C

CommitLore

Keeps constraints, rejected alternatives, and warnings in Git trailers and serve

monglong0214/commitlore · v1.7.5 · Development & Workflow

by MongLong0214Owner verifiedAwesome AI Plugins

Problem: an agent proposes something, your team rejects it for a reason the diff can't show, and two sessions later a different agent proposes the same thing again — the reasoning never left the room. How it works: CommitLore captures rejected approaches, constraints, and warnings as ordinary Git trailers at commit time, tracks each record through an active/superseded/expired lifecycle, then delivers only the still-active ones to the agent before it edits a given path. No hosted memory, no vector DB — Git already replicates, branches, and survives provider changes, so the record does too. Who it's for: teams running Claude Code, Codex, or other agent hosts across multi-session work on the same repository, where a rejected idea keeps resurfacing. MIT-licensed, nothing to self-host.

InstallSource
Follow0
Trust Score83Security scanPartialComponents8
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is CommitLore a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • 7 skills
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Interactive, Read, Write
License
MIT

Check before relying on it

What is CommitLore?

CommitLore is a published development & workflow plugin for AI coding agents that works with Codex and Claude Code, developed by MongLong0214 and distributed through the HOL AI plugin registry. Keeps constraints, rejected alternatives, and warnings in Git trailers and serves them back to the agent before it edits a file.

Canonical slug
monglong0214/commitlore
Version
v1.7.5 · updated Nov 2, 2026

Registry snapshot

Owner verification
Verified on HOL as @MongLong0214
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
7 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
83

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
91/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/MongLong0214/commitlore
Source commit
b18c40f09a4b…
Publisher verified
Yes
Owner verified
@MongLong0214
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Partial scan
Security result
91
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-BfseGS / cisco-skill-scanner: failedcodex:hol-plugin-scanner-BfseGS / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

28/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the commitlore entry from the commitlore marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall commitlore@commitlore.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Diagram showing an active decision record for src/pricing.ts flowing into the next edit, while a superseded record stays in Git history without being delivered as current guidance
1 / 2

How CommitLore scopes active vs. superseded decisions

Diagram showing an active decision record for src/pricing.ts flowing into the next edit, while a superseded record stays in Git history without being delivered as current guidance

Full size
Loading reviews

Plugin manifest

{
  "name": "commitlore",
  "version": "1.7.5",
  "description": "Decision memory from Git history, with verified capture for coding sessions.",
  "author": {
    "name": "MongLong0214",
    "url": "https://github.com/MongLong0214"
  },
  "homepage": "https://github.com/MongLong0214/commitlore#readme",
  "repository": "https://github.com/MongLong0214/commitlore",
  "license": "MIT",
  "keywords": [
    "git",
    "trailers",
    "decisions",
    "memory",
    "context",
    "mcp"
  ],
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "interface": {
    "displayName": "CommitLore",
    "developerName": "MongLong0214",
    "shortDescription": "Preserve verified engineering decisions in Git",
    "longDescription": "CommitLore gives Codex decision context from Git history and a verified capture route for constraints, ruled-out alternatives, and warnings that a diff cannot retain.",
    "category": "Developer Tools",
    "capabilities": [
      "Interactive",
      "Read",
      "Write"
    ],
    "websiteURL": "https://github.com/MongLong0214/commitlore",
    "privacyPolicyURL": "https://github.com/MongLong0214/commitlore/blob/dev/LICENSE",
    "termsOfServiceURL": "https://github.com/MongLong0214/commitlore/blob/dev/LICENSE",
    "defaultPrompt": [
      "Read the decision context for the files I am about to change",
      "Capture the decision behind this commit with verified evidence",
      "Check whether this implementation approach was already ruled out"
    ],
    "brandColor": "#0F766E",
    "screenshots": []
  },
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/MongLong0214/commitlore
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

7 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • commitlore-commits

    hermes/skills/commitlore/commits/SKILL.md

    Capture a decision record from verified session and diff evidence before a commit.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-query

    hermes/skills/commitlore/query/SKILL.md

    Read recorded constraints before changing a repository path.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-setup

    hermes/skills/commitlore/setup/SKILL.md

    Set up CommitLore in a repository when the operator asks for it.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-codex

    skills/commitlore-codex/SKILL.md

    >-

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-commits

    skills/commitlore-commits/SKILL.md

    >-

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-query

    skills/commitlore-query/SKILL.md

    >-

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • commitlore-setup

    skills/commitlore-setup/SKILL.md

    >-

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

1,104 bytes

9177ecdda4a00b8c…

.claude-plugin/plugin.json

file

650 bytes

1e0f80b45aa641e6…

.codex-plugin/plugin.json

plugin-manifest

1,393 bytes

1165cbc45b0b203f…

.registry/mcp.json

mcp-config

107 bytes

e0aa8acd15724965…

AGENTS.md

file

4,123 bytes

fd85a5fb8c8b4698…

commands/auto.md

file

879 bytes

45dbf82fa1587de8…

hermes/skills/commitlore/commits/SKILL.md

skill

1,061 bytes

5a4a1970fed6c341…

hermes/skills/commitlore/query/SKILL.md

skill

741 bytes

9953829c42aff040…

hermes/skills/commitlore/setup/SKILL.md

skill

986 bytes

23bde187674cc365…

hooks/hooks.json

file

538 bytes

082bc90dc25e5836…

LICENSE

file

1,428 bytes

b3f52dcfa1f415dc…

package-lock.json

file

94,813 bytes

f9f2915966374f4a…

package.json

file

2,100 bytes

c97b9ca8ca3fa4c2…

plugin-mcp.json

file

168 bytes

74badaea596a3102…

README.md

file

19,879 bytes

943a7f0a0192d532…

SECURITY.md

file

4,457 bytes

ebf4e45691122d97…

skills/commitlore-codex/SKILL.md

skill

3,171 bytes

9c802a5328ef688a…

skills/commitlore-commits/SKILL.md

skill

11,980 bytes

a3ceb089ace13fe8…

skills/commitlore-query/SKILL.md

skill

6,130 bytes

dc4c93466d781953…

skills/commitlore-setup/SKILL.md

skill

5,937 bytes

f821d6dcc5328311…

tsconfig.json

file

548 bytes

0435de65e3384ab8…

CommitLore — Frequently asked questions

What is CommitLore?
CommitLore is an AI plugin in the HOL registry. Problem: an agent proposes something, your team rejects it for a reason the diff can't show, and two sessions later a different agent proposes the same thing again — the reasoning never left the room. How it works: CommitLore captures rejected approaches, constraints,…
How do I install CommitLore?
Install CommitLore in your harness: Codex — codex plugin marketplace add MongLong0214/commitlore; Claude Code — /plugin marketplace add MongLong0214/commitlore; Any agent — npx [email protected] add MongLong0214/commitlore. Full step-by-step guidance is on the HOL plugin page.
How do I install CommitLore in HOL Guard?
To install CommitLore in HOL Guard, start with hol-guard plugin install monglong0214/commitlore --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install CommitLore in Codex?
To install CommitLore in Codex, start with codex plugin marketplace add MongLong0214/commitlore. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install CommitLore in Claude Code?
To install CommitLore in Claude Code, start with /plugin marketplace add MongLong0214/commitlore. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
Is CommitLore free?
CommitLore is listed as open source on HOL.
How is the Trust Score for CommitLore computed?
CommitLore has a HOL Trust Score of 83 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/monglong0214%2Fcommitlore/trust
Who publishes CommitLore?
CommitLore is published by MongLong0214 and listed on HOL.
Is CommitLore available now?
CommitLore is currently available according to its latest public launch.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-12 to 2026-11-09.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from CommitLore.

Alternatives in Development & Workflow

See all Development & Workflow plugins

History, reviews, and similar plugins

Latest launch