◱ active|loom
GitHub Install
ActiveLoom / reusable workflows for coding agents

Give your agents discipline.
Evidence for every PR.

Coding agents write code fast, but without guardrails they regress, wave through their own reviews, and loop. ActiveLoom is an open-source set of skills and review protocols for Claude Code, Codex, and Gemini: independent models review each draft PR, findings are posted before fixes, and the evidence is tied to the exact commit. Try one skill, run whole review chains in panes you can watch, or sync the set across every repository.

$ npx activeloom add critique --harness claude

Installs one skill for you (Tier 0). Nothing is written to a repository. More ways to adopt ↓

✔ Claude Code ✔ OpenAI Codex ✔ Gemini / Antigravity (Agy) ✔ CLI: Node 18.17+ ✔ Apache 2.0
3
Native Agent Harnesses
30+
Skills per Harness
SHA
Commit-Pinned Review Evidence
Apache 2.0
Permissive Open Source
Capabilities

Engineered for teams that treat agent code like production code.

ActiveLoom replaces fragile ad-hoc system prompts with structured engineering discipline, rigorous review ledgers, and deterministic fleet sync.

How it fits together
  1. 1 · Skills
    The base. Install any one on its own: interviews, debugging, issue work, review.
  2. 2 · Review protocol
    Review skills post findings on a draft PR before fixing, and record them in a ledger pinned to the commit.
  3. 3 · Automation
    agent-loop works an allowlisted issue queue headlessly. The optional herd skills run the same reviews, interviews, and builds in terminal panes you watch.
  4. 4 · Sync
    Keeps all of it current across your repositories through pull requests, without touching your local rules.
01 SKILLS & WORKFLOWS

Not chat prompts. Operational skills.

ActiveLoom skills encode strict operational procedures with validation checklists and deterministic outputs. From product and design interviews (product-grill, grill) and deep troubleshooting (diagnosing-bugs) to agent-ready backlogs (backlog-refinement) and pre-merge red teams (red-team).

/diagnosing-bugs READY
Step 1: Reproduce defect in isolation
Step 2: Root cause analysis (no guessing)
Step 3: Smallest meaningful fix + regression test
02 MULTI-ENGINE PARITY

Claude, Codex, and Gemini in sync.

Don't maintain three divergent prompt trees. Shared skills are authored once in prompts/ and rendered into .claude/, .codex/, and .agents/ (Gemini / Antigravity). Review prompts are tuned per engine on purpose.

One upstream definition 3 native outputs
Claude Code
OpenAI Codex
Gemini / Agy
03 REVIEW PROTOCOL

Adversarial review. Proof before edit.

No rubber-stamping. Reviewers inspect the draft PR diff and post verified findings inline on GitHub before touching any code. Each PR's review depth is resolved first: Lean runs the highest-signal lenses; Deep runs the full matrix for risky surfaces such as auth or crypto.

Review depth: Deep
Trigger: auth & crypto boundaries
✓ Findings posted inline before code fix
04 REVIEW LEDGER

Review evidence pinned to the commit.

Every review pass is recorded on the draft PR as ledger markers carrying sha256 digests and the exact head commit. Push a new commit and attestations for the old head stop counting.

PR ledger · verify-coverage HEAD MATCHED
head=4d2e1b89ef01a23c7b89...
✓ Attested by Codex + Gemini reviewers
05 BOUNDED AUTONOMY

Autonomous queues with guardrails.

Let agents work your GitHub backlog safely with agent-loop. Strict issue allowlists, one linked Git worktree and draft PR per issue (agent-loop/issue-<N>-<run>), bounded local review rounds, fresh-base validation, and automatic bail-outs when blocked. Setup guide ↗

CLI Tape Demo: LIVE
$
06 FLEET DISTRIBUTION

Sync every repo without losing local rules.

A scheduled GitHub Actions workflow proposes skill and review updates as pull requests from the upstream's sync-v2 release ref, while protecting repo-owned rules such as .review/addendum.local.md. How sync works ↗

Upstream: activeloom@sync-v2 PR opened
Syncs: Core skills, review workflows
★ Local addenda & project rules strictly preserved
Herd Orchestration

One session drives the herd. You watch every pane.

The herd skills let one agent session drive other agent sessions in visible herdr panes (herdr is a terminal workspace manager for coding agents). Every review pass, interview, and build runs where you can see it, and you can type into any pane to step in. Any of the three harnesses can drive, and any of them can be driven.

Optional, and not a second evidence system
Everything here also works without herdr. Each pass is the engine’s ordinary review, recorded in the PR ledger exactly as if you ran it yourself. Review depth (Lean/Deep), round caps, convergence, and attestations are unchanged.
It stops for the calls that are yours
Merging to production, product calls, and anything it cannot do safely.
horch ORCHESTRATOR

Orchestrates a whole herdr workspace: starts review chains, builds, grills and promotions in tabs, and merges finished work into your integration branch (for example staging, never production).

Stops for you: A merge check fails, a chain blocks, or a call is yours.
hreview REVIEW CHAIN

Drives the same critique passes you would run by hand, one engine per pane, until the reviewers converge or the rounds run out.

Stops for you: It converged (the merge is yours), or it is blocked.
hgrill INTERVIEWS

Interviews (“grills”) an issue on each configured engine in turn, then posts the biggest product calls and assumptions to the issue.

Stops for you: Always: the assumptions block waits for your sign-off.
hloop BATCH BUILDS

The visible counterpart to agent-loop: a build tab per agent-ready issue, then a fresh review chain, then a merge through horch’s checks.

Stops for you: An issue’s design is open, a check fails, or a chain blocks.
hred-team RED TEAM

Red-teams a reviewed PR in a read-only pane. The author engine fixes blocker and high findings; the rest become issues.

Stops for you: It pushed fixes (the chain needs a restart), or a high finding stayed unfixed.
hpromote PROMOTION

Promotes the integration branch to production by running your repository’s recipe across visible panes, with a read-only risk review and fix lanes.

Stops for you: The promotion PR is ready: approving and merging it is yours.
auto-glance OPT-IN GLANCE

Small or docs-only PRs normally wait for a quick human look (a “glance”). This lets one model that didn’t write the PR do that read and mark it ready. Opt-in per repository; never merges.

Stops for you: The read found something, or CI is red.
Get started
  • Run the driving session inside herdr 0.9.0+
  • ActiveLoom in the repo, including the Codex harness
  • A review profile (review-setup)
  • An authenticated gh, plus jq and Python 3
  • horch merges only with ship-staging and a ship section in .activeloom-herd.json
$ npx activeloom add hreview horch --harness claude
Read the herd guide ↗
Live Protocol Simulator

What a herd session looks like.

A simulated example. One driving session (horch) runs reviews, interviews, and builds in herdr panes. Every pass is an ordinary ActiveLoom review, recorded in the PR ledger.

Click a tab or pane to see what it is doing ↗

herdr — api-gateway · driven by horch
hreview herding PR #57 > feat/session-refresh · pane 2 of 3: Codex
❯ /critique deep
[protocol] Draft PR #57 found. Review tier resolved: DEEP (Trigger: auth & session boundary)
[protocol] Preflight diff validation: 4 files changed, +142 lines, -18 lines.
[protocol] Running the deep review matrix...
✖ DEFECT DETECTED: Refresh token written to application logs
File: src/auth/refresh.ts#L142
Violation: raw request metadata, including the refresh token, is passed to logger.info(). Breaks the repo's no-secrets-in-logs invariant.
✔ Posted verified finding inline on PR #57 (commit: 4d2e1b).
✔ Fix pushed using redactSecrets() from the shared package; thread replied and resolved.
⠋ hreview: starting the next pass on Gemini / Agy in pane 3... (round 2 of 4)
›
ctx: 4% (38k / 1M)
Hard Boundaries

What ActiveLoom deliberately does NOT do.

Software engineering tools earn trust through explicit non-goals. We don't lock you into a cloud, hide the prompts, or replace human review.

✔ What ActiveLoom delivers
  • ✔ Standardized engineering skills: Planning, debugging, and review workflows that any team agent can invoke.
  • ✔ PR-first adversarial review: Verified findings posted inline to GitHub before code modifications occur.
  • ✔ Commit-pinned review ledgers: Review evidence recorded on the PR and bound to the exact head commit it covers.
  • ✔ Visible herd orchestration: One session drives review chains, grills, builds, and promotions in herdr panes you can watch and type into.
  • ✔ Upstream fleet sync: Keep every repository updated via proposed PRs without clobbering repo-local rules.
✖ What we deliberately avoid
  • ✖ No proprietary agent runtime: Bring your own Claude Code, OpenAI Codex, or Google Antigravity (Agy). No vendor lock-in.
  • ✖ No monthly SaaS seat tax: No hosted workspace fees, no credit tokens. Apache 2.0 open source. The npm installer has no runtime dependencies; you bring your own agent CLIs and model access.
  • ✖ No unattended production merges: agent-loop opens draft PRs and the review runner never marks ready or merges. horch ships converged work only into your integration branch, and promotion to production stops at your approval and merge.
  • ✖ No clobbering of local rules: Upstream prompt improvements never overwrite your repository's custom compliance invariants.
Adoption Model

From personal trial to fleet sync.

Adopt gradually. Start with a single skill in your personal setup, then scale up to scheduled multi-repo updates. (Adoption tiers are separate from Lean/Deep review depth.)

Tier 0

Personal Evaluation

Try a single skill in your home directory without touching any shared repository files or configurations.

$ npx activeloom add critique --harness claude
Setup guide ↗
Tier 1

Repository Setup

Scaffold harness directories (.claude/, .codex/, .agents/), then run onboard to fill project fields and shared project instructions for your team.

$ npx activeloom init --harness claude
Setup guide ↗
Recommended
Tier 2

Scheduled Sync

Automated GitHub Actions workflow proposing upstream skill improvements via pull requests using built-in GITHUB_TOKEN.

$ npx activeloom init --sync --harness claude
Setup guide ↗
Tier 3

App-Backed Fleet

Scheduled sync through a GitHub App, so propagation PRs land with GitHub-signed commits.

$ npx activeloom init --sync --app --harness claude
Setup guide ↗
Ready to evaluate?

Give your agents real discipline today.

Start with one skill, then set up a repository when you're ready. Your workflow stays yours. Your agents' reviews now leave evidence pinned to the commit they read.

$ npx activeloom add critique --harness claude

Installs one skill into your personal skills directory. Nothing is written to a repository.

CLI: Node 18.17+ · init: Python 3.9+ with PyYAML · Add --dry-run to preview any install
Running skills: your agent CLI(s) and an authenticated gh; agent-loop needs both the Claude and Codex CLIs
Full walkthrough: Getting started ↗