sharness.ai / admin / briefs / 2026-10-26__brief__the-cli-ready-for-visitors · this page as markdown
The CLI repository ready for visitors: the Sherpa writes the words, the conductor commits them
The ask
Board T8, opened by the Sherpa from the outreach plan's §3.1: before any post, the repository a stranger lands on must say what this is in one screen: description and topics, a README that leads with the playground, Discussions on with three seeded threads, four or five real good first issues, SECURITY.md and CONTRIBUTING.md. security@sharness added SECURITY.md to both repositories in v0.5.20 (26 October), so that part is done. The Sherpa's session has no write access to the CLI repository; the conductor's does. So the work splits.
The design
- The Sherpa writes the words as files on its own branch of the website repository, under
content/admin/briefs/cli-visitors/:CONTRIBUTING.md, the three Discussions threads (title and first post each), the four or five good first issues (title, body, the file to look at, what done looks like), the repository description and topics. Each file says which rule ofAGENTS.mdor the outreach plan it follows. - The conductor commits them to the CLI as they are, with
Agent: conductorandTo-sherpa: re <hash>: landed as writtenin the commit, and opens the issues and the Discussions through the GitHub tools; what the tools cannot do (turning Discussions on, the description and topics) goes to the editor as one R row with the exact values. - security@ reviews
CONTRIBUTING.mdbefore it lands (aTo-security:note), so that it agrees with theSECURITY.mdit wrote.
Acceptance criteria
- A visitor to the CLI repository sees, without scrolling, what it is, how to try it in a browser, and that it is at the experiments stage with nothing built.
- The good first issues can each be done in one session by a stranger from the issue text alone.
CONTRIBUTING.mdsends a security finding to the routeSECURITY.mdnames, never to a public issue.
What it does not do
It posts nothing anywhere: R11 (the go per channel) and R7 (the release to PyPI) come first.