PyModel/claude-architect
32 stars · Last commit 2026-10-16
Claude Code delegates coding to isolated CLI agents it doesn't trust (Codex, OpenCode, Pi, Pythinker), freezes what they produce, verifies it independently, and merges only what a human approves.
README preview
<p align="center"> <a href="https://github.com/PyModel/claude-architect"><img src="assets/banner.svg?v=7" alt="Claude Architect: CLI coding-agent orchestration for Claude" width="880"></a> </p> <p align="center"> <a href="#quick-start"><img alt="delegate skill" src="https://img.shields.io/badge/skill-delegate-e6edf3?style=flat-square&labelColor=0b0e14"></a> <a href="#direct-codex-cli"><img alt="codex skill" src="https://img.shields.io/badge/skill-codex-e6edf3?style=flat-square&labelColor=0b0e14"></a> <img alt="Claude Code" src="https://img.shields.io/badge/Claude_Code-plugin-d97757?style=flat-square&labelColor=0b0e14"> <img alt="version" src="https://img.shields.io/badge/version-0.54.0-9aa4b2?style=flat-square&labelColor=0b0e14"> <img alt="license" src="https://img.shields.io/badge/license-MIT-3fb950?style=flat-square&labelColor=0b0e14"> </p> **Verified coding-agent delegation for Claude Code.** Claude stays the architect and reviewer: it writes the spec, judges the evidence, and reports what landed. Implementation goes to a fresh-context implementer on the coding CLI you choose (**Codex, OpenCode, Pi, Pythinker, Antigravity CLI, or a headless Claude Code session**), each invocation starting clean inside an isolated Git worktree. The work comes back as a frozen, hash-anchored candidate that Claude reviews against independent verification evidence before a single byte can reach your checkout. Three guarantees are enforced in host code, not in prompts: - **Isolation.** Every Producer runs in a detached worktree with a sanitized environment, an explicit write allowlist, and OS sandboxing where certified. Out-of-scope changes are rejected at freeze time. - **Evidence over claims.** A Producer saying "tests pass" is never accepted; the runtime reruns your authorized verification commands in a clean worktree and records the real output. - **Separated authority.** Implementers cannot approve their own work. Review, decision, and hash-gated integration are separate steps, and integration stages the reviewed tree without committing it. Only a reviewed candidate carrying commit-bound gate clearance is accepted without prompting; anything less requires a human ([decision authority](#decision-authority)).