SCAR — Version Control for Negative Knowledge
Git records what your codebase is. Nothing records what it refused to be.
SCAR is a git-native system for capturing, anchoring, and enforcing the negative knowledge of a codebase — the dead ends, the load-bearing weirdness, the invisible tripwires — and surfacing it at the exact moment someone (human or AI agent) is about to step on it.
The one-liner
Every codebase is a battlefield where the bodies have been removed. SCAR puts the markers back.
The three primitives
| Type | Meaning | Example |
|---|---|---|
deadend |
We tried X. It failed because Y. Don't retry unless Z changes. | "We tried Redis for session storage in 2024-03. Eviction under memory pressure logged users out mid-checkout. Don't retry unless sessions become re-derivable." |
fence |
This code looks wrong. It is intentional. Here's why. | "Yes, this retry loop sleeps 7 seconds, not 5. The upstream vendor's rate limiter has a 6-second window they don't document." |
landmine |
Changing A breaks B in a way nothing in the code tells you. | "The CSV export in reports/ depends on the column order of this SELECT. Reorder it and Finance's reconciliation pipeline silently corrupts." |
Why now
AI agents write an increasing share of all code. Agents have zero hallway memory. They see a weird retry loop and "clean it up." They see a missing cache layer and re-add the library that was removed after a data-corruption incident. They retry, across thousands of sessions, the exact approaches that already failed — because the repository only records positive space.
Humans at least had tribal knowledge. Agents have none. And as agents author more of the code, the negative knowledge stops even entering human memory — it evaporates entirely.
The flip side: agents also solve the historically fatal flaw of every knowledge-capture system — authorship cost. Nobody writes documentation after a failure. But an agent that just tried an approach and abandoned it can write a deadend scar in milliseconds, for free, at the moment of maximum context.
Agents created the urgency. Agents remove the adoption barrier. That's the wedge.
Documentation
Docs site: https://daily-nerd.github.io/Scar/ — quickstart, concepts, measurement methodology, agent integration, changelog.
AI agents: a machine-readable index lives at llms.txt.
In one paragraph: scars are small YAML+Markdown files in .scars/, tracked in git and reviewed in PRs, anchored to code via paths, tree-sitter symbols, and diff-scoped patterns — not line numbers. A pre-edit hook injects relevant scars into an agent's context at the moment of action; an optional violation: regex is a post-edit tripwire that makes compliance measurable. Advisory, never blocking, by default; agents and scar harvest write only candidates, a human promotes.
Install
uv tool install scar-cli # or: pipx install scar-cli
Symbol anchors (function/class names that survive file moves) need the
tree-sitter extra; without it they silently don't resolve and only scar lint
warns:
uv tool install "scar-cli[symbols]"
The parser and agent hook hot-path are stdlib-only; the human-facing CLI adds
rich + rich-argparse for formatted output. Python ≥3.10.
Quickstart
cd your-repo
scar init # creates .scars/ with template + seeded example
cp .scars/template.md .scars/candidates/redis-sessions.md
$EDITOR .scars/candidates/redis-sessions.md
scar lint # validate format
scar promote redis-sessions.md # human review gate: candidate -> active
scar hook install # Claude Code: inject scars before agent edits
scar skill install # Claude Code: authoring skill into ~/.claude/skills/
scar hook install --runtime windsurf # Windsurf/Cascade: block-once injection
Claude Code users: the marketplace plugin ships the hooks and the
scar-authoring skill together; the two commands above are the manual fallback.
Re-run scar skill install after upgrading — the installed skill is a static copy.
Full walkthrough, lifecycle commands, and agent wiring (Claude Code plugin,
Windsurf/Cascade hooks, MCP server, scar draft-check for every other runtime):
quickstart ·
agent integration.
CI / pre-commit
SCAR ships a .pre-commit-hooks.yaml (repo root) for one-line adoption via
pre-commit:
# .pre-commit-config.yaml
repos:
- repo: https://github.com/Daily-Nerd/Scar
rev: v0.11.0 # pin a release-please tag; see the repo's releases
hooks:
- id: scar-lint # validates every scar; fails on orphan-detected
- id: scar-check # blocks a commit that touches anchored code (#106 gate)
Both hooks assume .scars/ already exists (scar init) and language: python
installs this package into pre-commit's own isolated venv — no separate
scar install required on the machine running the hook.
SCAR also ships a composite GitHub Action (action.yml, repo root) for
CI without pre-commit:
# .github/workflows/scar.yml
- uses: Daily-Nerd/Scar@main # or pin a tag, e.g. @v0.11.0 (release-please)
with:
fail-orphans: 'true' # default; set 'false' to only fail on parse errors
version: '' # empty = latest scar-cli from PyPI; or pin e.g. '0.11.0'
args: '' # extra args appended to `scar lint`
@main always tracks the latest commit; releases are tagged vX.Y.Z via
release-please, so pin a tag for reproducible CI.
Quality discipline
- Candidates vs active: agents and
scar harvestonly ever write to.scars/candidates/. A human promotes (scar promote) — nothing enters active enforcement without review. - Expiry conditions: every scar can declare when it stops being true ("valid until sessions are re-derivable"). Stale knowledge is a bug, not a feature.
- Validated in use, honestly: a 14-day agent auto-authorship trial (protocol + findings) kept 3 of the drafter's candidates after human review — including one that caught a real parser bug in this repo and fired on the exact edit that fixed it. The trigger heuristic also fired falsely on 2 of its 4 firings, which is why it was retuned to revert-language-only. Candidates that reached review were kept at a high rate; the trigger needed work. Both numbers are in the findings file.
Read more
- Docs site — quickstart, concepts, measurement methodology, agent integration
- IDEA.md — the full pitch: problem, solution, why this, why now, why me
- SPEC.md — scar format, anchoring model, CLI surface, agent integration
- STRESS-TEST.md — adversarial analysis: failure modes, loopholes, objections, premortem
- ROADMAP.md — phased plan from prototype to product
Status & expectations
Working software, shared as-is. CLI v0 is shipped: 19 subcommands, 528 tests, stdlib-only parser/hot-path, CI-enforced. It runs daily across the author's repos (where it has already caught real bugs — see .scars/ in this very repo for live examples).
This is personal infrastructure published as a gift to the OSS community, not a product. Issues and PRs are welcome and read with interest, but there is no support SLA and no roadmap promise. If it's useful to you, that's the whole point.
License
MIT
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file scar_cli-0.17.0.tar.gz.
File metadata
- Download URL: scar_cli-0.17.0.tar.gz
- Upload date:
- Size: 416.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
7aedf80bffb731265d1e93726cacee265f9aceff39550dfccee4d54b2c4f142b
|
|
| MD5 |
f5158a31bf5f5f16336242b7fbc3aee5
|
|
| BLAKE2b-256 |
324b5e3788d1acbea2031c439d0244c55ee4c333289df7f79204aa067c4dbfdd
|
Provenance
The following attestation bundles were made for scar_cli-0.17.0.tar.gz:
Publisher:
release.yml on Daily-Nerd/Scar
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
scar_cli-0.17.0.tar.gz -
Subject digest:
7aedf80bffb731265d1e93726cacee265f9aceff39550dfccee4d54b2c4f142b - Sigstore transparency entry: 2481688837
- Sigstore integration time:
-
Permalink:
Daily-Nerd/Scar@df45d7d3217989c1fffc580508f431c26874a7c5 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/Daily-Nerd
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@df45d7d3217989c1fffc580508f431c26874a7c5 -
Trigger Event:
push
-
Statement type:
File details
Details for the file scar_cli-0.17.0-py3-none-any.whl.
File metadata
- Download URL: scar_cli-0.17.0-py3-none-any.whl
- Upload date:
- Size: 111.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
fc5d159616cb0fc059e359cd4330e8aff6bd63fecdc546ca61e52d31ba9cd2d2
|
|
| MD5 |
6e1c02b5581f678652a0ea497ad9a30c
|
|
| BLAKE2b-256 |
101331921ae384029a5403d39fb218c3187c1156a8cb13073e777832cda1c8f3
|
Provenance
The following attestation bundles were made for scar_cli-0.17.0-py3-none-any.whl:
Publisher:
release.yml on Daily-Nerd/Scar
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
scar_cli-0.17.0-py3-none-any.whl -
Subject digest:
fc5d159616cb0fc059e359cd4330e8aff6bd63fecdc546ca61e52d31ba9cd2d2 - Sigstore transparency entry: 2481688867
- Sigstore integration time:
-
Permalink:
Daily-Nerd/Scar@df45d7d3217989c1fffc580508f431c26874a7c5 -
Branch / Tag:
refs/heads/main - Owner: https://github.com/Daily-Nerd
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@df45d7d3217989c1fffc580508f431c26874a7c5 -
Trigger Event:
push
-
Statement type: