Atlas.

The supervised software factory. Three AI roles do the work. You hold the gates.

An opinionated methodology for AI-assisted engineering, packaged as a Claude Code plugin: fresh-context verification at every handoff, a plan file as the source of truth, and a human signature on everything that matters.

3rungs: research, kit, manual
2hard gates per run, both yours
1file that outranks the plugin: your house rules
0automated merges, by design

FIG. 1 — The premise

The lone-genius era had a good run.

AI can already write most of your code. The open question is whether anyone is supervising it — or whether one chat window is researching, planning, building, and grading its own homework in a single breathless conversation that forgets its constraints by Tuesday.

Atlas is the other answer. It runs software work the way factories run production: distinct stations, verified handoffs, quality control by someone who didn't build the part — and a human at every decision that deserves one. You stop being the typist. You become the operator.

FIG. 2 — The cast

Three roles that check each other. One of you.

supervisor

The main session. Researches the ticket, writes every prompt the other roles see, reviews every artifact against the live code, filters all feedback. Never merges.

planner

Fresh context. Re-verifies the supervisor's research before writing the plan. When it refutes a claim with evidence, that's the design working — not failing.

implementor

Builds exactly what was signed off, commit by commit, in an isolated worktree. It never sees the research — so it has nothing to redesign from.

you

Answer the scope questions. Approve the plan. Smoke-test what agents can't see. Merge — or don't. Judgment stays where judgment lives.

FIG. 3 — The touchpoints

Unattended between touchpoints. Never past a hard gate.

Five touchpoints per run of the feature workflow; two of them are hard gates that no configuration removes. Everything between them runs at machine speed inside the rails you set; nothing crosses a hard gate without your signature. (Rung one, research, has none: it only writes a document.)

Touchpoint 01ScopeYour answers become constraints no role may re-litigate.
Touchpoint 02 · hard gatePlanNo code exists before you approve the blueprint.
Touchpoint 03Smoke testHuman eyes on what agents can't render.
Touchpoint 04Feedback triageReviewer comments reach the builder only through the supervisor.
Touchpoint 05 · hard gateMergeYours. Always. Not configurable.

FIG. 4 — The ladder

One discipline, three rungs. Match the process to the uncertainty, not the diff.

Research first

for bugs and small tasks · one command
  • Where it lives, how it actually works today, the closest pattern — every claim verified at file:line
  • Then fix in-session, or hand the document to kit mode
  • One command: /atlas:research "why does the history view skip days?"

Kit mode

single-session mode · for work-item-sized changes
  • The session is the supervisor; planner and implementor spawn as fresh-context subagents
  • Work item to open PR in 60–90 minutes, unattended between gates
  • One command: /atlas:feature-workflow TICKET-123 — or hand it the research document

Manual mode

multi-window mode · for feature-sized work
  • Each role gets its own window; you relay the artifacts — the bus is also the gatekeeper
  • A dossier file makes the whole feature resumable from disk alone, weeks in
  • Slices land on an integration branch, one plan and one PR at a time
  • One command to boot the supervisor window: /atlas:launch-supervisor EPIC-7

Sessions are expected to die. Plans, research, reviews, and decisions live in durable files in your journal — the conversation is disposable RAM.

FIG. 5 — The doorman

Autonomy is a padded room, not an open door.

Claude Code gives you three permission layers. Atlas edits none of them: the setup wizard prints the recommended deny rail and you paste it once. The rail is a floor, not a proof; a flag typed after its arguments evades a prefix rule, so judgment and review still do the real work.

DENY RAIL

The banned list you paste once. Force-push, history rewrites, recursive deletes, gh pr merge: refused before they run, no discussion. The merge entry makes "never automated" true even when a prompt goes wrong.

ALLOW LIST

The regulars. Reads, searches, builds, tests — silent, so agents sprint at full speed without paging you a hundred times an hour.

JUDGMENT

Strangers get evaluated. Anything with a blast radius — cloud writes, config changes — pauses and calls the owner. That's you.

FIG. 6 — Quality control

The factory grades its own runs. Then it tries to break them.

Every /atlas:feature-workflow run ends with a scorecard on the same form: protocol fidelity, role quality, outcome quality, a friction log, a verdict. Research runs carry their quality check inside the document, as a skeptic pass; the multi-session supervisor reads scorecards today and does not yet write one. The run fills in what it can see about itself. The outcome part and the grade are left to a session that ran none of the work; today you launch that session yourself and point it at the file and the PR. Its check isn't a lint pass: the grader reverts your fix in a scratch worktree and watches the new tests fail. Tests that don't scream when the fix is gone are decoration, and they get flagged.

"Zero refutations on a research-heavy run is a yellow flag, not a green one." — the scorecard, on what healthy disagreement looks like

Every friction gets logged, and every log entry becomes an edit — to a prompt, a rule, a template. The factory that built your last feature is not the factory that builds your next one.

FIG. 7 — The flywheel

It arrives good. It becomes yours.

Setup creates a journal — a durable home outside your repos where every plan, research doc, review, and scorecard accumulates. Skills consult it before starting anything, so the system's inputs get richer with every run you complete.

And your corrections outlive every update: HOUSE_RULES.md is a file the plugin seeds once and never overwrites, and every skill obeys, senior to its own defaults. Fold in a rule once, and every future run — through every version bump — carries it.

FIG. 8 — Installation

Three commands. Then give it a work item.

# in any Claude Code session, inside a git repository
/plugin marketplace add slhernandez/atlas
/plugin install atlas@atlas
/atlas:setup

The marketplace and the plugin are both named atlas, so the install string is exactly atlas@atlas. After the install, /atlas:setup is available in the same session; no restart. The wizard checks your machine, asks about your tracker, and proves the setup with a real read before it writes anything. It never touches your Claude Code settings.

Or paste this into Claude Code and let it run the first two lines for you:

Install the Atlas plugin for me: run claude plugin marketplace add slhernandez/atlas, then claude plugin install atlas@atlas --yes. When the install succeeds, tell me that /atlas:setup is ready — it is available in this same session, no restart needed. That's the first-run wizard, which checks this machine, asks me a few questions, and verifies the setup with a real tracker read. Don't run the wizard yourself; I want to answer its questions.

Then: the quick start, what to type, from an empty machine to your first scorecard · how it works · the Deck, one card per skill and role · the README.