<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Alexandru Cioc</title>
    <description>The latest articles on Forem by Alexandru Cioc (@whitehatd).</description>
    <link>https://forem.com/whitehatd</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3862914%2F68aa569c-60f7-454a-83b4-4aba0eab6f06.png</url>
      <title>Forem: Alexandru Cioc</title>
      <link>https://forem.com/whitehatd</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/whitehatd"/>
    <language>en</language>
    <item>
      <title>I checked 13 top open-source repos. 9 have zero AI agent config.</title>
      <dc:creator>Alexandru Cioc</dc:creator>
      <pubDate>Tue, 07 Apr 2026 23:49:47 +0000</pubDate>
      <link>https://forem.com/whitehatd/i-checked-13-top-open-source-repos-9-have-zero-ai-agent-config-51k0</link>
      <guid>https://forem.com/whitehatd/i-checked-13-top-open-source-repos-9-have-zero-ai-agent-config-51k0</guid>
      <description>&lt;p&gt;Django. Angular. Vue. Svelte. Tokio. Remix. Cal.com. Airflow. Tauri.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;None of them&lt;/strong&gt; have a CLAUDE.md. No &lt;code&gt;.cursorrules&lt;/code&gt;. No &lt;code&gt;AGENTS.md&lt;/code&gt;. No &lt;code&gt;copilot-instructions.md&lt;/code&gt;. Nothing.&lt;/p&gt;

&lt;p&gt;These are projects with hundreds of contributors. If they don't have AI agent config, your project almost certainly doesn't either.&lt;/p&gt;

&lt;h2&gt;
  
  
  The problem is worse than "no config"
&lt;/h2&gt;

&lt;p&gt;The 4 projects that DO have AI configs?&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Grafana&lt;/strong&gt; has a CLAUDE.md. It's literally one line: &lt;code&gt;@AGENTS.md&lt;/code&gt;. Their hand-written AGENTS.md has 157 lines, but it misses quality gates from their CI.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Prisma&lt;/strong&gt; has a 166-line AGENTS.md that says:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;"Your training data contains a lot of outdated information that doesn't apply to Prisma 7. Always analyze this codebase like you would analyze a project you are not familiar with."&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;If Prisma's own maintainers don't trust AI training data, why do you?&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Supabase&lt;/strong&gt; has three separate AI configs — one for Claude, one for Copilot, one for Cursor. Three tools, three configs, &lt;strong&gt;zero overlap&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F8gp58l4726xx05pbuopv.gif" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F8gp58l4726xx05pbuopv.gif" alt="crag scoreboard" width="1420" height="761"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What this means for your code
&lt;/h2&gt;

&lt;p&gt;When you use Cursor, Claude, Copilot, or any AI coding agent, it needs to know:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;What quality gates CI enforces (lint, test, build, typecheck)&lt;/li&gt;
&lt;li&gt;Your architecture and key directories&lt;/li&gt;
&lt;li&gt;Anti-patterns to avoid&lt;/li&gt;
&lt;li&gt;Code style conventions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Without this, your AI is working off stale training data. It writes code that breaks in CI.&lt;/p&gt;

&lt;h2&gt;
  
  
  One command
&lt;/h2&gt;

&lt;p&gt;I built &lt;a href="https://github.com/WhitehatD/crag" rel="noopener noreferrer"&gt;crag&lt;/a&gt; to solve this.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npx @whitehatd/crag
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;It reads your project — CI workflows, package manifests, configs, directory structure — and generates a single &lt;code&gt;governance.md&lt;/code&gt; that compiles to every AI tool's native format.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fye8mcqs1t0n0xmbw7rsq.gif" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fye8mcqs1t0n0xmbw7rsq.gif" alt="crag command" width="1420" height="806"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;One file in, twelve files out:&lt;/strong&gt;&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Target&lt;/th&gt;
&lt;th&gt;File&lt;/th&gt;
&lt;th&gt;Consumer&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;agents-md&lt;/td&gt;
&lt;td&gt;&lt;code&gt;AGENTS.md&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Codex, Aider, Gemini CLI&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;cursor&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.cursor/rules/&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Cursor&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;copilot&lt;/td&gt;
&lt;td&gt;&lt;code&gt;copilot-instructions.md&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;GitHub Copilot&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;claude&lt;/td&gt;
&lt;td&gt;&lt;code&gt;CLAUDE.md&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Claude Code&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;gemini&lt;/td&gt;
&lt;td&gt;&lt;code&gt;GEMINI.md&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Gemini&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;cline&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.clinerules&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Cline&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;continue&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.continuerules&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Continue&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;windsurf&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.windsurf/rules/&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Windsurf&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;zed&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.rules&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Zed&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;amazonq&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.amazonq/rules/&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;Amazon Q&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;github&lt;/td&gt;
&lt;td&gt;&lt;code&gt;gates.yml&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;GitHub Actions&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;husky&lt;/td&gt;
&lt;td&gt;&lt;code&gt;.husky/pre-commit&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;husky&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;Change a rule in &lt;code&gt;governance.md&lt;/code&gt;, run &lt;code&gt;crag compile&lt;/code&gt;, all 12 update.&lt;/p&gt;

&lt;h2&gt;
  
  
  The benchmark
&lt;/h2&gt;

&lt;p&gt;We tested on 50 of the most important open-source projects:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;1,809 gates&lt;/strong&gt; inferred across 50 repos&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;96.4% accuracy&lt;/strong&gt; — 187/194 gates verified against codebase&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;20 languages&lt;/strong&gt;, 7 CI systems, &lt;strong&gt;0 crashes&lt;/strong&gt;
&lt;/li&gt;
&lt;/ul&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Repo&lt;/th&gt;
&lt;th&gt;Stack&lt;/th&gt;
&lt;th&gt;Gates&lt;/th&gt;
&lt;th&gt;Finding&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;grafana/grafana&lt;/td&gt;
&lt;td&gt;Go + React + Docker&lt;/td&gt;
&lt;td&gt;67&lt;/td&gt;
&lt;td&gt;CLAUDE.md: 1 line&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;supabase/supabase&lt;/td&gt;
&lt;td&gt;TS + React + Docker&lt;/td&gt;
&lt;td&gt;43&lt;/td&gt;
&lt;td&gt;3 configs, fragmented&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;prisma/prisma&lt;/td&gt;
&lt;td&gt;TypeScript + Rust&lt;/td&gt;
&lt;td&gt;40&lt;/td&gt;
&lt;td&gt;"data outdated"&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;django/django&lt;/td&gt;
&lt;td&gt;Python&lt;/td&gt;
&lt;td&gt;38&lt;/td&gt;
&lt;td&gt;No config&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;angular/angular&lt;/td&gt;
&lt;td&gt;TypeScript&lt;/td&gt;
&lt;td&gt;38&lt;/td&gt;
&lt;td&gt;No config&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;h2&gt;
  
  
  How it works
&lt;/h2&gt;

&lt;ol&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Analyze.&lt;/strong&gt; Reads CI workflows (GitHub Actions, GitLab, Jenkins, etc.), package manifests, tool configs. 25+ language detectors, 11 CI extractors.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Generate.&lt;/strong&gt; Writes &lt;code&gt;governance.md&lt;/code&gt; with quality gates, architecture, testing profile, code style, anti-patterns, framework conventions.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Compile.&lt;/strong&gt; Converts to each tool's native format — MDC frontmatter for Cursor, numbered steps for AGENTS.md, YAML triggers for Windsurf.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Audit.&lt;/strong&gt; Detects stale configs, missing tools, drift.&lt;/p&gt;&lt;/li&gt;
&lt;li&gt;&lt;p&gt;&lt;strong&gt;Hook.&lt;/strong&gt; Pre-commit auto-recompile. Optional drift gate blocks commits.&lt;/p&gt;&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;No LLM. No network. No API key. 500ms. Deterministic.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npx @whitehatd/crag
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Node.js 18+. Zero dependencies. MIT.&lt;/p&gt;

&lt;p&gt;GitHub: &lt;a href="https://github.com/WhitehatD/crag" rel="noopener noreferrer"&gt;WhitehatD/crag&lt;/a&gt;&lt;/p&gt;

</description>
      <category>opensource</category>
      <category>ai</category>
      <category>cli</category>
      <category>productivity</category>
    </item>
    <item>
      <title>I stopped copy-pasting my lint rules into 12 different config files</title>
      <dc:creator>Alexandru Cioc</dc:creator>
      <pubDate>Mon, 06 Apr 2026 00:29:44 +0000</pubDate>
      <link>https://forem.com/whitehatd/i-stopped-copy-pasting-my-lint-rules-into-12-different-config-files-13b2</link>
      <guid>https://forem.com/whitehatd/i-stopped-copy-pasting-my-lint-rules-into-12-different-config-files-13b2</guid>
      <description>&lt;p&gt;Every project I work on has the same problem: my lint/test/build rules exist in my CI workflow, my pre-commit hook, my &lt;code&gt;.cursorrules&lt;/code&gt;, my &lt;code&gt;AGENTS.md&lt;/code&gt;, my &lt;code&gt;GEMINI.md&lt;/code&gt;, and 7 more files. When I change a rule in one place, the others drift.&lt;/p&gt;

&lt;p&gt;I built &lt;a href="https://github.com/WhitehatD/crag" rel="noopener noreferrer"&gt;crag&lt;/a&gt; to fix this.&lt;/p&gt;

&lt;h2&gt;
  
  
  What it does
&lt;/h2&gt;

&lt;p&gt;You write one ~20-line &lt;code&gt;governance.md&lt;/code&gt;. crag compiles it to 12 downstream files atomically:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;code&gt;.github/workflows/gates.yml&lt;/code&gt; (GitHub Actions)&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.husky/pre-commit&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.pre-commit-config.yaml&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;AGENTS.md&lt;/code&gt; (Codex, Aider, Factory)&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.cursor/rules/governance.mdc&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;code&gt;GEMINI.md&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.github/copilot-instructions.md&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;.clinerules&lt;/code&gt;, &lt;code&gt;.continuerules&lt;/code&gt;, &lt;code&gt;.windsurfrules&lt;/code&gt;
&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.zed/rules.md&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;&lt;code&gt;.sourcegraph/cody-instructions.md&lt;/code&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Change one line, regenerate everything.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it in 3 seconds
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;npx @whitehatd/crag demo
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;No install. No config. No network. No LLM. ~500ms to a verified&lt;br&gt;
12-target pipeline with a determinism SHA printed inline.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Frdb7vopnwrda3lxcnc3p.gif" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Frdb7vopnwrda3lxcnc3p.gif" alt="npx @whitehatd/crag demo Usage" width="960" height="540"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What backs it up
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;512 tests passing across Ubuntu + macOS + Windows × Node 18/20/22&lt;/li&gt;
&lt;li&gt;Stress-tested on 101 OSS repos (4,400 invocations, 0 crashes)&lt;/li&gt;
&lt;li&gt;Reference benchmark: 40/40 Grade A on ship-ready governance&lt;/li&gt;
&lt;li&gt;Deterministic: same input → byte-identical output, SHA-verified on every CI push across 9 runners&lt;/li&gt;
&lt;li&gt;Zero runtime dependencies&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;GitHub: &lt;a href="https://github.com/WhitehatD/crag" rel="noopener noreferrer"&gt;https://github.com/WhitehatD/crag&lt;/a&gt;&lt;br&gt;
npm: &lt;a href="https://www.npmjs.com/package/@whitehatd/crag" rel="noopener noreferrer"&gt;https://www.npmjs.com/package/@whitehatd/crag&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;em&gt;MIT licensed. If you use more than one AI coding tool alongside CI,&lt;br&gt;
this is for you.&lt;/em&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Tags:&lt;/strong&gt; &lt;code&gt;devtools&lt;/code&gt;, &lt;code&gt;opensource&lt;/code&gt;, &lt;code&gt;javascript&lt;/code&gt;, &lt;code&gt;ai&lt;/code&gt;&lt;/p&gt;

</description>
      <category>automation</category>
      <category>productivity</category>
      <category>showdev</category>
      <category>tooling</category>
    </item>
  </channel>
</rss>
