Skip to main content

SDLCKit — AI-governed SDLC lifecycle engine with SAGE loop

Project description

SDLCKit

Governed AI quality loops for every SDLC phase.

Beta Python 3.11+ License: Apache 2.0

SDLCKit wraps each phase of the software development lifecycle in a SAGE loop — a governed cycle where humans declare intent, AI produces artifacts, and independent scorers review against weighted quality dimensions. The result: measurable confidence in AI-generated artifacts before they reach production.

SDLCKit is a governance layer, not an SDLC. You keep your existing process and add SDLCKit on top.


Why Governance?

AI agents can produce code, specs, and designs — but without governance, there is no measurable quality signal. SDLCKit provides that signal through four properties:

Property What It Means
Independent Scoring Scorer agent is sandboxed (read-only tools). Cannot collude with producer.
Dimensional Confidence Not pass/fail. N weighted dimensions scored independently (e.g., clarity 0.35, completeness 0.30).
Bounded Fix Loops Max N automated iterations. Oscillation detection stops thrashing.
Human Gates Two-pass: (1) deterministic structural check, (2) human quality review with scorecard.

The SAGE Loop

Every phase — refine, architect, build, review — runs the same governed cycle:

  SCOPE                           SAGE LOOP
  +------------------+            +------------+
  | User input       |       +--->|  ANALYZE   |
  | Discovery output |       |    |  Frame goal + constraints   |
  | Feedback signals |------>+    +-----+------+
  | Prior state      |       |          |
  +------------------+       |          v
                             |    +------------+
                             |    | GENERATE   |
                             |    |  AI produces artifacts      |
                             |    +-----+------+
                             |          |
                             |          v
                             |    +------------+
                             |    | EVALUATE   |
                             |    |  Independent scorer scores  |
                             |    |  N weighted dimensions      |
                             |    +-----+------+
                             |          |
                             |     confidence < threshold?
                             |          |
                             |     YES: Fix Loop (target weakest dim)
                             |          |
                             |     NO:  Human Gate
                             |          |
                             |    [Approve] -> advance
                             |    [Revise]  -> feedback
                             +----[Pause]   -> save state

Quick Start

Prerequisites

Install

pip install sdlckit

Installs the latest published release. To pin a specific version:

pip install sdlckit==0.2.0

Initialize a Project

sdlckit init

Scaffolds your project: sdlc.yaml, skills, agents, templates, schemas, and the /sdlc slash command.

Customize

After init, update these for your team:

  • sdlc.yaml — lifecycle phases, scoring dimensions, thresholds, plugin config
  • .sdlckit/conventions/ — layered convention files loaded in sorted order:
    • 00-architecture.md — diagram standards, naming, classDef palette (built-in)
    • 01-security-architecture.md — trust zones, data classification (built-in)
    • 10-your-team.md, 11-your-domain.md — add your own with 10+ prefix

Run a Phase

# In Claude Code:
/sdlc refine "user onboarding feature"

The SAGE engine produces REFINE.md, scores it across weighted dimensions, runs fix loops if below threshold, then presents the human gate.

Check Status

/sdlc status

Commands

Slash commands (in Claude Code):

Command What It Does
/sdlc <phase> "input" Run a phase with direct input
/sdlc <phase> Run a phase (inputs auto-resolved from upstream)
/sdlc <phase> amend "feedback" Re-enter a completed phase with feedback
/sdlc status Lifecycle dashboard
/sdlc reconcile Re-run stale phases after an amendment
/sdlc signal list|show|dismiss|inject Manage feedback signals
/sdlc connectors View connector plugin status

Phase commands are dynamic — a custom phase compliance in sdlc.yaml becomes /sdlc compliance.

CLI commands:

Command What It Does
sdlckit init [--type component|initiative] Scaffold a project
sdlckit assign <path> Import an assignment into a component repo
sdlckit observe <title> --components <names> Record an operational observation
sdlckit archive <name> Pre-merge cleanup (manifests, state)
sdlckit --version Show installed version

Two Modes

Component mode (sdlc.yaml) — single project, linear phase sequence: refine -> architect -> build -> review.

Initiative mode (sdlc-initiative.yaml) — multi-component, multi-repo projects. Discovery and Delivery stages with per-component SAGE loops, stage reviews, knowledge extraction, and assignment handoffs.


Extending with Plugins

SDLCKit separates engine (how the loop runs) from domain knowledge (what the loop produces). Plugins provide richer implementations:

  • Phase plugins replace built-in phases with specialized skills, agents, dimensions, and templates
  • Connector plugins deliver scored artifacts to external systems (Jira, CI/CD, etc.)

See the Developer Guide in the repository for plugin authoring.


Roadmap

Feature Target
Checkpoint / resume (crash recovery) v0.3
SAGE-wrapped knowledge extraction v0.3
Connector plugin execution v0.3
auto_advance phase chaining v0.3
Plugin registry + remote sources Post-1.0

Documentation

The repository includes detailed guides:

  • Consumer Guide — installation, configuration, daily usage
  • Contributor Guide — engine internals, testing
  • Developer Guide — building plugins, skills, agents, schemas
  • Architecture Reference — SAGE engine, state management, plugin model, agent model

License

Apache License 2.0

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sdlckit-0.2.1.tar.gz (118.4 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sdlckit-0.2.1-py3-none-any.whl (78.3 kB view details)

Uploaded Python 3

File details

Details for the file sdlckit-0.2.1.tar.gz.

File metadata

  • Download URL: sdlckit-0.2.1.tar.gz
  • Upload date:
  • Size: 118.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for sdlckit-0.2.1.tar.gz
Algorithm Hash digest
SHA256 c83648b31fecf5d7df10dac7cb3f88a0225496a8b3766464680f44c3fb7a749a
MD5 c303b695dbcde8c2d2b1a69b1cc34bf4
BLAKE2b-256 ea70ed6ba20077f70fd412ac33693e795832cf9c8c7a32ffe45afc9d2bb1afc5

See more details on using hashes here.

Provenance

The following attestation bundles were made for sdlckit-0.2.1.tar.gz:

Publisher: publish.yml on atishio/sdlc-kit

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sdlckit-0.2.1-py3-none-any.whl.

File metadata

  • Download URL: sdlckit-0.2.1-py3-none-any.whl
  • Upload date:
  • Size: 78.3 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for sdlckit-0.2.1-py3-none-any.whl
Algorithm Hash digest
SHA256 be6b9a80fb6d5121a75736753511ff05b74d09fd3ce6a2e015ecc5c1f5cfb6c7
MD5 71528b52f51f627f2b147a2d04f5eecb
BLAKE2b-256 ac22b41f98357982473acaefe752d43eb16b1d1c95474c6c90f7144692ac324d

See more details on using hashes here.

Provenance

The following attestation bundles were made for sdlckit-0.2.1-py3-none-any.whl:

Publisher: publish.yml on atishio/sdlc-kit

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page