judge-dredd

Judge Dredd

Operational discipline framework for Claude Code. v1.2.1

Born from $39.5K in deployment mistakes, 7-hour regressions, and 34 false positives at DugganUSA. Every rule in this plugin exists because someone (me) did the wrong thing and documented the cost.

The same team runs a threat-intel STIX feed — 1.5M+ IOCs, ~38M documents across 65 indexes — consumed by 275+ STIX consumers in 46 countries, fed by 15 external feed sources, with ~1,655 blog posts of receipts behind it. The feed is independently validated on four live, no-auth endpoints: novelty (feed-uniqueness), timeliness (kev-lead, live kev-lead ledger vs CISA KEV), accuracy (spamhaus-validation), and liveness (feed-efficacy, opt-in consumer reports of when our indicators actually fire on real traffic). This plugin is the discipline layer that ops grew out of.

What It Does

Judge Dredd enforces operational discipline through Claude Code hooks:

Hook	Trigger	What It Catches
Deployment Gate	PreToolUse(Bash)	docker push, git push, terraform apply, npm publish, vercel deploy, etc. Forces confirmation before any deployment command executes.
Epistemic Cap	PreToolUse(Edit|Write|MultiEdit|NotebookEdit)	"100% secure", "zero vulnerabilities", "fully compliant". Enforces a 95% ceiling on certainty claims.
Docker Hygiene	PreToolUse(Bash|Edit|Write|MultiEdit|NotebookEdit)	:latest tags, Alpine base images, missing --platform flags — in commands AND Dockerfiles.
Content Workflow	PreToolUse(Bash)	Social posting without backing content. The "Ass-Backwards Pattern": posting to Bluesky before the blog post exists.
Context Preservation	SessionStart(compact)	Context loss after compaction. Re-injects your project identity, APIs, and rules from .dredd/context.md.
Completion Verify	Stop	Agent tries to stop without verifying changes. Prompts a "did you actually test this?" self-check before closing out.

Plus two slash commands:

Command	What It Does
/dredd-6d	Quick 6-dimension compliance scorecard for your project
/dredd-audit	Full compliance audit with per-dimension scoring and recommendations

Install

# Add the marketplace
/plugin marketplace add dugganusa/judge-dredd-plugin

# Install the plugin
/plugin install judge-dredd@dugganusa

Or install directly:

/plugin install judge-dredd@dugganusa/judge-dredd-plugin

Configure

Drop a .dredd.json in your project root to customize. All fields are optional — defaults are sensible.

{
  "confirmation_word": "adoy",
  "epistemic_cap": 95,
  "deployment_patterns": [
    "docker push",
    "git push",
    "terraform apply",
    "kubectl apply"
  ],
  "additional_deployment_patterns": [
    "my-custom-deploy-script"
  ],
  "docker": {
    "ban_latest_tag": true,
    "ban_alpine": true,
    "require_platform_flag": true
  },
  "content_workflow": {
    "enabled": true,
    "social_patterns": [
      "post-to-bluesky",
      "tweet"
    ]
  },
  "additional_social_patterns": [
    "my-social-tool"
  ],
  "completion_verify": true,
  "audit_log": false
}

Configuration Reference