Software Factory
BMad plans, the factory ships. Software Factory gives a coding host one continuous, evidence-bound path from grounded intent to planning, staffed implementation, independent review, integration, delivery proof and the next eligible priority. The host owns execution and permissions; the pack supplies eleven skills, eleven optional role prompts and standard-library Python helpers.
An active Claude Code, Cursor or Codex session supplies the model, workers and tools. The pack has no daemon or scheduler; work after a session ends needs an actual host continuation or separately authorized schedule.
Illustrated Software Factory delivery loop
Hero asset provenance and regeneration.
CI workflow configured License: MIT Release: pre-release
Public pre-release v0.1.0. Download the release and explore the showcase. The two release assets and standalone bootstrap were verified against the published commit; trusted local checkout setup remains available. This project is non-affiliated with Anthropic, Anysphere, OpenAI, GitHub, BMad Method and Factory. See Notice.
Install locally
From a trusted pack checkout, set SF_PACK to its physical path and SF_PROJECT to the physical path of an existing Git consumer. Choose SF_HOST=claude-code, cursor or codex; use Python 3.11+ on a POSIX system. The one-line preview below changes no consumer files:
cd '/absolute/path/to/consumer-project' || exit 1
SF_PROJECT="$(pwd -P)"
cd '/absolute/path/to/trusted/software-factory' || exit 1
SF_PACK="$(pwd -P)"
SF_HOST='codex'; SF_PYTHON='python3'
"$SF_PYTHON" -I -B "$SF_PACK/install.py" install --host "$SF_HOST" --project "$SF_PROJECT" --profile full --skip-bmad --dry-run
Inspect the plan and conflicts. Under your local setup GO, run the same final line without --dry-run, then inspect actual files and repeat once for zero changes. The --skip-bmad option is an offline installer smoke route. A real BMad-planned lap requires separate pinned BMad provisioning and observed planner availability. Installation does not trust hooks, register native plugins, authorize remote access or start workers. Installation and safe removal covers ownership and conflicts.
Copy a setup prompt
Use a trusted local pack checkout. Replace <this-project> with the intended project path.
The complete prompts below match the showcase's host selector.
Claude Code
Set up Software Factory in this Git project for Claude Code from this trusted local checkout. Read the pack README, AGENTS.md, installer help, and the project's existing instructions. Python 3.11+ and POSIX filesystem APIs are required; native Windows execution is unverified. Use physical paths (pwd -P), keep the pack and consumer distinct, and preserve user files and host settings.
From the pack checkout, preview the full project profile:
python3 -I -B install.py install --host claude-code --skip-bmad --project "<this-project>" --profile full --dry-run
Replace <this-project> with the physical consumer path. Inspect the destinations and conflicts; apply the same command without --dry-run only under the applicable local GO. This --skip-bmad route checks local project installation. Separately review and consent to the pinned official BMad 6.12.0 provisioning path before using it; observe actual BMad planner availability and structured epics/stories before claiming planning readiness. Missing capability is a named gap, not an invented plan.
Invoke /software-factory in the host UI. Use sf-help to read existing project context, prefill and reuse the twenty catalog decision slots in five groups, and ask only about material unknowns. Show the exact create-only setup proposal, digest, source decision and unknowns; reconcile the owner's setup GO before applying it. Preserve existing answers, documents and settings. Confirm actual host permissions, model/worker availability and any required Codex hook trust separately; installation alone grants none of these.
Ground one small real story in project facts and accepted BMad planning sources. Define its negative and positive eval cases, obtain actual consumer eval signoff before queuing covered work, and bind claims to the reviewed scope. Staff within host capacity, implement, independently verify and review the actual diff, repair failed or unknown proof, integrate within GO, and prove the resulting artifact effect before calling it delivered. Record the subject and real receipts. Continue the next eligible priority under finite delegated acceptance; escalate material risk, unclear authority, tradeoffs and reserved owner decisions at any phase. Keep optional bots and monitoring disabled until separately authorized; respect actual host permissions and never infer external access from local setup.
Cursor
Set up Software Factory in this Git project for Cursor from this trusted local checkout. Read the pack README, AGENTS.md, installer help, and the project's existing instructions. Python 3.11+ and POSIX filesystem APIs are required; native Windows execution is unverified. Use physical paths (pwd -P), keep the pack and consumer distinct, and preserve user files and host settings.
From the pack checkout, preview the full project profile:
python3 -I -B install.py install --host cursor --skip-bmad --project "<this-project>" --profile full --dry-run
Replace <this-project> with the physical consumer path. Inspect the destinations and conflicts; apply the same command without --dry-run only under the applicable local GO. This --skip-bmad route checks local project installation. Separately review and consent to the pinned official BMad 6.12.0 provisioning path before using it; observe actual BMad planner availability and structured epics/stories before claiming planning readiness. Missing capability is a named gap, not an invented plan.
Invoke /software-factory in the host UI. Use sf-help to read existing project context, prefill and reuse the twenty catalog decision slots in five groups, and ask only about material unknowns. Show the exact create-only setup proposal, digest, source decision and unknowns; reconcile the owner's setup GO before applying it. Preserve existing answers, documents and settings. Confirm actual host permissions, model/worker availability and any required Codex hook trust separately; installation alone grants none of these.
Ground one small real story in project facts and accepted BMad planning sources. Define its negative and positive eval cases, obtain actual consumer eval signoff before queuing covered work, and bind claims to the reviewed scope. Staff within host capacity, implement, independently verify and review the actual diff, repair failed or unknown proof, integrate within GO, and prove the resulting artifact effect before calling it delivered. Record the subject and real receipts. Continue the next eligible priority under finite delegated acceptance; escalate material risk, unclear authority, tradeoffs and reserved owner decisions at any phase. Keep optional bots and monitoring disabled until separately authorized; respect actual host permissions and never infer external access from local setup.
Codex
Set up Software Factory in this Git project for Codex from this trusted local checkout. Read the pack README, AGENTS.md, installer help, and the project's existing instructions. Python 3.11+ and POSIX filesystem APIs are required; native Windows execution is unverified. Use physical paths (pwd -P), keep the pack and consumer distinct, and preserve user files and host settings.
From the pack checkout, preview the full project profile:
python3 -I -B install.py install --host codex --skip-bmad --project "<this-project>" --profile full --dry-run
Replace <this-project> with the physical consumer path. Inspect the destinations and conflicts; apply the same command without --dry-run only under the applicable local GO. This --skip-bmad route checks local project installation. Separately review and consent to the pinned official BMad 6.12.0 provisioning path before using it; observe actual BMad planner availability and structured epics/stories before claiming planning readiness. Missing capability is a named gap, not an invented plan.
Invoke $software-factory in the host UI. Use sf-help to read existing project context, prefill and reuse the twenty catalog decision slots in five groups, and ask only about material unknowns. Show the exact create-only setup proposal, digest, source decision and unknowns; reconcile the owner's setup GO before applying it. Preserve existing answers, documents and settings. Confirm actual host permissions, model/worker availability and any required Codex hook trust separately; installation alone grants none of these.
Ground one small real story in project facts and accepted BMad planning sources. Define its negative and positive eval cases, obtain actual consumer eval signoff before queuing covered work, and bind claims to the reviewed scope. Staff within host capacity, implement, independently verify and review the actual diff, repair failed or unknown proof, integrate within GO, and prove the resulting artifact effect before calling it delivered. Record the subject and real receipts. Continue the next eligible priority under finite delegated acceptance; escalate material risk, unclear authority, tradeoffs and reserved owner decisions at any phase. Keep optional bots and monitoring disabled until separately authorized; respect actual host permissions and never infer external access from local setup.
Quickstart
- Start the chosen host in the consumer project. Invoke
/software-factoryin Claude Code or Cursor, or$software-factoryin Codex. These are host UI prompts, not shell commands. Paste the matching setup prompt above. - Inspect the proposed missing documents, setup digest and reused answers. The twenty catalog slots are grouped decision aids, not twenty mandatory new questions. Give setup GO for the exact proposal. The installer preserves user content while making reviewed managed changes to host settings and instruction blocks; create-only onboarding preserves existing document bytes. Onboarding explains the create-only apply.
- Provision BMad Method v6.12.0 through its separate pinned route with consent, then observe real planner execution and structured epics/stories. Record a readiness gap if unavailable. Bind a first small story and its eval signoff to actual project authority.
- Let the host staff, build, verify, review and integrate within its real permissions. Check resulting-artifact behavior before calling it delivered. Continue routine authorized priorities; escalate material risk, unclear authority or reserved decisions whenever they arise. The local lap gives executable helper commands.
Choose the route that matches your goal
| Route | Exact local command or location | What it supplies and what remains to do |
|---|---|---|
| Full project installation | The install.py install --host "$SF_HOST" --project "$SF_PROJECT" --profile full --skip-bmad command above, after preview | Owned skills, schemas/templates, roles, host rules/hooks and runtime helpers in one Git consumer. claude-code uses .claude/skills and .claude/agents; cursor and codex use shared .agents/skills with .cursor/agents or .codex/agents. Check the manifest and host trust separately. |
| Local bootstrap | sh "$SF_PACK/install.sh" --host "$SF_HOST" --project "$SF_PROJECT" --skip-bmad --dry-run | Review the plan, then omit --dry-run under local GO. A sibling install.py selects the trusted local checkout without downloads, even if --ref is supplied. Bootstrap details. |
| Raw pinned skills acquisition | From the physical consumer root: cd "$SF_PROJECT" || exit 1, then DISABLE_TELEMETRY=1 DO_NOT_TRACK=1 npx -y skills@1.7.2 add "$SF_PACK/skills" -a claude-code -a cursor -a codex -y | Select the canonical skills directory to avoid discovering locally installed extras. This supplies the eleven pack skills and a CLI lockfile; BMad provisioning remains separate. No project runtime, native roles, host hooks or full setup. Review the network-capable CLI and its output before use. Distribution records the bounded fixture. |
| Native bundles | python3 install.py project --host all --out /existing/parent/new-bundles from the pack checkout | Generates one marketplace root per host in a new path. After loading the generated Claude plugin, invoke /software-factory:software-factory; full project setup uses /software-factory. Claude/Cursor bundle native role prompts; Codex role TOMLs are references and live custom-agent registration is unverified. Manually load or register in the host; generation proves only files. Distribution has bundle and hook details. |
The project installer uses host-specific invocation names. Raw portable skill discovery, native plugin loading and full project setup are distinct routes; use the actual host listing to confirm invocation. Native bundle loading, Codex hook trust, provider authentication and model/worker availability require separate observation. Do not stack project and plugin hooks for the same host without reconciling duplicate recovery.
A separately downloaded and reviewed standalone install.sh fetches sf-TAG.tar.gz and SHA256SUMS for explicit --ref TAG or default v0.1.0; it never resolves latest. The verified v0.1.0 pre-release provides both assets at those endpoints. Other tags require their own publication and verification. The same-origin checksum checks integrity, not an independent publisher signature. Download and review the script before execution: piping fetched code to a shell would execute the bootstrap before its archive verification. Bootstrap trust and format details.
The nine workflow maps
These are the canonical Mermaid source bodies. Each has a rendered SVG and a detailed text equivalent; local source/render checks do not establish GitHub rendering or live execution. Follow the evidence, unknown, no-fix, ownership, trust and escalation branches rather than treating a diagram as a permission grant. All diagram notes.
1. Continuous loop
flowchart LR
A[Ground intent and existing facts] --> B[Plan with BMad skills and review under scoped GO]
B --> C[Host staffs claimed work]
C --> D[Implement and independently verify]
D -->|failed or unknown| C
D --> E[One owner integrates and checks combined SHA]
E --> F[Prove affected behavior on resulting artifact]
F -->|failed or unknown| C
F --> G{Material risk or reserved owner decision?}
G -->|yes| I[Owner decides within actual scope]
I --> H[Record acceptance provenance and next eligible priority]
G -->|no| H
H --> A
2. Feature delivery
flowchart TD
A[Ground repo, principles and desired outcome] --> B[Plan with observed BMad skills and structured stories]
B --> X{Planning capability and source observed?}
X -->|missing| Y[Record readiness gap; reconcile scoped alternative]
Y -->|approved equivalent path| C[Independent plan review]
X -->|yes| C
C -->|material finding| B
C --> D{Applicable GO and required decisions?}
D -->|missing material decision| E[Ask its owner; block dependents only]
E --> D
D -->|yes| F[Select eligible frontier; claim exact paths]
F --> G[Worker implements, tests and self-reviews]
G --> H[Independent QA on actual HEAD and eval cases]
H -->|failed or unknown| G
H --> I[Actual-diff review and applicable CI or bot proof]
I -->|confirmed finding| G
I --> J[Check in review receipts while claim is held]
J --> K[Reconcile handoff; release claim]
K --> L[One integration owner; providers done; strict gate]
L -->|repair needed| F
L --> M[Integrate within GO; check combined SHA]
M --> N[Authorized staging or approved local-equivalent effect proof]
N -->|failed or unknown| F
N --> O[Record story and resulting-artifact evidence]
O --> P{Material risk or reserved owner decision?}
P -->|yes| Q[Owner decision with source and scope]
P -->|no| R[Evidence-bound acceptance and next eligible work]
Q --> R
3. Bug investigation and repair
flowchart TD
A[Report, failed eval or authorized signal] --> B[Durable bug identity and primary evidence]
B --> C[Safe reproduction; mechanism distinct from hypothesis]
C --> D{What does evidence support?}
D -->|unknown| E[Separating experiment or targeted clarification]
E --> B
D -->|correct or already handled| U[Independent reproduction and disposition review]
U -->|supported| F[No-fix investigative closure; zero code change]
U -->|unconfirmed or disputed| B
F --> G[Retain reproduction and disposition]
D -->|confirmed in-scope defect| H[Risk-sized plan and regression or eval cases]
H --> I[Independent plan review; claim work]
I --> J[Implement, test and independently verify actual HEAD]
J -->|failed or unknown| I
J --> K[Actual-diff review and applicable checks]
K -->|confirmed finding| I
K --> L[Single-owner gated integration under GO]
L --> M[Original reproduction on resulting artifact]
M -->|failed or unknown| I
M --> N[Durable closure; assess applicable acceptance and escalation]
G --> O[Authorized re-observation within source and window]
N --> O
O -->|recurs after closure| P[Linked follow-up; preserve terminal record]
O -->|new authority needed| Q[Owner decision; independent approved work continues]
4. Safe installation
flowchart TD
A[Trust pack source; choose physical consumer root and host] --> B[Choose project profile and preview plan]
B --> C{Full or skills-only?}
C -->|full| D[Skills, roles, policies, hooks and auxiliary assets]
C -->|skills-only| E[Skills and required auxiliary assets; reduced integration]
D --> F[Inspect ownership, collisions and preserved user bytes]
E --> F
F -->|unsafe or conflicting| G[Refuse; preserve bytes; owner reconciles]
F -->|reviewed local install scope| H[Installer lock and source revalidation]
H --> I[Conditional publication and ownership manifest]
I -->|concurrent edit or source change| G
I --> J[Inspect resulting files; repeat is unchanged]
J --> K{Separately consented BMad provisioning?}
K -->|no, skip-bmad| L[Installer smoke only; BMad planning remains unverified]
K -->|yes| M[Pinned official installer; prerequisites and output checks]
M -->|missing or failed| N[Record planning-readiness gap or partial state; no implicit retry]
M --> O[Observe installed modules; workflow quality still unproved]
J --> P[Doctor: report checks and unknowns; gh auth may run]
P --> Q[Dry-run uninstall; selected ownership only]
Q --> R[Authorized uninstall preserves edits and user context]
5. Host projection and ownership
flowchart LR
A[Eleven canonical skills and role prompts] --> B[Installer or allowlisted native bundle generator]
C[Canonical host policy and required auxiliary assets] --> B
B --> D[Claude Code generated layout]
B --> E[Cursor generated layout]
B --> F[Codex generated layout]
D --> G[Active host loads supported instructions]
E --> G
F --> G
G --> H[Host orchestrator chooses eligible work and staff]
H --> I[Actual host tools, permissions and available models]
I --> J[Workers act only within applicable GO]
J --> K[Local helpers validate, record or project bounded facts]
K --> H
L[Read-only registry and routing proposals] --> H
M[Static format checks] --> N[Format evidence only; live loading remains separate]
B --> M
6. Onboarding
flowchart TD
A[Inspect consumer intent and existing documents] --> B{Existing repo without grounded crawl?}
B -->|yes| C[Bounded read-only crawl; save derived map]
B -->|no| D[Read-only setup discovery]
C --> D
D --> E[Twenty catalog slots; reuse confirmed facts and answers]
E --> F{Material unknown remains?}
F -->|yes| G[One targeted owner decision; keep independent work moving]
G --> E
F -->|no| H[One action for safe defaults; propose exact missing drafts]
H --> I[Inspect config, document paths, unknowns and source digest]
I --> J[Host reconciles actual GO and approval source]
J --> K[Apply exact approved proposal; create only]
K -->|stale, collision, unsafe root or partial state| L[Refuse or preserve partial bytes; report exact next action]
K --> M[Validate actual config and retained documents]
M --> N[Re-onboard reuses answers; no new approval claim]
M --> O[Real consumer eval signoff before queue]
O --> P[Host continues scoped delivery; optional access stays unknown]
7. Evolving capabilities
flowchart TD
A[Observed rework or bounded improvement opportunity] --> B[Read principles, source revision and applicable GO]
B --> C{Smallest useful path?}
C -->|capability| D[Inspect local metadata, license, digest and permission needs]
D -->|unknown| E[Defer adoption; native work can continue]
C -->|BMad| F[Inspect actual pinned customization and callback recursion]
C -->|Markdown customization| G[Capture exact base, payload and evidence]
F --> H[Bounded proposal; protected governing policy stays owned]
G --> H
D -->|adequate facts| H
H --> I[Independent review plus regression and canary artifacts]
I -->|failed or unknown| H
I --> J{Standing GO sufficient?}
J -->|material trust, policy or external effect| K[Human source decision]
K --> L[Host reconciles real authority and evidence]
J -->|routine and covered| L
L --> R{Approved change kind?}
R -->|Markdown overlay| M[Installer owns overlay composition and publication]
R -->|capability or MCP| S[Actual scoped host or tool adoption; registry never installs or connects]
S -->|unavailable or unproved| E
R -->|BMad customization| T[Host applies scoped customization through its actual supported method]
M -->|drift or edited target| H
M --> N[Inspect actual result and applicable ownership; observe authorized later run]
S -->|actually adopted| N
T --> N
N --> O{Affected behavior improved?}
O -->|yes| P[Retain with evidence and next retro]
O -->|no or unknown| Q[Propose scoped rollback; prove restored behavior]
Q --> H
8. Evaluation and proof
flowchart TD
A[Ground requirements, risk and applicable surfaces] --> B[Stable fail-to-pass and pass-to-pass cases]
B --> C[Owner-approved plan and exact signoff payload]
C --> D[Queue only covered applicable work]
D --> E[Run actual cases on identified subject]
E --> F{Harness and required proof available?}
F -->|no| G[Unverified or blocked; preserve missing prerequisite]
F -->|yes| H[Retain actual output, artifacts and verdicts]
H --> I{Pass with intact current-subject receipts?}
I -->|failed, stale, tampered or unknown| J[Triage and repair; preserve prior verdicts]
G --> J
J --> E
I -->|yes| K[Independent evidence review and applicable strict board gate]
K -->|not adequate| J
K --> L[Integrate; refresh affected proof on combined SHA]
L --> M[Prove resulting artifact effect separately]
J --> N[Exceptional override needs actual scoped owner decision]
N --> O[Preserve cases and original verdict; record reason and source]
O --> K
9. Board and ready frontier
flowchart TD
A[Planning source with stable source keys] --> B[Owner derives immutable story and epic identities]
B --> C[Per-story records are the only live story-status authority]
C --> D[Readiness from dependency edges and applicable accepted epic gates]
D --> E[In-review, built or done providers may unlock start; explicit order ranks]
E --> F[Claim exact paths; worker sets in-progress]
F --> G[Receipts and in-review while claim is held]
G --> H[Reconcile handoff; release ownership]
H --> I[All providers done and strict premerge gate to built]
I --> J[Actual merge and merge-subject evidence to done]
J --> K[All children done or cancelled: awaiting acceptance]
K --> L[Evidence-bound delegated or reserved human epic decision]
C --> M[Owner regenerates roadmap, dashboard and graph]
N[Kernel claims and checkpoints: execution and recovery facts] --> M
M --> O[Timestamped derived views and read-only graph questions]
O --> P[Recorded attribution is not proof of live workers or effects]
C --> Q[Blocked overlay retains status and exact next action]
Q --> D
C --> R[Scoped confirmed cancellation is terminal]
R --> S[Cancelled prerequisites still block until explicit reconciliation]
Where this fits
This is a comparison of documented operating models, not an execution benchmark. Sources were inspected on 2026-10-15: this pack's entry, authority, dispatch, evidence and public ADR navigation; Superpowers at bb92a77; BMad Method v6.12.0 at 05bfbd4; Spec Kit at 3238fa9; Factory Missions documentation (live source); and eve Software Factory Template at 6bc5feb. Local entries state contracts, not proven external effects. “Not established” means those inspected sources do not settle a point; it never means a product lacks it.
| Capability | Software Factory | Superpowers | BMad 6.12 | Spec Kit | Factory Missions | eve template |
|---|---|---|---|---|---|---|
| Execution home | Existing coding host owns loop | Existing coding host with skills | Build units in host; external caller can loop | Agent commands and CLI workflow runtime | Hosted Mission Control orchestrates Droid workers | Deployable eve/Vercel agent app |
| Grounding | Project facts, principles and scoped GO | Brainstormed approved design | Product, architecture and story workflows | Constitution, spec and research | Collaborative plan with milestones and validation | Repository-grounded analyst plan |
| Dependencies | Board edges and claimed ready frontier | Sequential subagent tasks; separate parallel dispatch | Ordered unit loop | Task dependencies and workflow fan-out | Milestone and feature workers; general DAG not established | Four ordered stations; general DAG not established |
| Independent review | Actual diff plus independent evidence review | Task and final branch review | Build review and review-a-change | Reviewer checklists and convergence | Scrutiny and user-testing validators, configurable | Separate reviewer examines actual diff |
| Completion proof | Subject-bound structural gates and actual effect checks | Fresh command output and behavior verification | Unit verification and retrospective evidence | Implementation checks and convergence | Milestone assertions and validation results | Check results and criterion review |
| Bug work | Reproduce, deduplicate, scope repair or no-fix | Debugging and bounded fix cycles | Findings route to repair or decision | Optional bug workflows and convergence | Failed validation drives corrective work | CI/issues initiate bounded revision |
| Recovery | Reconcile Git, claims and unknown outcomes | Plan ledger and commits | Artifact frontmatter resumes a unit | Workflow state and logs | Mission Control supports pause and replan | Memory and handoff artifacts |
| Human authority | Finite delegated acceptance; reserved decisions escalate at any phase | Stops for specified actions or broken plan | Interactive checkpoint; headless mode distinct | Configurable human gates | Plan approval, execution autonomy and platform policy differ | Caller-specific policy; merge human-owned |
| Integration | One owner, combined SHA, effect proof | Branch finish offers merge/PR choices | Local commit and next steps | Review/PR handoff | Platform rollout workflows advertised; universal deploy gate not established | Reviewed draft PR; human merge |
| Operations | Authorized source/window and separate repair scope | Standing monitor not established in reviewed skills | Production monitor not established in reviewed unit loop | Workflow automation documented; production monitor not established | Headless CI and scheduled invocation documented | GitHub/Linear/CI events; no schedule ships |
| Extensibility | Eleven skills/roles, overlays and host routing | Composable skills and model tier guidance | Pinned customization and review lenses | Extensions, presets and workflow scopes | Inherits skills, hooks, MCP and custom droids | Editable stations and AI Gateway model IDs |
| Traceability | Board, claims, receipts and derived graph | Plan/review ledgers | Story inventory and retrospective | Spec/plan/tasks and workflow state | Mission Control shows criteria, workers and commits | Progress, draft PRs and handoffs |
For claim-level primary detail, see Superpowers subagent execution, BMad autonomous units, Spec Kit workflows, Missions overview, Missions reference, Missions architecture and the eve station contract. Factory Missions is a separate hosted platform with its own Mission Control and execution model. None of these sources supports a quality, speed or cost ranking.
One synthetic lap and actual evidence
The invented example walks a feature, a reproduced bug, a supported no-fix conclusion and a bounded observation. Its receipts are teaching data. In a real lap, start with an accepted story and negative/positive evals, claim only owned paths, record failed or unknown checks, obtain independent actual-diff review, integrate the approved change, then prove affected behavior on the resulting artifact. A no-fix investigation has zero code diff and no delivery receipt. A monitor observes only authorized sources/windows and cannot silently authorize repair or rollback.
The dogfood record names actual local source subjects, gate outcomes, browser observations and failures. Those checks do not prove public distribution, a consumer's BMad execution, remote CI, live host loading or deployment. The verification guide explains how evidence is bound to a subject.
FAQ
Does setup give the agent full autonomy? No. The owner defines scope and requested autonomy; the host enforces actual permissions. Routine authorized work can continue through finite, evidence-bound delegated acceptance. Material risk, unclear authority, tradeoffs and reserved decisions call for a real human decision at any phase. Local digests and manifests do not authenticate that person.
What does this cost? This pack charges no fee and has no telemetry or model gateway. Host, model, provider and optional BMad acquisition costs are external. For a planning estimate, assume one story uses 100,000 input and 20,000 output tokens: cost = 0.1 × input price per million + 0.02 × output price per million, plus any tool/hosting charges. Rates vary by selected provider/model and date; obtain the current rate from that provider before quoting currency. No speed or savings claim follows from this formula.
What data leaves my machine? The local Python helpers make no model calls and send no telemetry. The chosen coding host and any separately enabled provider, BMad package acquisition, skills CLI, review bot or monitoring source have their own data paths and permissions. Inspect those tools and your project privacy rules before enabling them. Security covers the trust boundary.
Which platforms are verified? Source and fixture checks exercise the host projections. Actual release-source CI passed on Ubuntu and macOS across Python 3.11–3.13; local execution evidence also includes macOS/Python 3.12. Python 3.11+ and POSIX filesystem behavior are required. Native Windows, combined Cursor/Codex live frontmatter, plugin registration, Codex custom-agent loading and real provider access remain unverified. Hosts and limitations track details.
How do I recover or remove it? Reconcile Git, ownership manifest and actual effects before retrying a partial action. Preview uninstall and retain edited user files, context and backups. Recovery and installation give the bounded commands.
Learn and contribute
Start with the manual, quickstart, team, configuration, BMad planning, evals, recovery and distribution. Contributing, code of conduct, security reporting, changelog, notice and the MIT license are included in the local release payload.