Claude Code — Interactive Universal Playbook

Requirements & Specification

Define what gets built before any code is written. User stories, acceptance criteria, data models, feature matrix.

Start Here

📋 Requirements Document No Code

📊 Data Model & User Journeys Analysis

Architecture & System Design

Design the full system before writing production code. Components, data flow, API contracts, security model.

🏗️ Full System Architecture Design Phase

Database & Data Model Build

Create complete schema, migrations, indexes, constraints, and seed data. Zero placeholder columns.

🗄️ Complete Database Build Schema + Migrations + Seeds

Core Application Build

Build the complete working application. Models, controllers, services, business logic. Zero stubs — every function fully implemented.

Main Build

🛑

NON-NEGOTIABLE: Zero stubs. Zero placeholder functions. Zero TODOs in committed code. Every function fully implemented.

⚙️ Core App — Complete Build All Features

🔧 Fix, Refactor & Complete Iterative

Authentication & Authorisation

🔐 Complete Auth System Security Critical

API / Backend Services

All REST endpoints, middleware, rate limiting, versioning, validation, response formatting.

📡 Complete API Build All Endpoints

Frontend / UI Build

All views, templates, components, CSS, JavaScript. Zero placeholder pages. Production quality.

🎨 Complete Frontend Build All Views + CSS + JS

Integrations & Add-ons

Third-party APIs, payment gateways, email, SMS, storage, maps, analytics — all resilient with proper error handling.

🔌 Integrations Build Third-Party

Full Test Suite Build

Unit, integration, end-to-end, and security tests. 80%+ coverage target. CI integrated.

🧪 Complete Test Suite All Test Types

B10

Deployment & DevOps

Server config, environment setup, CI/CD, monitoring, backups — fully production ready.

Go Live

🚀 Full Deployment Setup Production Ready

🌐

Public Website / Landing Page

Complete production-ready public marketing site. Lighthouse 90+. WCAG 2.2 AA. Deployable immediately.

🌐 Public Website Build Full Stack

🖥️

Public Customer Portal

Client-facing web application — account management, dashboard, self-service features.

🖥️ Customer Portal Build Client-Facing

👥

Staff / Team Website

Internal company website — news, policies, team directory, resources, onboarding.

👥 Staff Website Build Internal

🔧

Staff / Team Portal

Operational internal tool for staff — tasks, workflows, reporting, role-based access.

🔧 Staff Portal Build Internal Tool

⚙️

Admin Dashboard / Portal

Full system administration — user management, settings, analytics, reports, audit logs.

⚙️ Admin Portal Build System Admin

🏢

Internal Application Portal

Business process / workflow tool — forms, approvals, automation, notifications, audit trail.

🏢 Internal App Portal Build Business Process

📱

Mobile Application

Native or cross-platform mobile app — iOS / Android. App Store ready. Biometric auth, push notifications.

📱 Mobile App Build iOS + Android

🛡️

Security Hardening

Systematic OWASP Top 10 remediation, security headers, input validation, secrets audit, CVE scan.

🛡️ Security Hardening Audit OWASP + Headers

📜

Compliance Audit

Privacy law, consumer protection, industry standards — full jurisdiction-aware compliance check.

📜 Full Compliance Audit Jurisdiction-Aware

♿

Accessibility — WCAG 2.2 AA

Full accessibility implementation and audit. DDA / ADA compliant. axe-core scan. Screen reader tested.

♿ Accessibility Build & Audit WCAG 2.2 AA

✓

Mandatory Test Gate — After Every Phase

Non-negotiable. 100% pass required. All results saved. Zero issues carried forward.

Every Phase

🛑

ABSOLUTE RULE: ONE test failure = STOP. Fix ALL issues. Re-run ALL tests. 100% pass. Then and only then proceed. Results saved to docs/test-results/PHASE-N-[DATE].md.

✅ Universal Phase Test Gate After Every Phase

™

IP, Patent & Trademark Recording Gate

Every innovation recorded in submission-ready format. Run after every phase. Public disclosure before filing destroys patentability.

Continuous

™ IP Recording Protocol After Every Phase

⚖

Legal & Compliance Gate

Zero legal risk mandate. Full jurisdiction-aware compliance. Run at project start and before every public release.

Continuous

⚖ Legal Risk Elimination + Compliance Audit Zero Risk

★

Master Single-Shot Prompt

One prompt runs all 8 phases. Fully populated with your project details. Copy and paste directly into Claude Code.

Start Here

★ Master Universal Prompt — All 8 Phases Single Shot

⚙

CLAUDE.md — Repo Root Instructions

Place at repository root before running any phase. Claude reads this automatically every session.

📋 CLAUDE.md Template Repo Root

Phase 0 — Forensic Repository Audit

Read everything before writing anything. Produces structured audit report.

Read Only

🔍 Phase 0 · Forensic Audit No Files Created

Phase 1 — GitHub Standard Files

All default GitHub files, CI/CD workflows, issue templates, community health files.

🐙 Phase 1 · GitHub Files ~25 Files

Phase 2 — Public Documentation Suite

User, admin, technical, developer guides. API reference. All complete. Zero stubs.

📘 Phase 2a · User + Admin Public

💻 Phase 2b · Technical + Dev Public

Phase 3 — Standard Operating Procedures

15+ SOPs covering every critical operational process. Each with steps, checklists, and rollback.

📋 Phase 3 · Complete SOP Suite 15+ SOPs

Phase 4 — IP, Compliance & Legal Documentation

Patent register, compliance matrix, legal templates. All jurisdiction-specific.

⚖ Phase 4 · IP + Legal Confidential

Phase 5 — Confidential Business Documents

Business plan, marketing, pricing, investor materials, HR, vendor register. Never committed publicly.

🔒

SECURITY: Verify docs/confidential/ is in .gitignore before running this phase. These documents must NEVER appear on any public branch.

🔒 Phase 5 · Confidential Suite Private Only

🔥

Phase 6 — Phoenix Rebuild Protocol

Ultra-detailed forensic document. Rebuild from zero to fully operational with nothing but this document.

Ultra Detailed

🔥 Phase 6 · Phoenix Protocol Confidential · Eyes Only

🦢

Phase 7 — Black Swan Resilience Protocol

18+ extreme risk scenarios. Each with probability, impact, response protocol, and recovery procedure.

Ultra Detailed

🦢 Phase 7 · Black Swan Protocol Confidential

Phase 8 — Complete Public Website

Fully functioning, production-ready. Lighthouse 90+. WCAG 2.2 AA. Deployable immediately.

🌐 Phase 8 · Public Website Full Stack

🌿

Release Branch Workflow

Clean releases with mandatory testing, IP review, and structured PR.

⚡ Single-Shot Release Quick

📋 Full Release + Docs Complete