Rigid preparation for fearless, token-efficient autonomous coding.
Everyone wants YOLO mode β the AI running fast, with no step-by-step babysitting. Pure YOLO is also how you get catastrophic refactors, token bleeding, and a broken main branch. YOLORocket resolves that paradox the way aerospace does: you don't babysit a rocket in flight β you earn the launch on the gantry.
A deliberately small, production-tested set of Claude Code skills, agents, and hooks for data-science and ML codebases β built and hardened over months of daily use on a real scientific analysis platform. Not a grab-bag: every tool here survived a curation pass, and together they tell one story β negotiate the contract on the gantry, launch unattended, verify the orbit with fresh eyes.
The secret to safe autonomy isn't monitoring the AI while it runs; it's the negotiation and alignment before it takes off. And when it lands, asking the same agent "did you finish?" is worthless β it grades its own homework with the same context that produced the mistakes.
YOLORocket ships a complete autonomous-execution cycle with hard guardrails at both ends:
THE GANTRY THE LAUNCH MISSION CONTROL
(negotiate the contract) (curated YOLO) (fresh-context audit)
βββββββββββββββββββ βββββββββββββββββββ ββββββββββββββββββββββββ
β BLUEPRINT β READY β /yolo-mode β shipped β /audit-completion β
β (plan on disk) ββββββββββΊβ βββββββββββΊβ β
β β β zero approval β β spawns a subagent β
β /yolo-prep β β prompts, zero β β with NO access to β
β pre-flight auditβ β gating questionsβ β the executor's β
β by a fresh β β within blueprintβ β context β verifies β
β subagent β β scope, explicit β β against machine- β
ββββββββββ¬βββββββββ β risk-gates for β β runnable acceptance β
β β irreversible opsβ β criteria β
β NOT-READY: ββββββββββ¬βββββββββ ββββββββββββ¬ββββββββββββ
βΌ rocket stays locked β β
fix gaps, retry /checkpoint at GREEN / RED
(missing blueprint, every milestone β (RED verdicts are
wrong harness mode, instant restore point non-overridable)
dirty tree...) for crash recovery
The four stages, and why each exists:
- The flight plan β the blueprint: one or more markdown documents carrying your
refined workplan β objectives and what "done" looks like, architecture, feature
engineering, packages/dependencies, scope boundary, phases, and a runnable
verification command. It lives on disk, not in the conversation: if context is lost
mid-run, the plan isn't. Naming convention:
<target>/docs/blueprints/YYYYMMDD_HHMM_<slug>.mdβ timestamp-prefixed, because the gantry always locks onto the newest (seeyolo-prepPhase 1). Start from the includedBLUEPRINT_TEMPLATE.md. - The gantry β
/yolo-prep: like the tower that holds a rocket locked until every parameter is green, a fresh-context auditor subagent verifies readiness with evidence: blueprint valid, permissions posture correct, guardrail deny-rules present, git tree state known. It returns READY or NOT-READY β and the rocket does not launch on NOT-READY. This preparation is a genuine negotiation: the system surfaces the gaps, missing configurations, and risks up front, so the run burns tokens on the mission, not on mistakes. - The launch β
/yolo-mode: once released, the flight is genuinely autonomous. Gating phrases ("should I proceed?") are banned outright, but a non-negotiable risk-gate list survives (force-push,rm -rfoutside workspace, dependency changes outside scope, anything visible to third parties)./checkpointdrops restore points at every milestone β telemetry you can recover from. - Mission control β
/audit-completion: did the payload reach the intended orbit? A completion-auditor subagent that never saw the executor's context re-verifies every claim against machine-runnable acceptance criteria. RED verdicts cannot be talked around.
The executor never grades its own work. That single design decision is what makes the "YOLO" part safe enough to use daily β not zero-risk (nothing autonomous is), but risk-gated, contract-bound, and independently verified.
The Claude Code community already has excellent structured-development frameworks (e.g. obra/superpowers enforces TDD discipline) and solid defensive hook collections (dangerous-command blocking, lint-on-save). YOLORocket attacks a different pain: the contract negotiated before an unattended run, and the independent audit after it β aimed at data-science and ML workflows, where the failure modes are token-devouring data files, drifting long sessions, and confidently wrong "done" claims.
Once installed (see Installation), a mission looks like this:
- Write the flight plan. Copy
BLUEPRINT_TEMPLATE.mdto<your-project>/docs/blueprints/YYYYMMDD_HHMM_<slug>.mdand fill it in. Be generous here β every minute on the gantry saves ten in orbit. /yolo-prepβ run the gantry audit. It verifies the blueprint, permissions posture, guardrails, and tree state, then reports READY or NOT-READY with evidence. Fix the gaps it surfaces and re-run until green./yolo-modeβ release the rocket. Claude executes the blueprint autonomously, dropping/checkpointrestore points at milestones.- Review the landing β and refine at full speed.
/yolo-modestays active session-wide by design: when you want extra polish ("tighten X", "add tests for Y"), just say it β the refinement runs with the same autonomy, no re-negotiation needed. When you're satisfied, power down with/yolo-mode off. /audit-completionβ call mission control. A fresh-context auditor verifies every "done" claim against the blueprint's acceptance criteria. GREEN = merge with confidence.
Each skill's SKILL.md is its full reference manual β the commands above are the whole
day-to-day surface.
5 skills, 5 agents, 5 hooks. Curated down from 70+ internal tools β what's published is the subset that is genuinely reusable outside the workspace it grew up in.
| Tool | Kind | Purpose |
|---|---|---|
yolo-prep |
skill | Pre-flight: locates the disk-anchored blueprint, verifies harness posture, anchors context |
yolo-prep |
agent | The fresh-context auditor the skill spawns β returns a READY/NOT-READY report with evidence |
yolo-mode |
skill | Zero approval prompts within blueprint scope, explicit risk-gates for irreversible actions |
checkpoint |
skill | Instant restore point to the session log β crash insurance during long autonomous runs |
audit-completion |
skill | Auto-invokes when plan items are closed; verifies against machine-runnable acceptance criteria |
completion-auditor |
agent | Fresh-context verification of completion claims β non-overridable RED verdicts |
For the data scientist who inherits 40,000 lines of someone else's notebooks and scripts.
Each archaeologist explores read-only reference code via subagents without flooding your
main context β they share a single anti-token-overflow protocol
(agents/_shared/archaeology_protocol.md): never
dump full files into main context, delegate heavy reads, write findings to output files.
| Agent | Purpose |
|---|---|
math-archaeologist |
Discovers algorithms, statistical functions, ML pipelines, numerical edge cases |
design-archaeologist |
Discovers visual patterns β chart geometry, layouts, typography, palettes in legacy code/PDFs |
web-archaeologist |
Three-phase web research (Discovery/Extraction/Synthesis) with source credibility ranking |
| Skill | Purpose |
|---|---|
skill-comply |
Do your agents actually follow the rules you wrote? Auto-generates scenarios at 3 strictness levels, runs agents, reports compliance rates with full tool-call timelines |
Skills are hints; hooks are guarantees. These five enforce the Write-First doctrine and session recovery at the harness level. Together they are the mission's black box: every prompt you send and every significant output Claude produces is captured to an on-disk session log β documented context that survives crashes, compaction, and time.
| Hook | Event | Purpose |
|---|---|---|
write_first_reminder.py |
UserPromptSubmit |
Injects a Write-First reminder before every response; detects day-rollover drift |
insight_logger.py |
Stop |
Safety net that captures important outputs Claude forgets to log |
prompt_logger.py |
UserPromptSubmit |
Appends each prompt to a per-session JSONL log |
post_compact_signal.py |
PostCompact |
Re-injects session anchors after context compaction |
beacon_utils.py |
(shared lib) | Read/write helpers for the restart-beacon JSON snapshot |
| Pattern | Description |
|---|---|
| Write-First Doctrine | 2-layer defense against losing AI outputs |
| Multi-Model Orchestration | Haiku-as-Scout, cascading pipelines, capability matrix |
| Skill Development Doctrine | 4-primitive model, activation-state classification, plan-contract acceptance criteria, 7 generalized post-mortems |
Because curation is the product. The bar for inclusion is simple: if a tool isn't genuinely reusable in your project within an hour of copying it, it doesn't belong in a public toolkit. Five skills, five agents, and five hooks that interlock into one workflow beat a hundred loose utilities you'd have to evaluate one by one β the tools you don't have to think about are the tools that make autonomy trustworthy.
The current release covers the two layers unattended agent loops depend on: context discipline (the blueprint contract, scope boundaries, token guardrails) and harness discipline (risk-gates, a circuit-breaker on repeated failures, fresh-context verification). If you're experimenting with loop-style workflows β agents iterating toward a goal with minimal supervision β these are the pieces that keep a loop from drifting, thrashing, or grading its own homework.
Planned next, in order of intent:
- Worktree isolation β ephemeral git worktrees for unattended runs, so failed iterations are discarded without ever touching your working tree.
- Amnesia-resistant continuity β extending the Write-First doctrine so a session can be compacted, cleared, or restarted without losing mission context. The seeds already ship (beacon snapshots, post-compaction re-injection); the next step is making recovery fully automatic.
- Context-rot countermeasures β skills that actively manage degradation as context grows (a measured failure mode for coding agents), building on the prompt-counter health zones already in the hooks.
No dates, no promises β items ship when they meet the same bar as everything else here.
Problem: Claude produces valuable analysis, then "forgets" to save it β especially
after /compact or long sessions.
Solution: A 2-layer defense system:
- Layer 1 (Proactive): Claude evaluates relevance β writes to log file FIRST β shows summary in chat
- Layer 2 (Safety net): Stop hook detects keywords β auto-appends if Layer 1 missed
Layer 1: Claude β Edit log β Chat shows summary
Layer 2: Stop hook β Keyword detection β Append [HOOK] entry as backup
The recurring trick behind both ends of the YOLO pipeline: never let the context that did the work also judge the work. Pre-flight readiness and completion claims are each checked by a subagent with zero session history. Cheap to run, and it catches the failure mode that matters most in autonomous execution β confident, contextually-reinforced wrongness.
Pattern: Use the right model for the right task:
Haiku (scout) β scans 50 files, filters to 8 by STRUCTURE
β
Sonnet (analyst) β reads 8 files, evaluates SEMANTICALLY
β
Opus/Fable (reviewer) β validates critical decisions, deep architecture work
Golden rule: Haiku filters by FORM (structure), never by CONTENT (meaning).
Result: ~6x cost reduction with same quality.
The UserPromptSubmit hook tracks prompts per session:
- P1-P10: Green β fresh context, full coherence
- P11-P20: Yellow β context filling, watch for drift
- P20+: Red β context saturated, recommend new session
Autonomous execution (zero approval-asking) is only safe with hard boundaries. yolo-mode
bans gating phrases ("should I proceed?", "your choice?") entirely, but keeps an explicit,
non-negotiable risk-gate list: force-push, git reset --hard, rm -rf outside workspace,
dropping DB tables, dependency changes outside declared scope, and anything visible to
third parties (PRs, Slack, email). yolo-prep is the mandatory pre-flight β it refuses to
let YOLO run without a disk-anchored blueprint.
# Skills (directory format required!)
cp -r skills/yolo-prep/ .claude/skills/yolo-prep/
cp -r skills/yolo-mode/ .claude/skills/yolo-mode/
cp -r skills/checkpoint/ .claude/skills/checkpoint/
cp -r skills/audit-completion/ .claude/skills/audit-completion/
# ...repeat for any other skill you want
# Agents (flat file format)
cp agents/yolo-prep.md agents/completion-auditor.md .claude/agents/
cp agents/math-archaeologist.md .claude/agents/
cp -r agents/_shared .claude/agents/_shared # required by the *-archaeologist agents
# Hooks
cp hooks/*.py .claude/hooks/{
"hooks": {
"Stop": [
{
"hooks": [
{
"type": "command",
"command": "python .claude/hooks/insight_logger.py"
}
]
}
],
"UserPromptSubmit": [
{
"hooks": [
{
"type": "command",
"command": "python .claude/hooks/write_first_reminder.py"
}
]
}
]
}
}- Hooks: update
SESSIONS_DIR/ session-log path patterns and timezone to match your docs layout. - Blueprint: copy
skills/yolo-prep/BLUEPRINT_TEMPLATE.mdinto<your-project>/docs/blueprints/and fill it in β the YOLO pipeline refuses to run without one.
| # | Gotcha | Impact |
|---|---|---|
| 1 | Flat .md files in .claude/skills/ are silently ignored |
Skills require skills/<name>/SKILL.md (directory format) |
| 2 | skill.md (lowercase) is silently ignored |
Must be SKILL.md (uppercase) |
| 3 | user-invocable (with C) is silently ignored |
Must be user-invokable (with K) |
| 4 | Multi-line YAML description: is silently dropped |
Use single-line descriptions only |
| 5 | model: in skill frontmatter accepts sonnet/opus/haiku/fable/inherit |
Scalar only β no per-skill fallback chain (use the workspace-level fallbackModel array instead) |
| 6 | UTF-8 on Windows hooks: CP1252 pipe corruption | Force UTF-8 stdin (see insight_logger.py) |
| 7 | disable-model-invocation: false = permission, NOT execution |
Skills are hints, not triggers. Hooks are guaranteed. |
Related GitHub issues we filed:
- #34538 β Silent skill format failure (BUG)
- #34553 β effortLevel in frontmatter (FEATURE)
- #34558 β Multi-model orchestration (FEATURE)
These patterns emerged from real pain points β lost outputs, encoding bugs, model confusion, context drift across long sessions β and were validated empirically over months of intensive Claude Code usage.
Some components reference a session-log convention (docs/sessions/<user>/) β these are
just markdown files the skills read/write; no external service required. Adapt the paths
to your own docs layout.
MIT β see LICENSE