ADD — AI-Driven Development
Your AI's first milestone is always great. ADD is for every milestone after that.
One skill file for work the AI plans, builds and verifies — while you own the two things it cannot do alone: decide what to make, and judge whether it is right. No engine, no CLI: the tools are files, git, and your project's own test command.
The agent is the hands. ADD is the memory, judgment, and conscience — the part of the team
that survives when the context window doesn't. Memory: .add/PROJECT.md, one task file per
change, five living specs — plain markdown in your repo. Judgment: every change is sized, and
every guess the agent makes is written down. Conscience: checks sealed in git before the build,
a verdict backed by real test output, and security findings that always stop.
The full reasoning — why every rule exists — is the ADD book.
Foundation (context): DDD · SDD · UDD
The loop (this skill): TDD ⇄ ADD
Per task: Direction (rules · assumptions · red checks → freeze commit)
→ Build (red → green) → Verify (seal intact · fresh run · residue · verdict) ↻
Quick Start
npx @pilotspace/add init # Node / npm
pip install pilotspace-add && pilotspace-add init # Python / pip
Then, in your coding agent, say what you want to build:
/add— "Let users log in with email + password / SSO, and keep them signed in for 30 days unless they explicitly log out."
The agent sizes the request, writes the task's rules, assumptions and failing checks, seals them
with a freeze(<slug>) commit, builds to green, verifies on a fresh run, and hands you a report
of what it decided and on what evidence. Full walkthrough: the Quickstart.
ADD in plain words
We gave Claude Code the same 300 real bugs from popular open-source projects twice: once on its own, and once with ADD installed. Same AI, same bugs, same settings.
| Claude Code on its own | Claude Code + ADD | |
|---|---|---|
| 🐛 Bugs fixed | 215 of 300 | 226 of 300 |
| ✅ Ran the tests and saw them pass before saying "done" | 53 of 300 | 274 of 300 |
| 🧪 The fix came with its own test | 17 of 300 | 299 of 300 |
| 📝 Wrote down its guess where the request was silent ("who may cancel a booking?") | 0 of 3 | 3 of 3 |
| 💰 Price and time per bug | about 9¢ · 32 s | about 16¢ · 80 s (1.8× the money, 2.5× the time) |
In short: ADD fixes at least as many bugs, checks and tests almost every fix, and tells you what
it assumed. It costs more, and the gain in bugs fixed is small enough that it is not yet proven. Run
it with --effort medium. See the results animated, in plain words →
Highlights
- 📜 Every change leaves its reasoning in your repo — the rules, the guesses and the checks live in one task file next to the code, so the next session or teammate reads the intent instead of guessing it.
- 🛡️ Safer guesses where your spec is silent — ADD takes the least-privilege reading when nobody said who may act, and seals a check for it.
- 🔒 Trust rests on evidence, not a plausible diff — checks are sealed in a
freezecommit before the build, and every task ends in a verdict you can re-run. Security findings always lead the report. - ⚖️ An honest price — Measured on ADD 4.1.0 with Claude Sonnet 5.5 (n = 300 real bugs, both at
--effort medium): ADD resolved 226 to vanilla Claude Code's 215, at 1.8× the dollars and 2.5× the seconds per bug. On small apps it costs 1.3–1.9× the dollars and 1.8–2.4× the minutes; correctness ties, and its tests catch more seeded bugs (0.81 vs 0.43) (results). - 💸 Ceremony only where it buys trust — most changes take the Quick lane: one red→green test, one commit, no task file.
What ADD gives your project
Vanilla Claude Code already writes good code: on Sonnet 5.5 it passed every held-out edge case in our benchmark. What it does not leave behind is the why. ADD 4.0 is one skill file, with no engine and no CLI, that makes every change leave the reasoning in your repository, next to the code:
| What your project keeps | Why it pays off later | |
|---|---|---|
| 📜 A contract per change | .add/tasks/<slug>.md: the rules, the guesses, and the checks that prove them |
the next session, or the next teammate, reads the intent instead of reverse-engineering it from code |
| 🙋 Every guess on the record | each silence in your request becomes an ASSUMPTION: the reading taken and the cost if wrong, costliest first | you review a short list of decisions, not a diff; a wrong guess is one line to correct |
| 🛡️ Safer readings of silence | when nobody said who may do something, ADD takes the least-privilege reading and seals a check for it | the booking benchmark never said who may cancel: vanilla let anyone in 8 of 8 runs; ADD chose owner-only in 3 of 3 on Sonnet 5.5 |
| 🔒 Checks sealed before the code | the failing checks are committed as freeze(<slug>) before any build |
a test weakened to get green shows up in git diff; a change of intent is a visible refreeze commit |
| 🧪 Tests that run, and stay | ADD runs your repo's own tests and ships its new ones with the change | on all 300 SWE-bench Lite issues ADD saw a passing test run before shipping in 274 of 300 and shipped a test with 299 of 300; vanilla did in 53 of 300 and 17 of 300. ADD's tests also catch more seeded bugs (0.81 vs 0.43, rounds 8–9 pooled) |
| 🔬 Evidence you can re-run | a verdict (PASS, RISK-ACCEPTED or HARD-STOP) with the exact commands and counts, committed as verify(<slug>) |
the claimed test count matched a fresh rerun in 33 of 33 benchmark runs; security findings always lead the report |
| 🧠 Memory that outlives the chat | state lives on disk, not in the conversation | over six evolving milestones, one long chat's requirement coverage fell .92 → .75, while fresh sessions resuming from disk held 1.0 (report) |
Vanilla Claude vs Claude + ADD — the same request, two flows
Two real round-6 runs on Sonnet 5.5, given the same spec: a booking service whose requirements
contradict each other (a conflict gets 202 waitlisted and 409 rejected) and say nothing on six
other decisions. ▶ Watch both play on one clock.
| clock | 🏃 vanilla Claude Code (vanilla-amb/rep1) |
🛡️ Claude Code + ADD (add-4-amb/rep1) |
|---|---|---|
| 0 s | reads the repo | orients from .add/PROJECT.md |
| 31 s | writes app/ and 7 tests in one command |
… |
| 46 s | tests pass, smoke run OK: done, $0.28 | … |
| 56–94 s | Direction: writes .add/tasks/booking-waitlist.md with 17 rules, 8 ASSUMPTIONS and 19 checks, plus the tests |
|
| 97 s | runs the 19 checks red and seals them: freeze(booking-waitlist) |
|
| 110–138 s | Build: code until all 19 pass, sealed files untouched, then a build commit | |
| 154–186 s | Verify: a live probe with curl, a fresh run (19 OK) and an empty seal diff, then verify(booking-waitlist): PASS |
|
| 195 s | done, $0.63 | |
| the contradiction | caught it and chose waitlist-by-default with a "waitlist": false opt-out, in its chat reply |
caught it and made the same choice, as ASSUMPTION A1 in the task file, first in the report as the costliest guess |
| who may cancel a booking? | anyone | the owner only (rule R:OWNER, sealed check C11) |
| left in your repo | the code and its tests | the code, the checks, the contract and the evidence, as three commits |
Same code quality, same headline decision. The difference is where that decision lives, and the guesses nobody asked about.
Measured on 4.0 — what you get, what you pay
The same Claude Code with and without the ADD skill, on claude-sonnet-5-5 (Sonnet 5.5): two small
apps at n = 3 per arm, and all 300 SWE-bench Lite issues once per arm (results ·
both flows, animated ·
the earlier rounds, animated).
| what you get | vanilla Claude Code | Claude Code + ADD |
|---|---|---|
| Fixes that land — SWE-bench Lite, all 300 issues resolved (both at medium) | 215 of 300 | 226 of 300 (p = 0.099) |
| Verified before it ships — a passing test run seen (SWE, 300 issues) | 53 of 300 | 274 of 300 |
| Ships with a test — the fix carries its own test (SWE, 300 issues) | 17 of 300 | 299 of 300 |
| Tests that catch bugs — seeded bugs its own tests catch (wm1 · amb1, rounds 8–9 pooled) | 0.78 · 0.43 | 0.86 · 0.81 |
| Guesses you can review — "who may cancel?" read as owner-only and written down (amb1) | 0 of 3 | 3 of 3 |
| Ambiguities handled right — of 7 planted (amb1) | 5.0 | 5.3 |
| Claims you can trust — claimed test count = a fresh rerun | no claim made | every parsed claim |
| Correct on small apps — requirement oracle · held-out edge cases (wm1) | 1.00 · 22 of 22 | 1.00 · 22 of 22, a tie |
| you pay: SWE dollars · seconds per issue (both at medium) | $0.089 · 32 s | $0.162 · 80 s, 1.8× · 2.5× |
| you pay: small apps, dollars per run (wm1 · amb1; ADD at low) | $0.21 · $0.17 | $0.28 · $0.32, 1.3× · 1.9× |
| you pay: small apps, minutes per run (wm1 · amb1; ADD at low) | 0.9 · 0.7 min | 1.6 · 1.7 min, 1.8× · 2.4× |
Effort matters. At --effort low ADD read its skill in only half its runs and resolved 201 of 300 to vanilla's 215.
At medium it read the skill in 292 of 300 and resolved 226. In a blind six-issue review, one reviewer preferred vanilla's shorter output in 6 of 6, while 2 of the 5 vanilla patches
they approved as is fail the benchmark's tests; timed review is not measured (fresh 300 at medium).
Small changes. A change with no new behavior (a typo, a rename, a comment, a config value) is made without a new test; every bug fix keeps its test, as measured. A looser rule (a test only when the AI judged it important) was tried and dropped: on 101 of the issues it resolved 78 against 83 for the measured skill, for a 6% saving.
Earlier rounds, older models and the full method are in the results history.
Fine print: both arms ran with the operator's own ~/.claude kept out of the session; earlier rounds loaded it, and its security-guidance plugin slowed every ADD commit. Run ADD at --effort medium: at --effort low it skipped its own skill in half the SWE runs and resolved 25 fewer issues. The small apps are n = 3: direction, not proof.
When vanilla Claude is the right call
- Throwaway work (a script, a spike, a one-shot), or a fix you will not review: use vanilla. It runs about 2.5× faster at about half the price, and on SWE-bench Lite it resolved 215 of 300 to ADD's 226.
- A product you will still be changing next month (several milestones, teammates, or anything where who may do this? matters): use ADD. The decisions outlive the chat, the guesses get reviewed, and the checks cannot quietly weaken.
- In between, ADD sizes each request itself. Most changes take the Quick lane, which is one red→green test and one commit, with no task file.
ADD works with the agent you already use (Claude Code, Codex, Cursor, Copilot, Gemini) and installs via npm, pip, or the Claude Code plugin.
Direction before speed. Trust comes from evidence you can re-run, not from reading code and finding it plausible.
How much ceremony? — the lanes
Most changes never create a node. The agent sizes each request and routes it to the lightest safe lane. The floor is checked first: anything touching security · data · architecture, or a surface other code consumes, is at least a Task.
| the request | lane | what persists |
|---|---|---|
| mechanical, or a small behavior — ≤3 adjacent files, one sitting, no unknowns | Quick — no node | a red→green test + one commit |
| one behavior worth a written contract | Task | .add/tasks/<slug>.md + its commits |
| the answer is the deliverable — investigate · evaluate · research | Explore | the task's cited ## FINDINGS |
| a theme, or more than one task | Milestone | .add/milestones/<slug>.md + its tasks |
Skipped ceremony is never skipped review: a Quick change still writes its test and runs it red.
Install
Pick your ecosystem — all three install the same skill:
npx @pilotspace/add init # Node / npm
pip install pilotspace-add && pilotspace-add init # Python / pip
# Claude Code plugin — no npm or pip needed
/plugin marketplace add pilotspace/ADD
/plugin install add@add-method
This installs:
| Path | What |
|---|---|
.claude/skills/add/ |
the add skill — SKILL.md, references/format.md, references/explore.md, and the persona-author sub-skill |
.add/personas/ |
starter personas — yours to edit; a re-install never overwrites one |
.add/personas-teacher/ |
the vendored corpus personas are distilled from (read while authoring, never at run time) |
.add/personas-index/ |
which persona to reach for, and when |
AGENTS.md / CLAUDE.md etc. |
for agents other than Claude Code: a short managed block pointing at the skill |
The installer drops files only. The bundle itself — .add/PROJECT.md and the specs — is the
agent's first move when you run /add.
Already installed? npx @pilotspace/add@latest update (or pipx run pilotspace-add update)
refreshes the skill and leaves your project work untouched. Coming from 3.x? Your bundle reads
as-is; the update removes the old engine files. See
what changed in 4.0.
New here? Pick the walkthrough that matches what you are making:
- 🔍 Quickstart — your first feature, end to end
- 📒 Beyond code — a month-end close: same loop, where the artifact under check is a ledger rather than a repo
Boundaries — what this package writes and runs
- Runs only when you ask. Nothing executes on install beyond copying files.
- What it writes: the skill under
.claude/skills/add/, persona files under.add/, and the managed ADD block in your agent's context file. Never above the project root. - Network: none.
npm/pipxfetch the package; after that ADD is entirely offline. - No secrets, no credentials, no privileged access.
Use it
You talk to the agent; it drives the method. In Claude Code, /add starts or resumes work and
/add status summarizes where things stand. Other agents read the managed ADD block the
installer writes into AGENTS.md (and CLAUDE.md), which points them at the same skill file;
if .gemini/ exists, the installer also adds AGENTS.md to Gemini CLI's context files.
You can always read the state yourself: it is .add/PROJECT.md, the task files, and git log.
The non-negotiables
- Direction before build — no production code before rules, assumptions and checks exist and the checks have failed for the right reason.
- Evidence, not inspection — a change is trusted because its checks pass fresh on the committed tree and its residue was read. A green proves the checks you wrote ran — never that they were enough.
- Never weaken a sealed check or edit the contract to pass — changed intent is a visible
refreezewith a reason. - No silent outcomes — every task ends
PASS,RISK-ACCEPTEDorHARD-STOP; every guess is an assumption the human can read. Security findings are alwaysHARD-STOP. invariants:bind every change, Quick included.
Read the method
- 📖 Read the book — the full method, chapter by chapter
- 🔍 Quickstart — one real feature, end to end
- 📒 Beyond code — one real month-end close, end to end
- 📊 Benchmark results — every trust and cost claim, measured
- ⚖️ ADD vs spec-kit — the honest comparison
Develop
python3 -m pytest -q # from add-method/
License: MIT.
Metadata
Release files for pilotspace-add 4.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| pilotspace_add-4.1.0.tar.gz | 1.4 MB | With provenance | Details for pilotspace_add-4.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| pilotspace_add-4.1.0-py3-none-any.whl | Python 3 | none | any | Details for pilotspace_add-4.1.0-py3-none-any.whl |
Total release size: 3.0 MB
Release files / pilotspace_add-4.1.0.tar.gz
| Download URL | pilotspace_add-4.1.0.tar.gz |
|---|---|
| Size | 1.4 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
56b65bbb543eef022b87f20dfa47398fc47853b2e02061cdbd4a8f58706040e0
|
|
BLAKE2b-256 checksum How to use checksums |
89acb6aa4ea2f080811f79ba0b3ec2eabb1bfc03f31c64880fda0442e672eaac
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logRelease files / pilotspace_add-4.1.0-py3-none-any.whl
| Download URL | pilotspace_add-4.1.0-py3-none-any.whl |
|---|---|
| Size | 1.6 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
a284dbd53e1e99e6771fab2249bf249c732585e49c62de46f51e244252800af8
|
|
BLAKE2b-256 checksum How to use checksums |
bdfa70f62bce2eabe395bb4d47138e9c13e0964187694d45d5f57d1a8387463c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logSecurity for pilotspace-add 4.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
Both files in this release have been uploaded with provenance metadata.
Attestation for pilotspace_add-4.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 8, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.