Prompterjack Roadmap
Every era we've shipped — and where Prompterjack, ops for your AI coding setup, is headed
v1 - v2.0FoundationsShippedEarly 2026
The agent-architect era: multi-style agent design, code generation for five frameworks, a template marketplace, and the first codebase analysis pipeline.
Highlights
- Multi-style agent architectures (Pyramid, Targeted, Collaborative) with interactive visualizations
- Code generation for Strands, OpenAI Agents, LangChain/LangGraph, LlamaIndex, and OpenClaw
- Template marketplace: publish, browse, and fork community templates
- Codebase analysis: point at a repo and generate prompts grounded in your actual code
v2.1Cloudflare Launch + MonetizationShippedJun 2026
Prompterjack went live at prompterjack.com — re-platformed edge-first onto Cloudflare, with accounts, a real free tier, and Pro subscriptions.
Highlights
- Full re-platform onto Cloudflare Workers + Pages, running at the edge
- Google sign-in with secure sessions and per-user workspaces
- Free tier with a no-account trial; Pro subscription with in-app billing
- GitHub repo import alongside ZIP upload and paste
v2.2Profiles & ModelsShippedJun 2026
Generation became personal and controllable: model choice per generation, a persistent professional profile, and the Claude Code setup generator.
Highlights
- Per-generation model selector (Standard / Fast)
- Persistent Professional Profile injected into every generation
- Claude Code / MCP setup generator built from your codebase profile
- Usage metering, platform cost controls, and a security hardening pass
v2.3Backlog ClearShippedJun 2026
A reliability sweep across the whole product: every known rough edge from the audit backlog, fixed and shipped.
Highlights
- Codebase upload, paste, and drag-and-drop fixed end to end
- Smarter prompt flows: deterministic scoring and faster clarification rounds
- Profiles and personas persist across sessions and devices
- Friendly, actionable error messages app-wide
v2.4Codebase IntelligenceShippedJul 2026
Codebase analysis grew from a one-shot profile into an intelligence layer: recommendations about your repo, instant re-analysis, and per-user isolation.
Highlights
- Recommendations engine: source-linked, severity-tagged findings about your repo
- Instant re-analysis: unchanged repos return cached results in milliseconds
- Per-user isolation for analysis sessions
- Smoother billing session sync after upgrades
v2.5AI-Context IntelligenceShippedJul 2026
Prompterjack now detects, scores, and upgrades your existing AI-context files against what your repo actually is — not just what the file says.
Highlights
- Detects your existing CLAUDE.md, AGENTS.md, .cursorrules, and MCP config
- Scores your CLAUDE.md against your real codebase and lists exactly what is missing
- Merge-safe upgrades with a reviewable before/after diff — your writing is never overwritten
- Cross-tool consolidation via AGENTS.md, plus stack-aware MCP and subagent recommendations
v3Reliability & Truthful MeteringShippedJul 2026
The first act of the ops era: usage and spend you can trust — one record behind every number you see, the same numbers everywhere.
Highlights
- One source of truth for usage and spend
- Pro usage displayed in the same units it is enforced in
- Meters that update the moment a generation completes
v3Multi-Codebase ManagementShippedJul 2026
Every repo you care about, managed in one place: an inventory with fast switching, analysis history, and a health picture per codebase.
Highlights
- Codebase inventory and switcher across all your repos
- Analysis snapshots: every run recorded, with history you can look back on
- A clearer health picture for each codebase
v3Monitoring & Health Over TimeShippedJul 2026
Your AI setup, watched: scheduled re-scans, health trends over time, and alerts when something regresses.
Highlights
- Scheduled re-scans of your codebases
- Health-over-time trends per repo
- Alerts when your AI-context health regresses
v3GitHub App: PR Checks & Auto-FixShippedJul 2026
Install once and Prompterjack keeps your AI context healthy on every push — a PR check for AI-context health, and auto-fix PRs when it drifts.
Highlights
- Install on your repos like any GitHub App
- Re-scan on push, with an AI-context health check on every pull request
- Auto-fix PRs powered by the merge-safe upgrade engine
v3Full AI-Setup Delivery as PRsShippedJul 2026
One click delivers your whole agentic setup to a repo as a single reviewable PR: CLAUDE.md, AGENTS.md, a tailored agent roster, and .mcp.json — merge-safe and add-only, so hand-written files are never touched.
Highlights
- One-click "Create setup PR" for any connected codebase
- Repo-tailored agent roster derived from your actual stack
- Add-only delivery — existing files are skipped and reported, never overwritten
v3Try-It Preview, Badge & Weekly DigestShippedJul 2026
The platform opened up: anyone can health-check a public repo straight from the landing page, show the result as a README badge, and Pro accounts get a weekly email digest of their fleet.
Highlights
- Instant public-repo AI-context check — no account needed
- Embeddable AI-context health badge for your README
- Weekly Pro digest: checks, drift, and alerts in your inbox
- Daily monitors can now open the auto-fix PR themselves (opt-in)
v3AI-Setup Security PostureShippedJul 2026
Every analysis now audits the files AI agents read and obey — the security layer only a neutral third party can provide. Deterministic, no letter grades.
Highlights
- Detects leaked credentials in CLAUDE.md, AGENTS.md, and .mcp.json
- Flags unpinned MCP servers and plaintext-http connections
- Catches invisible-Unicode "rules file backdoors" (a documented 2026 attack)
- IaC-aware: suggests a plan-before-apply guardrail; never modifies infra files
v4Design Depth: Better Generation, the System Designer & the EssentiatorShippedJul 2026
The generation itself levelled up: an internal eval system keeps every prompt reliable, the Agent Architect now designs whole production systems, and the new System Essentiator lets you click together a complete Claude Code setup.
Highlights
- Eval-backed prompts: an internal harness guards prompt quality on every change
- Agent Architect designs each agent’s tools, guardrails, and memory needs + a runnable eval suite
- System Essentiator: click together hooks, skills, and loop kits → download the bundle
- Leaner, faster prompt engine (dead legacy prompt set removed)
v4Teams: Shared Codebase HealthShippedJul 2026
Prompterjack goes from personal to shared: create a team, invite teammates, and share your codebases’ AI-context health across the org. Your personal codebases stay private.
Highlights
- Create a team and invite members by email
- Share a codebase’s health with the whole team
- Owner-managed membership; members get shared read access
- Upgrade a team to the Team plan (owner-managed billing)
- AI-authorship telemetry now collecting (for team analytics)
v4Design Once, Deploy to MicrosoftShippedJul 2026
The Agent Architect gained a sixth export target: your multi-agent design now exports as Microsoft 365 Copilot declarative agents, alongside Claude Code, LangChain, OpenAI, Strands, and OpenClaw.
Highlights
- Export any architecture as Copilot Studio (M365) declarative agent manifests
- One schema-valid manifest per agent, ready for the Agents Toolkit
- Reliable generation on slow days: the Prompt Crafter now streams a keepalive
v4Reliability & Hardening PassShippedJul 2026
A focused quality pass across the newest features: faster recovery when a model is slow, more accurate team analytics, and a batch of verified fixes to the Teams and generation flows.
Highlights
- Complex prompts stay reliable: model timeouts now scale with output length, so long generations finish instead of erroring
- Automatic retry recovers a transient network/LLM blip mid-generation — no re-clicking
- Slow-model recovery: generation fails over to a faster model instead of waiting out a timeout
- Teams: rock-solid team switching (no stale member/codebase lists) and atomic team creation
- More accurate AI-authorship analytics (human commits no longer misattributed)
- Free-trial abuse protection hardened against concurrent requests
v5Delivery Analytics: DORA-Style Signals for AI WorkShippedJul 2026
The v5 era opens with proof of value: a delivery-analytics dashboard for your team and your own fleet — how much of your delivery is AI-authored, which tools write it, and whether the fixes actually merge.
Highlights
- AI-authored commit share over the last 30 days, with per-tool mix (Claude Code, Copilot, Cursor, …)
- AI-PR merge rate: how many Prompterjack fixes and setups actually land
- Team dashboard on /teams and a personal one over your own fleet
- Teams grew up: shareable invite links (no email required), leave team, unshare codebases
- Every Team member gets Pro — the flat team plan now delivers it
- The real pricing ladder: Free / Pro / Team / Enterprise
- Trend deltas vs the prior 30 days, per-codebase drill-down, and copy-a-summary for your next leadership update
- Essentiator: start from scratch (no analysis needed), plus a GSD-style Planning Kit (.planning/ charter, roadmap, phase template)
- A full security & correctness audit pass: hardened billing revocation, abuse-proofed the anonymous surfaces, and truthful storefront/privacy copy
v5More Ways to Design AgentsShippedJul 2026
The Agent Architect learned new shapes — seven architecture styles now, including a dedicated Microsoft Copilot Studio structure — so your design matches how your agents actually run.
Highlights
- A dedicated Copilot Studio structure: a primary agent with topics, connectors, and knowledge
- Sequential pipelines, generator-and-critic reflection loops, and peer swarms
- Every style exports to runnable code and a topology diagram
v5Private Repos & Pipeline DeliveryShippedJul 2026
Prompterjack goes where your real work lives: analyze private repositories through the GitHub App, and hand any generated setup to your delivery pipeline — as a pull-able link or straight into your own storage.
Highlights
- Analyze private repos on Pro via the GitHub App — your code, your permissions
- Turn any agent or Claude Code bundle into a shareable link a CI/ALM pipeline can pull
- Or push the bundle straight to your own S3-compatible bucket — keys never leave your browser
v5Clearer, Sharper, FocusedShippedJul 2026
A product-wide clarity pass: a homepage and navigation that lead with what Prompterjack does for your repos, plainer language throughout, and full control over the repos you store.
Highlights
- Delete any stored or analyzed repo, right from your fleet
- A repo-first homepage and navigation, with tools grouped by what you are doing
- Plainer language and clearer next steps — "AI-context" is now explained wherever it appears
- Faster, more reliable prompt tools with a clear path when you hit a free-tier limit
v5.10Your AI Setup Stays in SyncShippedJul 2026
Analyzing a repo no longer just suggests a fresh setup — it compares what you have already committed against what your code needs today, and tells you exactly what has drifted as your codebase grew: missing agents, and now missing MCP servers for the data sources your agents are blind to.
Highlights
- See which agents your codebase needs but .claude/agents/ is missing — flagged as "Add missing agent"
- Spot committed agents that no longer match your code, so you can retire or update them
- MCP drift: detects when you use a database or Sentry but no .mcp.json server exposes it to your agents
- Tool parity: flags when your context is Claude-only, so teammates on Cursor or Copilot are not left blind
- Every finding links straight to the real committed file — never a reconstructed guess
- One click on "Create setup PR" fills every missing agent — add-only, your existing files untouched
v5.11Security Scanning for Your MCP SetupShippedJul 2026
Prompterjack now reviews your .mcp.json for the security risks that matter most in agentic setups — beyond secrets and versions, it catches the dangerous capability combinations an attacker (or a prompt-injection payload) could exploit.
Highlights
- Exfiltration-surface check: flags when a data-reading server and an external-sending server coexist — the read-then-exfiltrate path an injected agent can walk
- Over-broad filesystem roots: catches an MCP server rooted at / or your home directory, exposing SSH keys, cloud credentials, and dotfiles
- Arbitrary-execution servers: flags shell/eval launchers and privileged containers that bypass any tool-level scoping
- Every finding maps to OWASP LLM Top 10 and MITRE ATLAS — the language your security team already speaks
v5.12Prompt Injection Test LabShippedJul 2026
Paste a system prompt and see how it holds up: we run it against a curated library of injection, jailbreak, and data-exfiltration attacks and score its resilience — with the exact attacks that broke through.
Highlights
- A resilience score (0–100) plus which techniques resisted and which broke through
- A curated, OWASP-LLM-tagged attack library: direct override, indirect/RAG, role-override, prompt leak, exfiltration, delimiter escape
- Deterministic verdicts (canary + system-prompt-leak detection) — no opaque LLM-judge
- Name a prompt to track it: each run diffs against the last version — score delta, newly broken, and newly fixed
- Free runs the 20-attack taste; Pro runs the full suite with a higher daily limit
v5.14Guardrail Forge — Harden & ProveShippedJul 2026
The remediation half of the Injection Lab: paste a leaky system prompt (or arrive from a Lab report) and get a deterministically-hardened prompt plus drop-in guard code, mapped to the OWASP LLM Top 10 — then prove the fix by re-running the attack suite and seeing the before/after lift. No AI rewrites your prompt; nothing gets silently changed.
Highlights
- A hardened system prompt: your original embedded verbatim inside a reviewed defensive scaffold (spotlighting, precedence lock, never-reveal, egress control)
- Drop-in guard code — a JSON Schema output contract (free) and an executable TypeScript request-pipeline guard (Pro)
- Prove the fix: re-run the same attack suite against the hardened prompt and see the before→after score lift, what got fixed, and what still breaks
- Eight OWASP/CWE-tagged guard signals; hardening derived from exactly the attack categories that broke through in the Lab
- Deterministic — the guard you get is the exact guard we run against real attacks, never AI-generated code
v5.15Agentic Architecture Risk ReviewShippedJul 2026
Describe your agent system and get a conditional-approval security sign-off mapped to the OWASP LLM Top 10 (2025) and MITRE ATLAS. Your checklist answers — not an AI — decide which risks apply; the optional AI deep-read can only add coverage, never invent a risk, a tag, or the verdict.
Highlights
- A ~14-question checklist yields a deterministic, reproducible risk assessment across a fixed 14-risk catalog — free, no AI required
- A conditional-approval verdict (approve / with-conditions / needs-work) driven by risk counts, with a pre-launch conditions checklist
- Every risk carries its OWASP LLM Top 10, MITRE ATLAS, and CWE tags plus a concrete remediation — looked up from a human-reviewed catalog by id
- Optional Pro AI deep-read of a prose description: grounded classification with verbatim-evidence checks, severity-capped so the model can never move the verdict on its own
- Full 14-risk coverage every time; cross-links into the Injection Lab, Guardrail Forge, and MCP Scanner
v5.16A Fresh Look — Terracotta RedesignShippedJul 2026
A full visual redesign: a warmer, calmer terracotta design system across every page, in light and dark. Same product — sharper, easier to read, with a new pill navigation and cleaner tool layouts.
Highlights
- A new design system — warm ivory surfaces, a terracotta accent, and display typography — applied to every screen and component
- Light and dark modes rebuilt on shared design tokens, so the two always stay in sync
- A new pill navigation with Platform and Toolkit menus, plus a cleaner four-column footer
- Reworked Landing, Pricing, Dashboard, and Codebase pages — and every tool and content page
- Shipped behind a two-pass pre-launch audit (a reskin-regression sweep and a "does every button and claim actually work" check), fixing a crash, dead controls, dark-mode contrast, and over-stated copy before release
v6.0The AI Security & Assurance LayerShippedJul 2026
v6.0 makes it official: Prompterjack is a self-service security layer for AI-assisted and agentic development. The full suite — test, harden, review, and now vetted patterns and vendor assessment — under one roof, deterministic and framework-mapped.
Highlights
- A new AI Security Suite hub that ties the whole line together — scan, test, harden, review, pattern, assess
- MCP Tool Scanner: paste a server’s tools/list manifest and check the live tool contracts — over-broad scopes, unconstrained parameters, and the read + exfiltrate triad (v6.1)
- Secure Pattern Library: vetted "blessed architectures" (secure RAG with trust boundaries, least-privilege MCP, human-in-the-loop with checkpointing) — each with a threat model and copy-ready starter code
- AI Vendor Assessment: generate an AI-specific vendor security review — data use, model provenance, agentic blast radius — from a short questionnaire, exported as Markdown
- Everything mapped to OWASP LLM Top 10 (2025), MITRE ATLAS, and CWE — deterministic verdicts, never an opaque LLM judge
- Joins the already-shipped Injection Test Lab, Guardrail Forge, Architecture Risk Review, and AI-config security scanning
v6.2Domain Packs & Agent EvalShippedJul 2026
Prompterjack meets you in your field, and helps you verify your agents. The Prompt Crafter now injects curated, field-specific guidance for every profession; the Agent Architect exports ready-to-adapt test scaffolds for your design.
Highlights
- Deeper field presets: for a recognized field, the Crafter bakes in that field's real terminology, the known ways LLMs fail there, and a non-removable safety caveat — advisory only, never a substitute for a licensed professional's judgment
- Agent test scaffolds: export your architecture as ready-to-adapt promptfoo + DeepEval harnesses, one test traced to each agent — scaffolding for your own verification, never a substitute for it
- Both deterministic and generated in your browser; the field guidance and scaffolds are tested for correctness
v6.3AI Security AdvisorShippedJul 2026
An optional LLM advisory layer for the security suite. Paste your AI setup and get prioritized suggestions — the deterministic scanners stay the source of truth; this only helps you interpret and act.
Highlights
- Paste a CLAUDE.md, .mcp.json, or agent description → prioritized security risks with concrete remediations, mapped to the OWASP LLM Top 10
- Model freshness: flags deprecated or dated model references and names a current alternative
- Fail-safes: surfaces the safeguards you may be missing — approval gates, sandboxing, least-privilege scoping, rate limits, output validation, injection defenses
- Clearly labeled as advisory LLM suggestions — additive to the deterministic MCP Tool Scanner, Architecture Risk Review, and codebase security scan, never overriding them
v6.4Complex tier restoredShippedAug 2026
The Crafter's Complex tier — an enterprise-grade prompt built over up to 3 refinement rounds — is selectable again. It was withdrawn in July because long multi-draft runs could fail on the way back; that path is now recoverable rather than fatal.
Highlights
- Long drafts survive the trip: a reply that arrives with unescaped line breaks, or one cut off mid-response, is now recovered instead of thrown away
- A recovered draft still faces the same deterministic quality gate — nothing half-finished is passed off as done; it just earns a corrective retry instead of an error
- That retry is now told to fit the budget rather than to write more, so it stops failing the same way twice
v6.8Obsidian BrainShippedAug 2026
Connect your Obsidian vault and turn it into context your AI work can use. Notes, [[links]], tags and frontmatter are parsed into a searchable graph, then packed into prompt-ready context — deterministically, so it never touches your generation quota.
Highlights
- Three ways in: upload a vault .zip, point at a GitHub repo (obsidian-git and friends), or paste a single note
- Vault health: broken [[links]], orphaned notes, hub notes and topic tags — the things that quietly make a vault un-retrievable
- Ask your notes: ranked search over titles, tags and link structure, with each result showing why it matched
- Context packs: the notes that answer a question plus one hop of their links, under a token budget, ready to paste above any prompt
- Connector configs: a generated CLAUDE.md block, a local MCP server config for your own vault folder, and the HTTP recipe
v6.5Fewer failed generations, cheaper to runShippedAug 2026
Every tool that asks for structured output now falls back only to models that can actually produce it, and the security suite lost two dead ends. Generations fail less often, and the ones that do run cost us less — which is what keeps the free tier generous.
Highlights
- Model fallbacks are now capability-aware, not just availability-aware: a model that cannot return structured output is never placed where it would be asked for it first
- The Pro chain leads with a larger model at roughly a third of the previous output cost, and a daily check now alarms if any configured model drifts out of its known pricing
- The Architecture Risk Review is in the navigation — it was reachable only by typing the URL
- Paste an .mcp.json into the MCP Tool Scanner and it now tells you which tier you are looking at and where that tier is scanned, instead of rejecting it
v6.8GPT-5.6 Sol for ProShippedAug 2026
Pro can run generations on OpenAI's GPT-5.6 Sol, billed through Cloudflare AI Gateway rather than requiring your own API key. It sits alongside the existing platform models — pick it in the model selector when you want frontier quality on a specific piece of work.
Highlights
- No API key needed — Sol is billed through the platform, not through a key you have to manage
- Appears in the model picker only when it is genuinely available to you, so the option is never a dead end
- Every Sol generation is metered at the price Cloudflare actually charged and counts against the same monthly spend cap as everything else — no surprise usage
- If Sol is ever unavailable, the generation transparently completes on the standard model instead of failing
v6.6AI transparency — which tools use AI, and which do notShippedAug 2026
A per-tool disclosure of what is model-generated and what is rule-based, published against EU AI Act Article 50. The interesting part is that the honest answer is not "all of it" — and saying so is the point.
Highlights
- Every tool is listed with its output labeled AI-generated, rule-based, or rule-based with an optional AI step, each with a plain-language note on what that means for the result
- The blanket "all outputs are produced by AI language models" claim is gone — it was over-broad and contradicted the deterministic-by-design promise the security suite is built on
- Article 50 disclosure on the Disclaimer page, cross-referenced from the Privacy Policy alongside the sub-processor list and lawful bases
- The list is data, not prose, with tests that pin the load-bearing claims and check every disclosed tool against the real route table
v6.7Take it straight to the Workers AI PlaygroundShippedAug 2026
Every tool that produces a prompt now hands it to Cloudflare’s Workers AI Playground in one click. Generations here run on Workers AI, and the playground runs the same model catalog — so trying your prompt by hand is a step onto the same substrate, not a jump to an unrelated sandbox.
Highlights
- On the Crafter, Instruction Set, Editor, Rater, Injection Lab, and the Architect’s prompts export — wherever there is an actual prompt to run
- The Injection Lab handoff exists because the suite is a fixed payload library: the score is a floor, and improvising against a live model is the other half of the picture
- Honest about how it works — the playground publishes no prefill link, so the prompt is copied to your clipboard and the copy tells you to paste it, rather than a deep link that silently does nothing
- Deliberately absent from the Security Advisor and Architecture Risk Review: those take a config or a description, not a prompt, and pasting an .mcp.json into an LLM playground would be theatre
v6.9Risk-review your ARCHITECTURE.mdShippedAug 2026
The Architecture Risk Review used to cap the description at 8,000 characters, which ruled out the thing people actually wanted to review: their architecture document. Load the file and it is read in sections instead.
Highlights
- Load a .md straight into the review — the file never leaves your browser, only its text goes into the same box you could have pasted into
- Roughly five times the previous length, read as sections with a bounded number of passes so the cost stays predictable
- Grounding gets stricter, not looser: a quote has to come from the section it was found in, so a model recalling a phrase from a part it was not shown gets rejected — the shorter single pass could not tell the difference
- It tells you what it actually read: how many sections, whether a document was too long to finish, and whether any section failed — a verdict over part of a file never gets to look like a verdict over the file
v6.10Robotics and safety-critical field packsShippedAug 2026
Two fields where a confident wrong answer costs more than usual. Pick Robotics & Autonomy or Safety-Critical & Regulated in the Crafter and the prompt is built against how models actually fail there — not just what the field is called.
Highlights
- Robotics: the real trap is that most ROS material online is ROS 1, so a fluent answer quietly blends two incompatible generations — the pack pins ROS 2 idioms and names the specific tells (catkin_make and rosrun versus colcon and ros2 run)
- It also names the failures that produce no error at all: a publisher and subscriber whose QoS profiles do not match simply never connect, and radians-versus-degrees or ENU-versus-NED is silently wrong rather than loudly broken
- Safety-critical: DO-178C, DO-254, ARP4754A and DO-330 are four different documents that get conflated constantly, and invented clause numbers in this field look entirely plausible — the pack treats every stated requirement as a question for your certification authority
- Advisory only, and never certification credit: nothing generated is compliance evidence, and the pack says so in the prompt itself rather than only in the footer
- Simulate before hardware, in the prompt — generated control code can move a physical machine
v7.0.0-rc.1Context, clearly connectedDirection, not a dated commitment
A release candidate focused on a complete first experience: clearer product discovery, public repository previews and readable search and agent entry pages. Production rollout remains subject to release checks.
What We're Building
- One public scan experience on the homepage and analyzer, with validated input and actionable errors
- Repository context, fleet maintenance, agent design and security review explained as connected workflows
- Practical CLAUDE.md, AGENTS.md and context-drift guides, plus a trust and data-handling overview
- Page-specific metadata, generated initial HTML, sitemap, robots.txt and llms.txt with matching Markdown content
- Keyboard navigation, readable contrast and reduced-motion support
v6.12Prompterjack DailyShippedSep 2026
A free daily email for people building with LLMs — anyone can join, no account needed. Every morning it gathers Claude Code and Anthropic SDK releases, lab announcements, practitioner writing, Hacker News, Medium, arXiv and YouTube talks (with transcripts), then the platform model picks the useful ones and writes a plain answer to why each matters.
Highlights
- Sources verified live, best-effort each: GitHub release feeds for Claude Code, the Anthropic SDKs, MCP servers and Ollama; OpenAI, DeepMind, Google AI, Hugging Face and Cloudflare blogs; Simon Willison, Latent Space, Interconnects, Import AI, Ahead of AI; Hacker News searches; Medium tags; r/ClaudeAI; arXiv cs.CL; 13 YouTube channels
- YouTube items carry the video transcript into curation, so a talk is judged on what was said, not its title
- Each pick gets a headline, a two-sentence summary and a "why it matters" line aimed at developers — sectioned into Claude & Anthropic, Tools & releases, Models & research, Reads & watches
- Double opt-in with one-click unsubscribe (RFC 8058 headers), a public archive at /newsletter, and an email version of every issue
- Never repeats a link inside three weeks, never fails an issue because one feed went dark, and still builds the web issue when no mail provider is configured
Coming soon
What we’re building next. These are directions, not dated promises — each ships when it’s solid.
AI Security
The v6 suite shipped — scan, test, harden, review, secure patterns, MCP tool scanning, and vendor assessment. What is still coming:
Run the injection suite, MCP tool scan, and architecture review automatically on every pull request — catch regressions before they merge.
Living AI Setup
More ways your AI configuration stays in sync as your codebase grows.
Catch when your Claude Code hooks and skills fall behind the commands and conventions already in your repo.
Close the loop on a flagged MCP-drift gap: regenerate the missing servers straight into your .mcp.json, so the one-click fix matches exactly what we flagged.
Domain Packs
Both packs below now ship in the Crafter (v6.10). What is still coming is delivering them to you without asking:
The Robotics & Autonomy and Safety-Critical packs are live in the Crafter today — pick the field and the guidance is baked in. Still to come: detecting a robotics or regulated codebase during analysis and offering the matching pack as a reviewable PR, instead of waiting for you to choose it.
Enterprise
Governance for security-conscious teams adopting AI at scale.
Single sign-on and a full audit trail, for teams that need governance before they adopt.
Export-ready evidence that maps your AI-context checks to the controls auditors ask for.
Where we’re headed
The platform is live end to end — from analyzing a repo to keeping its AI setup healthy, with a GitHub App, teams, and delivery analytics. Next we’re building the security & assurance layer for agentic AI: catch prompt-injection and MCP risks, map agent workflows to real threat frameworks, and give security-conscious orgs the governance they need to adopt AI with confidence. Directions we’re building toward — each piece ships when it’s solid.