roots into disposable fixtures, reject protected-user-state drift, and clean the isolated roots after the run. The remote verifier also requires network access and checks that the GitHub clone matches the current local HEAD. Run them without concurrent activity that intentionally changes Codex user-state metadata.

CI is configured to run the repository checks on Windows and Ubuntu with Python 3.10 and 3.13. The delivered Plugin runtime has no third-party Python dependency; CI installs the exact maintainer-only PyYAML pin from requirements-ci.txt for YAML validation. Release assets are deterministic ZIP files with a SHA-256 sidecar. The manual release workflow can create only a draft pre-release from an existing approved tag; it cannot publish the draft.

Documentation

Evidence and specifications

Community and policies

License

CoTend-owned material is licensed under Apache License 2.0. Bundled third-party material retains its own license and attribution; see NOTICE, Third-Party Notices, and Third-Party Sources.

Contributing during pre-release

Read CONTRIBUTING.md before proposing a change. Keep changes scoped and evidence-backed. Do not weaken human decision boundaries, convert unexecuted cases into success claims, add secrets or private project data, or describe unverified Desktop or Public Directory coverage as complete. Changes to bundled third-party files must preserve their license and source records.

致谢

感谢 LINUX DO 社区 https://linux.do/ 一直以来的支持。