Skip to main content

SDLCKit — AI-governed SDLC lifecycle engine with SAGE loop

Project description

SDLCKit

Governed AI quality loops for every SDLC phase.

Beta Python 3.11+ License: Apache 2.0

SDLCKit wraps each phase of the software development lifecycle in a SAGE loop — a governed cycle where humans declare intent, AI produces artifacts, and independent scorers review against weighted quality dimensions. The result: measurable confidence in AI-generated artifacts before they reach production.

SDLCKit is a governance layer, not an SDLC. You keep your existing process and add SDLCKit on top.


Why Governance?

AI agents can produce code, specs, and designs — but without governance, there is no measurable quality signal. SDLCKit provides that signal through four properties:

Property What It Means
Independent Scoring Scorer agent is sandboxed (read-only tools). Cannot collude with producer.
Dimensional Confidence Not pass/fail. N weighted dimensions scored independently (e.g., clarity 0.35, completeness 0.30).
Bounded Fix Loops Max N automated iterations. Oscillation detection stops thrashing.
Human Gates Two-pass: (1) deterministic structural check, (2) human quality review with scorecard.

The SAGE Loop

Every phase — refine, architect, build, review — runs the same governed cycle:

  SCOPE                           SAGE LOOP
  +------------------+            +------------+
  | User input       |       +--->|  ANALYZE   |
  | Discovery output |       |    |  Frame goal + constraints   |
  | Feedback signals |------>+    +-----+------+
  | Prior state      |       |          |
  +------------------+       |          v
                             |    +------------+
                             |    | GENERATE   |
                             |    |  AI produces artifacts      |
                             |    +-----+------+
                             |          |
                             |          v
                             |    +------------+
                             |    | EVALUATE   |
                             |    |  Independent scorer scores  |
                             |    |  N weighted dimensions      |
                             |    +-----+------+
                             |          |
                             |     confidence < threshold?
                             |          |
                             |     YES: Fix Loop (target weakest dim)
                             |          |
                             |     NO:  Human Gate
                             |          |
                             |    [Approve] -> advance
                             |    [Revise]  -> feedback
                             +----[Pause]   -> save state

Quick Start

Prerequisites

Install

pip install sdlckit

Installs the latest published release. To pin a specific version:

pip install sdlckit==0.2.0

Initialize a Project

sdlckit init

Scaffolds your project: sdlc.yaml, skills, agents, templates, schemas, and the /sdlc slash command.

Customize

After init, update these for your team:

  • sdlc.yaml — lifecycle phases, scoring dimensions, thresholds, plugin config
  • .sdlckit/conventions/ — layered convention files loaded in sorted order:
    • 00-architecture.md — diagram standards, naming, classDef palette (built-in)
    • 01-security-architecture.md — trust zones, data classification (built-in)
    • 10-your-team.md, 11-your-domain.md — add your own with 10+ prefix

Run a Phase

# In Claude Code:
/sdlc refine "user onboarding feature"

The SAGE engine produces REFINE.md, scores it across weighted dimensions, runs fix loops if below threshold, then presents the human gate.

Check Status

/sdlc status

Commands

Slash commands (in Claude Code):

Command What It Does
/sdlc <phase> "input" Run a phase with direct input
/sdlc <phase> Run a phase (inputs auto-resolved from upstream)
/sdlc <phase> amend "feedback" Re-enter a completed phase with feedback
/sdlc status Lifecycle dashboard
/sdlc reconcile Re-run stale phases after an amendment
/sdlc signal list|show|dismiss|inject Manage feedback signals
/sdlc connectors View connector plugin status

Phase commands are dynamic — a custom phase compliance in sdlc.yaml becomes /sdlc compliance.

CLI commands:

Command What It Does
sdlckit init [--type component|initiative] Scaffold a project
sdlckit assign <path> Import an assignment into a component repo
sdlckit observe <title> --components <names> Record an operational observation
sdlckit archive <name> Pre-merge cleanup (manifests, state)
sdlckit --version Show installed version

Two Modes

Component mode (sdlc.yaml) — single project, linear phase sequence: refine -> architect -> build -> review.

Initiative mode (sdlc-initiative.yaml) — multi-component, multi-repo projects. Discovery and Delivery stages with per-component SAGE loops, stage reviews, knowledge extraction, and assignment handoffs.


Extending with Plugins

SDLCKit separates engine (how the loop runs) from domain knowledge (what the loop produces). Plugins provide richer implementations:

  • Phase plugins replace built-in phases with specialized skills, agents, dimensions, and templates
  • Connector plugins deliver scored artifacts to external systems (Jira, CI/CD, etc.)

See the Developer Guide in the repository for plugin authoring.


Roadmap

Feature Target
Checkpoint / resume (crash recovery) v0.3
SAGE-wrapped knowledge extraction v0.3
Connector plugin execution v0.3
auto_advance phase chaining v0.3
Plugin registry + remote sources Post-1.0

Documentation

The repository includes detailed guides:

  • Consumer Guide — installation, configuration, daily usage
  • Contributor Guide — engine internals, testing
  • Developer Guide — building plugins, skills, agents, schemas
  • Architecture Reference — SAGE engine, state management, plugin model, agent model

License

Apache License 2.0

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sdlckit-0.2.3.tar.gz (125.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

sdlckit-0.2.3-py3-none-any.whl (81.7 kB view details)

Uploaded Python 3

File details

Details for the file sdlckit-0.2.3.tar.gz.

File metadata

  • Download URL: sdlckit-0.2.3.tar.gz
  • Upload date:
  • Size: 125.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for sdlckit-0.2.3.tar.gz
Algorithm Hash digest
SHA256 89a7685c06cbc1e9b54305a382eccd23ab61855d020f697dc3a50d7221611022
MD5 ed570dbc4800f7be245f2b0eda6cd722
BLAKE2b-256 e6a2d377e1b1a64a37cb8bb52d03396183453fce62215387e22bfaaddcb92882

See more details on using hashes here.

Provenance

The following attestation bundles were made for sdlckit-0.2.3.tar.gz:

Publisher: publish.yml on atishio/sdlc-kit

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file sdlckit-0.2.3-py3-none-any.whl.

File metadata

  • Download URL: sdlckit-0.2.3-py3-none-any.whl
  • Upload date:
  • Size: 81.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for sdlckit-0.2.3-py3-none-any.whl
Algorithm Hash digest
SHA256 60800b62daea2bace81094be42aab86d0750bdf50a8a988be5cb13a9880aa0df
MD5 fbaca5010b0966a4bb301b7a874bfafd
BLAKE2b-256 e3e6cf03414405e4a64307dcece505dae31cd9b043911880664c0549b84d93af

See more details on using hashes here.

Provenance

The following attestation bundles were made for sdlckit-0.2.3-py3-none-any.whl:

Publisher: publish.yml on atishio/sdlc-kit

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page