Skip to main content

npm version PyPI version License: MIT Read the book GitHub stars

ADD — AI-Driven Development

Your AI's first milestone is always great. ADD is for every milestone after that.

One skill file for work the AI plans, builds and verifies — while you own the two things it cannot do alone: decide what to make, and judge whether it is right. No engine, no CLI: the tools are files, git, and your project's own test command.

The agent is the hands. ADD is the memory, judgment, and conscience — the part of the team that survives when the context window doesn't. Memory: .add/PROJECT.md, one task file per change, five living specs — plain markdown in your repo. Judgment: every change is sized, and every guess the agent makes is written down. Conscience: checks sealed in git before the build, a verdict backed by real test output, and security findings that always stop.

The full reasoning — why every rule exists — is the ADD book.

  Foundation (context):  DDD  ·  SDD  ·  UDD
  The loop (this skill): TDD  ⇄  ADD
  Per task:  Direction (rules · assumptions · red checks → freeze commit)
             → Build (red → green)  → Verify (seal intact · fresh run · residue · verdict)  ↻

Quick Start

npx @pilotspace/add init                                # Node / npm
pip install pilotspace-add && pilotspace-add init       # Python / pip

Then, in your coding agent, say what you want to build:

/add — "Let users log in with email + password / SSO, and keep them signed in for 30 days unless they explicitly log out."

The agent sizes the request, writes the task's rules, assumptions and failing checks, seals them with a freeze(<slug>) commit, builds to green, verifies on a fresh run, and hands you a report of what it decided and on what evidence. Full walkthrough: the Quickstart.

ADD in plain words

We gave Claude Code the same 300 real bugs from popular open-source projects twice: once on its own, and once with ADD installed. Same AI, same bugs, same settings.

Claude Code on its own Claude Code + ADD
🐛 Bugs fixed 215 of 300 226 of 300
✅ Ran the tests and saw them pass before saying "done" 53 of 300 274 of 300
🧪 The fix came with its own test 17 of 300 299 of 300
📝 Wrote down its guess where the request was silent ("who may cancel a booking?") 0 of 3 3 of 3
💰 Price and time per bug about 9¢ · 32 s about 16¢ · 80 s (1.8× the money, 2.5× the time)

In short: ADD fixes at least as many bugs, checks and tests almost every fix, and tells you what it assumed. It costs more, and the gain in bugs fixed is small enough that it is not yet proven. Run it with --effort medium. See the results animated, in plain words →

Highlights

  • 📜 Every change leaves its reasoning in your repo — the rules, the guesses and the checks live in one task file next to the code, so the next session or teammate reads the intent instead of guessing it.
  • 🛡️ Safer guesses where your spec is silent — ADD takes the least-privilege reading when nobody said who may act, and seals a check for it.
  • 🔒 Trust rests on evidence, not a plausible diff — checks are sealed in a freeze commit before the build, and every task ends in a verdict you can re-run. Security findings always lead the report.
  • ⚖️ An honest price — Measured on ADD 4.1.0 with Claude Sonnet 5.5 (n = 300 real bugs, both at --effort medium): ADD resolved 226 to vanilla Claude Code's 215, at 1.8× the dollars and 2.5× the seconds per bug. On small apps it costs 1.3–1.9× the dollars and 1.8–2.4× the minutes; correctness ties, and its tests catch more seeded bugs (0.81 vs 0.43) (results).
  • 💸 Ceremony only where it buys trust — most changes take the Quick lane: one red→green test, one commit, no task file.

What ADD gives your project

Vanilla Claude Code already writes good code: on Sonnet 5.5 it passed every held-out edge case in our benchmark. What it does not leave behind is the why. ADD 4.0 is one skill file, with no engine and no CLI, that makes every change leave the reasoning in your repository, next to the code:

What your project keeps Why it pays off later
📜 A contract per change .add/tasks/<slug>.md: the rules, the guesses, and the checks that prove them the next session, or the next teammate, reads the intent instead of reverse-engineering it from code
🙋 Every guess on the record each silence in your request becomes an ASSUMPTION: the reading taken and the cost if wrong, costliest first you review a short list of decisions, not a diff; a wrong guess is one line to correct
🛡️ Safer readings of silence when nobody said who may do something, ADD takes the least-privilege reading and seals a check for it the booking benchmark never said who may cancel: vanilla let anyone in 8 of 8 runs; ADD chose owner-only in 3 of 3 on Sonnet 5.5
🔒 Checks sealed before the code the failing checks are committed as freeze(<slug>) before any build a test weakened to get green shows up in git diff; a change of intent is a visible refreeze commit
🧪 Tests that run, and stay ADD runs your repo's own tests and ships its new ones with the change on all 300 SWE-bench Lite issues ADD saw a passing test run before shipping in 274 of 300 and shipped a test with 299 of 300; vanilla did in 53 of 300 and 17 of 300. ADD's tests also catch more seeded bugs (0.81 vs 0.43, rounds 8–9 pooled)
🔬 Evidence you can re-run a verdict (PASS, RISK-ACCEPTED or HARD-STOP) with the exact commands and counts, committed as verify(<slug>) the claimed test count matched a fresh rerun in 33 of 33 benchmark runs; security findings always lead the report
🧠 Memory that outlives the chat state lives on disk, not in the conversation over six evolving milestones, one long chat's requirement coverage fell .92 → .75, while fresh sessions resuming from disk held 1.0 (report)

Vanilla Claude vs Claude + ADD — the same request, two flows

Two real round-6 runs on Sonnet 5.5, given the same spec: a booking service whose requirements contradict each other (a conflict gets 202 waitlisted and 409 rejected) and say nothing on six other decisions. ▶ Watch both play on one clock.

clock 🏃 vanilla Claude Code (vanilla-amb/rep1) 🛡️ Claude Code + ADD (add-4-amb/rep1)
0 s reads the repo orients from .add/PROJECT.md
31 s writes app/ and 7 tests in one command …
46 s tests pass, smoke run OK: done, $0.28 …
56–94 s Direction: writes .add/tasks/booking-waitlist.md with 17 rules, 8 ASSUMPTIONS and 19 checks, plus the tests
97 s runs the 19 checks red and seals them: freeze(booking-waitlist)
110–138 s Build: code until all 19 pass, sealed files untouched, then a build commit
154–186 s Verify: a live probe with curl, a fresh run (19 OK) and an empty seal diff, then verify(booking-waitlist): PASS
195 s done, $0.63
the contradiction caught it and chose waitlist-by-default with a "waitlist": false opt-out, in its chat reply caught it and made the same choice, as ASSUMPTION A1 in the task file, first in the report as the costliest guess
who may cancel a booking? anyone the owner only (rule R:OWNER, sealed check C11)
left in your repo the code and its tests the code, the checks, the contract and the evidence, as three commits

Same code quality, same headline decision. The difference is where that decision lives, and the guesses nobody asked about.

Measured on 4.0 — what you get, what you pay

The same Claude Code with and without the ADD skill, on claude-sonnet-5-5 (Sonnet 5.5): two small apps at n = 3 per arm, and all 300 SWE-bench Lite issues once per arm (results · both flows, animated · the earlier rounds, animated).

what you get vanilla Claude Code Claude Code + ADD
Fixes that land — SWE-bench Lite, all 300 issues resolved (both at medium) 215 of 300 226 of 300 (p = 0.099)
Verified before it ships — a passing test run seen (SWE, 300 issues) 53 of 300 274 of 300
Ships with a test — the fix carries its own test (SWE, 300 issues) 17 of 300 299 of 300
Tests that catch bugs — seeded bugs its own tests catch (wm1 · amb1, rounds 8–9 pooled) 0.78 · 0.43 0.86 · 0.81
Guesses you can review — "who may cancel?" read as owner-only and written down (amb1) 0 of 3 3 of 3
Ambiguities handled right — of 7 planted (amb1) 5.0 5.3
Claims you can trust — claimed test count = a fresh rerun no claim made every parsed claim
Correct on small apps — requirement oracle · held-out edge cases (wm1) 1.00 · 22 of 22 1.00 · 22 of 22, a tie
you pay: SWE dollars · seconds per issue (both at medium) $0.089 · 32 s $0.162 · 80 s, 1.8× · 2.5×
you pay: small apps, dollars per run (wm1 · amb1; ADD at low) $0.21 · $0.17 $0.28 · $0.32, 1.3× · 1.9×
you pay: small apps, minutes per run (wm1 · amb1; ADD at low) 0.9 · 0.7 min 1.6 · 1.7 min, 1.8× · 2.4×

Effort matters. At --effort low ADD read its skill in only half its runs and resolved 201 of 300 to vanilla's 215. At medium it read the skill in 292 of 300 and resolved 226. In a blind six-issue review, one reviewer preferred vanilla's shorter output in 6 of 6, while 2 of the 5 vanilla patches they approved as is fail the benchmark's tests; timed review is not measured (fresh 300 at medium).

Small changes. A change with no new behavior (a typo, a rename, a comment, a config value) is made without a new test; every bug fix keeps its test, as measured. A looser rule (a test only when the AI judged it important) was tried and dropped: on 101 of the issues it resolved 78 against 83 for the measured skill, for a 6% saving.

Earlier rounds, older models and the full method are in the results history.

Fine print: both arms ran with the operator's own ~/.claude kept out of the session; earlier rounds loaded it, and its security-guidance plugin slowed every ADD commit. Run ADD at --effort medium: at --effort low it skipped its own skill in half the SWE runs and resolved 25 fewer issues. The small apps are n = 3: direction, not proof.

When vanilla Claude is the right call

  • Throwaway work (a script, a spike, a one-shot), or a fix you will not review: use vanilla. It runs about 2.5× faster at about half the price, and on SWE-bench Lite it resolved 215 of 300 to ADD's 226.
  • A product you will still be changing next month (several milestones, teammates, or anything where who may do this? matters): use ADD. The decisions outlive the chat, the guesses get reviewed, and the checks cannot quietly weaken.
  • In between, ADD sizes each request itself. Most changes take the Quick lane, which is one red→green test and one commit, with no task file.

ADD works with the agent you already use (Claude Code, Codex, Cursor, Copilot, Gemini) and installs via npm, pip, or the Claude Code plugin.

Direction before speed. Trust comes from evidence you can re-run, not from reading code and finding it plausible.

How much ceremony? — the lanes

Most changes never create a node. The agent sizes each request and routes it to the lightest safe lane. The floor is checked first: anything touching security · data · architecture, or a surface other code consumes, is at least a Task.

the request lane what persists
mechanical, or a small behavior — ≤3 adjacent files, one sitting, no unknowns Quick — no node a red→green test + one commit
one behavior worth a written contract Task .add/tasks/<slug>.md + its commits
the answer is the deliverable — investigate · evaluate · research Explore the task's cited ## FINDINGS
a theme, or more than one task Milestone .add/milestones/<slug>.md + its tasks

Skipped ceremony is never skipped review: a Quick change still writes its test and runs it red.

Install

Pick your ecosystem — all three install the same skill:

npx @pilotspace/add init                   # Node / npm
pip install pilotspace-add && pilotspace-add init      # Python / pip
# Claude Code plugin — no npm or pip needed
/plugin marketplace add pilotspace/ADD
/plugin install add@add-method

This installs:

Path What
.claude/skills/add/ the add skill — SKILL.md, references/format.md, references/explore.md, and the persona-author sub-skill
.add/personas/ starter personas — yours to edit; a re-install never overwrites one
.add/personas-teacher/ the vendored corpus personas are distilled from (read while authoring, never at run time)
.add/personas-index/ which persona to reach for, and when
AGENTS.md / CLAUDE.md etc. for agents other than Claude Code: a short managed block pointing at the skill

The installer drops files only. The bundle itself — .add/PROJECT.md and the specs — is the agent's first move when you run /add.

Already installed? npx @pilotspace/add@latest update (or pipx run pilotspace-add update) refreshes the skill and leaves your project work untouched. Coming from 3.x? Your bundle reads as-is; the update removes the old engine files. See what changed in 4.0.

New here? Pick the walkthrough that matches what you are making:

  • 🔍 Quickstart — your first feature, end to end
  • 📒 Beyond code — a month-end close: same loop, where the artifact under check is a ledger rather than a repo

Boundaries — what this package writes and runs

  • Runs only when you ask. Nothing executes on install beyond copying files.
  • What it writes: the skill under .claude/skills/add/, persona files under .add/, and the managed ADD block in your agent's context file. Never above the project root.
  • Network: none. npm/pipx fetch the package; after that ADD is entirely offline.
  • No secrets, no credentials, no privileged access.

Use it

You talk to the agent; it drives the method. In Claude Code, /add starts or resumes work and /add status summarizes where things stand. Other agents read the managed ADD block the installer writes into AGENTS.md (and CLAUDE.md), which points them at the same skill file; if .gemini/ exists, the installer also adds AGENTS.md to Gemini CLI's context files.

You can always read the state yourself: it is .add/PROJECT.md, the task files, and git log.

The non-negotiables

  1. Direction before build — no production code before rules, assumptions and checks exist and the checks have failed for the right reason.
  2. Evidence, not inspection — a change is trusted because its checks pass fresh on the committed tree and its residue was read. A green proves the checks you wrote ran — never that they were enough.
  3. Never weaken a sealed check or edit the contract to pass — changed intent is a visible refreeze with a reason.
  4. No silent outcomes — every task ends PASS, RISK-ACCEPTED or HARD-STOP; every guess is an assumption the human can read. Security findings are always HARD-STOP.
  5. invariants: bind every change, Quick included.

Read the method

Develop

python3 -m pytest -q      # from add-method/

License: MIT.

Metadata

Release files for pilotspace-add 4.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pilotspace-add 4.1.0
File Size Uploaded Provenance Actions
pilotspace_add-4.1.0.tar.gz 1.4 MB With provenance Details for pilotspace_add-4.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pilotspace-add 4.1.0
File Interpreter ABI Platform Actions
pilotspace_add-4.1.0-py3-none-any.whl Python 3 none any Details for pilotspace_add-4.1.0-py3-none-any.whl

Total release size: 3.0 MB

Release files / pilotspace_add-4.1.0.tar.gz

Download URL pilotspace_add-4.1.0.tar.gz
Size 1.4 MB
Tags Source
SHA-256 checksum
How to use checksums
56b65bbb543eef022b87f20dfa47398fc47853b2e02061cdbd4a8f58706040e0
BLAKE2b-256 checksum
How to use checksums
89acb6aa4ea2f080811f79ba0b3ec2eabb1bfc03f31c64880fda0442e672eaac
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

Release files / pilotspace_add-4.1.0-py3-none-any.whl

Download URL pilotspace_add-4.1.0-py3-none-any.whl
Size 1.6 MB
Tags Python 3
SHA-256 checksum
How to use checksums
a284dbd53e1e99e6771fab2249bf249c732585e49c62de46f51e244252800af8
BLAKE2b-256 checksum
How to use checksums
bdfa70f62bce2eabe395bb4d47138e9c13e0964187694d45d5f57d1a8387463c
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

Security for pilotspace-add 4.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for pilotspace_add-4.1.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

4.1.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page