Claude Code Accelerators

Our deployment harness delivers Claude Code skills that know how to operate the multi-stack deployment harness. Onboarding an application, choosing a stack, deploying it and operating it become conversations with guardrails, not weeks of runbook archaeology.

Skills Encode the Runbook, guarding against common mistakes

A Claude Code skill tells Claude when it's needed and exactly how to perform: which command, in which order, what each refusal means, and how to report the result honestly. Ours drive one command-line tool over the multi-stack deployment harness, so the output is always native commands for the appropriate stack. Guards exist to prevent common mistakes. New guards are incrementally added based on experience.

The Authority Ladder

Every skill defaults to the lowest rung that answers the question, and never climbs a rung without being asked.

1. Read

Catalog, show, troubleshoot, assess.

2. Plan

infra plan, deploy --dry-run, a rendered manifest. No mutation occurs.

3. Mutate

infra apply, deploy, push --execute. Needs your approval.

4. Destroy

A typed confirmation, then execute. Refused outright against the live colour.

📥

Adopt

Bring an existing application onto the harness

Claude reads what an application already has, including its Copilot manifest, its own Terraform, its Dockerfiles and CI workflows. From those it writes the application's single app.yaml, deriving ports, health checks and build contexts rather than guessing them. It also classifies the application and wires it to shared identity.

What it catches

  • Storage that won't survive containers: SQLite files and local JSON data on ephemeral task storage are flagged as blockers instead of being quietly lost on the next deploy
  • Dependencies nobody uses: a declared cache or queue the code never connects to is removed rather than provisioned and paid for
  • Driver-specific connection strings: postgresql:// vs postgresql+asyncpg:// mismatches that break a healthy database
  • Collisions: overlapping network ranges, plus the DNS and certificate records the old pipeline still owns

Adoption is mostly deletion. Each application's hand-built pipeline is replaced by one manifest and two small Terraform roots, so there is less infrastructure code to maintain, not more.

🧭

Provision

The same manifest on any cloud

Ask "what would it take to run this on Kubernetes?" and Claude renders the answer from the application's existing app.yaml. You get the Kubernetes manifests or Cloud Foundry manifest it would apply, plus a list of the things that don't carry over. The application doesn't have to be moved first.

What it produces

  • Kubernetes: namespace per environment, Deployments, Services, Ingress, HorizontalPodAutoscalers, and backing-service bindings as Secrets or Crossplane-style claims
  • Cloud Foundry: an application manifest, the cf create-service plan from the foundation's marketplace, and service bindings
  • A precise gap list: platform-specific settings to replace, Dockerfiles a buildpack would ignore, services a stack has no mapping for

Pushing is previewed by default. It refuses when cf is targeted at the wrong org or space, or when the Kubernetes context isn't the one the stack catalog declares.

The gap list isn't guesswork. Every stack answers to the same written contract, ten obligations covering catalog, build, run, brokered services, explicit binding, secrets, routing, target guards and preview. A stack that can't meet one says so, and the skill reports it before anything is pushed.

🚀

Deploy

Infrastructure, secrets and release, in the order that works

On AWS Fargate, Claude stands up the infrastructure and checks which secrets still hold placeholders, then dispatches the CD pipeline, all from one place with no switching between repositories. Static sites deploy with a single guarded apply that uploads content and invalidates the CDN only when something changed.

Guards Claude cannot talk its way past

  • Wrong cloud account: refused before Terraform ever contacts state storage
  • Unpushed or mismatched code: a deploy of commits the pipeline can't see is refused; a branch that differs from what CD will build is flagged
  • Placeholder secrets: CD won't deploy until required values are real, and Claude never writes secret values itself
  • Destructive operations: teardown needs a typed confirmation and an explicit flag to touch the live colour
  • Honest reporting: "dispatched" is never reported as "deployed"
🗂️

Reconcile

Know what exists, and what's inconsistent, across every stack

Claude answers "what do we have?" from the stack catalogs and each application's own manifest, read fresh every time. There's no separate inventory to fall out of date. Doctor checks every application on every stack and reports each inconsistency: manifests that disagree with a catalog, apps that won't render for a stack they're listed on, AI model plans the marketplace doesn't offer.

It reads files, not live services, so it works offline, in CI, and on the day something is down.

Agentic Coding Best Practices, Built In

The community Agentic Coding guide sets out how teams should verify and secure what AI agents produce. Most teams enforce those practices by discipline. Our skills enforce them in the tooling, so they hold on a busy day too.

🔎

Code Review and Verification

Guide section D, practices 14 to 19

Check output immediately

Every change is previewed first: infra plan, deploy --dry-run, site plan, or a rendered manifest before push --execute. You see the diff before anything moves.

Nothing you can't explain

The skills wrap standard tools rather than reimplement them. What they produce is ordinary Terraform, Cloud Foundry manifests and plain Kubernetes YAML that any engineer on your team can read.

Standards checked before review

Doctor checks every application on every stack, catching manifests that disagree with a catalog and services a stack can't provide. The tooling itself runs linting, formatting and type checks.

Tested behaviour, stated honestly

The Cloud Foundry and Kubernetes renderers are unit-tested against a reference manifest. We publish which stacks have been exercised against live infrastructure, and which haven't yet.

Accurate and current

Answers come from catalogs and manifests read fresh on every call, never from a separate inventory or a model's memory, so they can't go stale.

Ready for peer review

Every change is a manifest change in git. Automation acts only on what's committed, and warns when your branch differs from what the pipeline will build.

🛡️

Quality, Standards and Security

Team standards, encoded

Agents don't know your team's rules unless you tell them. The skills carry your runbook and the stack contract carries your architecture rules, so every run starts from them.

Secrets never in code or prompts

Manifests hold no account IDs and no secret values. Secrets are supplied out of band per stack, CI authenticates through keyless OIDC, and Claude never writes a secret value itself.

Agent security settings

Guards refuse the wrong cloud account, Cloud Foundry org or space, or Kubernetes context before anything changes. Each application's automation role can reach only its own state. We also set agent tool permissions and exclusions as part of every engagement.

Refactor to the standard

Adoption treats the old deployment as a first draft. Hand-built pipelines become one manifest and two small Terraform roots, and dependencies nobody uses are removed rather than carried forward.

How an Engagement Uses Them

1. Inventory

Catalog and doctor your applications and environments as they stand today.

2. Adopt

Derive one manifest per application from its existing deployment configuration.

3. Choose the stack

Render each application for Fargate, Cloud Foundry or Kubernetes and compare the real gaps.

4. Deploy with guardrails

Blue/green on every container stack, previews by default, and refusals that name the fix.

5. Hand over

The harness, the stack catalogs and the skills stay with your team as a Claude Code plugin.

See applications running on the harness today in our Folio.

What's Next

Today these skills operate applications that already exist: adopt them, deploy them, keep them consistent across stacks. The same contract extends naturally to generating a new application directly onto a stack's profile, so a non-developer's request lands on your conventions from the first commit. That scaffold-and-profile work is open, not yet shipped, and we'll move it up to the skill list above when it is. Stack partners are where we're shaping it.

Ready to see what we can do together?

Let's discuss how we can help accelerate your initiatives