Plan→Check→Review
AI coding rules
Phase Lock
A coding rulebook with workflow hooks and verification scripts.
Phase Lock, published as Phaselock, organizes engineering rules by task and domain. It pairs written guidance with scripts for planning gates, static analysis, handoffs and checking that a plan was implemented.
It includes rules for architecture, security, testing, PHP, Python and Magento. The skill and Bash scripts need compatible agent hooks and the relevant analysis tools.
Explore Phase Lock on GitHub
SBOM→Dependency-Track→Alerts
Vulnerability monitoring
ASE
Automated Security Evaluator.
ASE builds around OWASP Dependency-Track. It turns configured lockfiles and declared technology inventory into software bills of materials, then routes prioritized vulnerability alerts to the owning team's Slack channel.
Dependency-Track supplies matching and dashboards. ASE adds synchronization, routing and priority scoring using CISA's Known Exploited Vulnerabilities catalog, EPSS and CVSS signals.
Explore ASE on GitHub