DESIGN.md@docsA
DESIGN.md@docs from chiefgyk3d/git-your-ship-together is a DESIGN.md file: the design rules coding agents follow in that repo.
mdr add chiefgyk3d/git-your-ship-together/docs/DESIGN.md@git:20261030.6641d92Pins git:20261030.6641d92 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 14 of 14 checks passed
- Kind
- DESIGN.md file
- Repository
- chiefgyk3d/git-your-ship-together
- Path
docs/DESIGN.md- Versions recorded
- 5
- Latest version
- git:20261030.6641d92, committed Oct 30, 2026
- First version recorded
- Sep 21, 2026
- Size
- 20,183 bytes
- Repository stars
- 20
- License
- Apache-2.0
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Why this repository exists, and what it is built on Nine Python projects, each with six copy-pasted workflow files, and every one of them slightly different because they were fixed one at a time. Snyk turned on in one project and never given a token in the one next to it. Four of the first pins on this repository pointed at tag objects rather than commits, and GitHub happened to resolve them. And the secrets themselves lived in GitHub's encrypted store, which is write-only: you can set a value, you cannot read it back, so nobody could say with confidence which repository held which credential or when it was last rotated. This repository is the answer to that. One CI pipeline, one release pipeline, one security pipeline, each written once and called by every project. A bug fixed here is fixed everywhere on the next Dependabot bump. And every secret a pipeline needs lives in exactly one place, Doppler, where it can be listed, scoped and rotated. The rest of this document is the what, the why, and the products involved. The [README](../README.md) is the manual for calling the workflows and [BASELINE.md](../BASELINE.md) is the list of settings every repository must …
Read the whole file at its exact version.
How to install
mdr add chiefgyk3d/git-your-ship-together/docs/DESIGN.md@sha256:0d2d184b808de2dcThe line at the top of this page pins the label git:20261030.6641d92, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ejebdgtc2j724kuy)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 21, 2026 and Oct 30, 2026, about one every 10 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261030.6641d92 latest | 2026-10-30 | 6641d92 | 20,183 B | A | view · diff |
| git:20261026.6d1c08b | 2026-10-26 | 6d1c08b | 20,174 B | A | view · diff |
| git:20261009.044eccd | 2026-10-09 | 044eccd | 19,810 B | A | view · diff |
| git:20261009.f4617e1 | 2026-10-09 | f4617e1 | 19,633 B | A | view · diff |
| git:20260921.23aa186 | 2026-09-21 | 23aa186 | 19,390 B | A | view |
Audit of the latest version
- pass: Size between 200 bytes and 200 KB (20183 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
chiefgyk3d/git-your-ship-together · 20 stars · license Apache-2.0 · pushed 2026-11-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ejebdgtc2j724kuy GET https://markdownregistry.com/api/v1/resolve?ref=chiefgyk3d/git-your-ship-together/docs/DESIGN.md GET https://markdownregistry.com/api/v1/blob/0d2d184b808de2dc89f75828cce387f6154d1a3df33addcaed52702cf20f3788
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: what DESIGN.md is and how agents use it · which agent file does what.
More from chiefgyk3d/git-your-ship-together
Every file in chiefgyk3d/git-your-ship-together