[cipherstash-agent]

Summary

Adds docs/agents/claude-routines.md, a one-page reference for the three Claude Code routines that act on this repository. A routine is a Claude Code session started on a schedule or by an API call. Two of them deal with dependency vulnerabilities reported by Vanta, our compliance and security platform. The third reviews pull requests. Until now nothing in the repo explained where their branches, pull requests and review comments come from.

Changes

• docs/agents: new claude-routines.md covering each routine's trigger, the skills it loads, what it reads and writes, its connectors, notifications and repository access.
  • vanta-triage (daily): pulls Vanta findings, cross-checks them against Linear, and files, retargets or closes Linear issues.
  • vanta-remediate (daily, an hour later): picks up those issues, bumps the vulnerable dependencies and opens pull requests.
  • Code review: fired by .github/workflows/code-review.yml when a pull request is opened, reopened or marked ready for review. It runs /code-review medium, then cross-checks the findings against existing review feedback.

Verification

• Took trigger times, skills, connectors and notifications from the routines' current configuration, and repository lists from each routine's most recent run.
• Checked the code review trigger and skip rules against code-review.yml and claude-review.yml on main.
• Docs only: no code, build or test changes, so no changeset.

Review notes

• This repo is public, and the page names the other cipherstash repositories the routines can reach, some of which may be private. Trim that row if it shouldn't be published.
• One open question is recorded in the page: vanta-triage's repository list does not include cipherstash/skills, even though it loads its skill from there.

---

Generated by Claude Code

[changeset-bot]

⚠️ No Changeset found

Latest commit: f6f8028

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}