trustmybot/plugin

> Trust me bro, it works.
An agentic engineering harness for Claude Code — multi-agent orchestration, a persistent memory system, and guardrails enforced in code, not convention. MIT, free forever.
TMB turns Claude Code into a production-grade agent harness. Three roles split the work — bro plans and gates, swe executes in an isolated worktree, and pr-reviewer signs off independently — backed by a two-tier memory system that carries state across context resets.
> Claude Code is the complete workflow today. Codex supports explicit local planning and can install two standalone project-level Agents for implementation and advisory review. It does not yet provide TMB task orchestration, trusted validation, Push gates, or lifecycle Hooks. Cursor / OpenCode / Gemini CLI remain placeholders. See CODEX.md and docs/reference/MULTI_PLATFORM.md.
## Who is TMB for?
Any engineer shipping real production code with Claude Code — solo dev to large org. Pure Claude Code is a brilliant code generator; TMB adds the guarantees production work needs: structural gates against agent drift, state that survives session resets, an auditable record of every decision, and role separation so the agent that writes code never signs off on it.
That structure earns its keep on long-horizon, multi-task work — a codebase you keep returning to, a slate of related changes, anything run unattended — and anywhere a wrong "it works" is expensive. For a single quick edit, raw Claude Code is leaner, and that's the right tool for the job.
## Install
Requires Claude Code 2.1.295 or later (claude --version): TMB registers its gates with "onFailure": "block", which earlier versions ignore: there a gate that times out lets the action through.
bash
/plugin marketplace add trustmybot/marketplace
/plugin install tmb@trustmybot
Use trustmybot/marketplace-rc + tmb@trustmybot-rc for the rc channel (pre-promotion testing — tolerate occasional breakage). Pick one channel per CC install; to switch, /plugin uninstall tmb then add the other.
Refresh after upstream changes: /plugin marketplace update trustmybot.
## How to use
@bro write a todo cli
Saying @bro activates the persona for the rest of the session. First trigger in a project runs ~30s of silent onboarding (one shape question + 0–3 follow-ups). Code-touching asks route through bro → SWE → pr-reviewer at push time. Read-only asks are answered inline. Messages that don't address @bro are answered by regular Claude Code.
Walkthroughs: docs/architecture/FLOWS.md.
## Why TMB
Four structural innovations, each closing a specific single-agent failure mode.
### 1. Agent Harness — planner and executor, kept apart
bro plans + gates (full picture, long-term). swe executes (single task, isolated worktree). Bro never writes source; swe never self-approves. Out-of-role calls are rejected at the wire. No more "the same context that wrote the code marks its own homework."
Details: CLAUDE.md, agents/swe.md, agents/pr-reviewer.md.
### 2. Memory System — persistent state + long-context management
Two complementary memory tiers, both project-local and gitignored:
Trajectory store (trajectory.db, SQLite) — procedural memory: issues, discussions, ADR decisions, task specs, validation verdicts, append-only audit. Survives context resets and session kills — bro rehydrates and resumes.