P

phaseproof

speedsharmaai/phaseproof · v0.7.0 · Development & Workflow

by speedsharmaaiOwner verifiedScan grade: GoodAwesome AI Plugins

Claude Code plugin that runs work in reviewed phases: a hook keeps code locked until the owner approves a phase, Opus reviewer agents check the docs, screens and diff, and a gate script re-runs the project's checks before the phase closes

InstallSource
Follow0
Trust Score80Security scan84Components9
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is phaseproof a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • 9 skills

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

What is phaseproof?

phaseproof is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by speedsharmaai and distributed through the HOL AI plugin registry. Claude Code plugin that runs work in reviewed phases: a hook keeps code locked until the owner approves a phase, Opus reviewer agents check the docs, screens and diff, and a gate script re-runs the project's checks before the phase closes.

Canonical slug
speedsharmaai/phaseproof
Version
v0.7.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Verified on HOL as @speedsharmaai
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
9 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
80

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
90/100
MCP server setup
100/100
Plugin Security
84/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/speedsharmaai/phaseproof
Source commit
f9e055f4d17e…
Publisher verified
Yes
Owner verified
@speedsharmaai
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
84
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-OX4jqI / cisco-skill-scanner: timed_outcodex:hol-plugin-scanner-OX4jqI / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

0/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

0/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumoperational-securityDEPENDENCY_LOCKFILE_MISSINGReported 2 times

package.json is present without a corresponding lockfile or pinned dependency snapshot.

Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the phaseproof entry from the phaseproof marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall phaseproof@phaseproof.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "phaseproof",
  "displayName": "phaseproof",
  "version": "0.7.0",
  "description": "Docs, design, build and ship in phases. Code stays closed until a phase is written, reviewed and approved, and every phase is checked by an independent reviewer agent on a stronger model.",
  "author": {
    "name": "Sanjeev Sharma",
    "url": "https://github.com/speedsharmaai"
  },
  "homepage": "https://github.com/speedsharmaai/phaseproof",
  "repository": "https://github.com/speedsharmaai/phaseproof",
  "license": "MIT",
  "icon": "./.claude-plugin/icon.png",
  "privacyPolicyUrl": "https://github.com/speedsharmaai/phaseproof/blob/main/PRIVACY.md",
  "supportUrl": "https://github.com/speedsharmaai/phaseproof/issues",
  "documentationUrl": "https://github.com/speedsharmaai/phaseproof#readme",
  "keywords": [
    "claude-code",
    "spec-driven-development",
    "code-review",
    "ai-agents",
    "agentic-coding",
    "subagents",
    "model-routing",
    "quality-gates"
  ],
  "interface": {
    "displayName": "phaseproof",
    "developerName": "speedsharmaai"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/speedsharmaai/phaseproof
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

9 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • approve

    skills/approve/SKILL.md

    Owner sign-off that opens code for the current phase. Only the owner runs this.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • design

    skills/design/SKILL.md

    Design the screens a phase lists in screens.md, export them, and have an independent design-reviewer check the exports until they pass. Use for phases with UI, before approval.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • doctor

    skills/doctor/SKILL.md

    Check the phaseproof setup in this project - Node, git, config, checks, phase folder, locked tests, approval - and say what to fix. Use when something in phaseproof seems not to work or right after installing it.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • kickoff

    skills/kickoff/SKILL.md

    Start a project the phaseproof way - one number, rules, phase list, first ADR, and the gate turned on. Use when the user starts a new project or wants to put an existing one under phase gates.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • phase

    skills/phase/SKILL.md

    Write one phase's scope.md and tasks.md, then have an independent doc-reviewer check them until they pass. Use when planning the next phase of a phaseproof project.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • quick

    skills/quick/SKILL.md

    Small change, light process - one-screen scope, owner approval, build, one code review, gate. Use for fixes and small edits that touch a few files and no data model, auth, money or migrations. Bigger work goes through /phaseproof:phase.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • report

    skills/report/SKILL.md

    Show what phaseproof caught in this project - phases closed, review rounds, failed reviews, blockers found and gate warnings, phase by phase. Use when the user asks how the process is going or what the reviews found.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • ship

    skills/ship/SKILL.md

    Release checklist with proof - dry-run diff, new build booted on a spare port, health check, swap, live keyword check, written rollback. Use before and after deploying a phase.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • status

    skills/status/SKILL.md

    Show the current phase and what it is waiting on - docs review, owner approval, checks, code review, gate. Use when the user asks where a phaseproof project stands.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

540 bytes

3686a744921dfac5…

.claude-plugin/plugin.json

file

989 bytes

3be1dd9444616ba7…

.codex-plugin/plugin.json

plugin-manifest

1,022 bytes

f1ad3c61a16e24ff…

agents/builder.md

file

1,648 bytes

c324d724704e4c9b…

agents/code-reviewer.md

file

3,187 bytes

35689ddfab910571…

agents/design-reviewer.md

file

1,675 bytes

8b1a9345912f93f4…

agents/doc-reviewer.md

file

2,326 bytes

5b1051bf88c9ccd5…

agents/explorer.md

file

771 bytes

aed9376a11ca7fda…

agents/researcher.md

file

820 bytes

bc4387ba6a25e82f…

agents/ship-verifier.md

file

1,326 bytes

c603e11faff14efe…

hooks/hooks.json

file

1,867 bytes

2fb7d3d5825aba7f…

LICENSE

file

1,428 bytes

d1299532f1a0c3cd…

package.json

file

368 bytes

01b9d46ce8be65e2…

README.md

file

20,961 bytes

c9515df194ddd73c…

SECURITY.md

file

457 bytes

8124dc582068c759…

skills/approve/SKILL.md

skill

602 bytes

319f3418b30e95c3…

skills/design/SKILL.md

skill

1,407 bytes

22e68f111721b6fc…

skills/doctor/SKILL.md

skill

549 bytes

3644addd2893a011…

skills/kickoff/SKILL.md

skill

2,357 bytes

a7fa8e9f4f192896…

skills/phase/SKILL.md

skill

2,566 bytes

18f5f6913a126b6d…

skills/quick/SKILL.md

skill

2,051 bytes

de8397ec9cce9e17…

skills/report/SKILL.md

skill

551 bytes

f73a6392f29eeaee…

skills/ship/SKILL.md

skill

1,055 bytes

73605607e99f1179…

skills/status/SKILL.md

skill

450 bytes

74d8270ac9ce5b26…

phaseproof — Frequently asked questions

What is phaseproof?
phaseproof is an AI plugin in the HOL registry. Claude Code plugin that runs work in reviewed phases: a hook keeps code locked until the owner approves a phase, Opus reviewer agents check the docs, screens and diff, and a gate script re-runs the project's checks before the phase closes.
How do I install phaseproof?
Install phaseproof in your harness: Claude Code — /plugin marketplace add speedsharmaai/phaseproof; Any agent — npx [email protected] add speedsharmaai/phaseproof. Full step-by-step guidance is on the HOL plugin page.
How do I install phaseproof in HOL Guard?
To install phaseproof in HOL Guard, start with hol-guard plugin install speedsharmaai/phaseproof --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install phaseproof in Claude Code?
To install phaseproof in Claude Code, start with /plugin marketplace add speedsharmaai/phaseproof. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for phaseproof computed?
phaseproof has a HOL Trust Score of 80 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/speedsharmaai%2Fphaseproof/trust
Who publishes phaseproof?
phaseproof is published by speedsharmaai and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-31 to 2026-11-03.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from phaseproof.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins