Claude Code

Architecture diagram — 4-host NixOS fleet, data plane (hosts) x control plane (flake.nix) x compliance plane (lefthook + GitHub Repository Ruleset)

A 4-host NixOS fleet with multi-agent worktree guards

One flake, four heterogeneous hosts (x86_64-linux + aarch64-darwin + steam-deck + a CI macbook), and a worktree-first git rule that lets multiple Claude Code agents share the same repository without colliding. Hostname-whitelisted push guards catch misrouted commits before they reach origin.

Architecture diagram — three planes (data, control, compliance) for SLSA L2 + Sigstore keyless build pipeline applied across yolo-labz Claude Code plugin repos

SLSA L2 + Sigstore keyless: a solo-dev supply-chain canon for OSS plugin repos

A 9-line GitHub Actions canon — actions/attest-build-provenance + cosign keyless OIDC + dual-format syft SBOM — applied verbatim across six Claude Code plugin repos. SLSA L2 attestations and gh attestation verify smoke tests, no per-plugin overhead, zero rotated secrets.