altimate-code — 1 hook

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-17

Run UTC: 2026-10-17T18:13:42Z
Reviewed: 2026-10-17
Published: 2026-10-17
Updated: 2026-10-17

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 hook declaration. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · hooks · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-17T18:13:42Z, tree f6ecd2726a410f1f8d3370de718811677d75a70b456ad2eeaacffa1472eecef3.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: altimate-code — 1 hook
slug: source-hooks-2f2503527efbf714dda4f47e
type: hooks
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 1 hook declaration. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared hook names (listing.json): SessionStart"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/AltimateAI/altimate-claude-plugin.git
documentation url: https://github.com/AltimateAI/altimate-claude-plugin.git
commit: b7c8f68b3dfd303ab3ccf2f43934098811dfe2aa
tree sha256: f6ecd2726a410f1f8d3370de718811677d75a70b456ad2eeaacffa1472eecef3
file sha256: {".claude-plugin/marketplace.json":"39af5340f40fa76e6ba9af852b7eb25e376278d86217c120cf960c36eec2e84b","CODE_OF_CONDUCT.md":"8ea37d452033a16fd2f5a24f97ed8542cba957c56a174863532dfd52032f4b5e","CONTRIBUTING.md":"24a6b72270518e918a76e12369c022826108f1afb1d70f1118bd334350a33037","LICENSE":"4803d53a80608d02046aa6fa46f84eae75d460e76bde9c010a9bcb8d62e33396","PRIVACY.md":"11c2fe8c55ae65ea77e282278e3f0f4f050feed8dc0f1a08ce4bf4678a15087f","README.md":"6e769f4a3370daeca3c14c75bd2c27d5435983167dc5fe50300eb7fdee6ba2af","SECURITY.md":"19a58197a668baefa4f193850930fcced24d98b41a8556c4188bc432a46ad208","TERMS.md":"b61dde22befba84cdc2b052d2a3439e4b21cd1e8f3fd3b93ad2921c72c2e72cf","plugins/altimate-code/.claude-plugin/plugin.json":"bcbb353edf9638fd885205e77ba3bebe16e22e84b5ed9c3ebd40c4a4a636eaa2","plugins/altimate-code/CHANGELOG.md":"9815db847da15426b2fb500d373f8f7a30d1d406ef3f66c86ba0ea8fb40906e9","plugins/altimate-code/README.md":"e37e1a89c6393229303412a702ced2de230e0db356dfaa5405bbcc3fbc8e37e1","plugins/altimate-code/commands/altimate.md":"c42afba40d0889bc2455cc4f7c406b5b709b203a78198433ad6a5f1ce16357a7","plugins/altimate-code/commands/review.md":"9b12d4115d766b79e6f52d271d3442eb39849a2aeab048acd7325105b303cd5d","plugins/altimate-code/hooks-handlers/session-start.sh":"b2973783843b94a42d8c45226c077b830a16aee4f67dfe48db2420339517c8c8","plugins/altimate-code/hooks/hooks.json":"60e39868b8d40adfdea2f025b7b576bf20ed02db773228b7d1754869b885b98d","plugins/altimate-code/skills/altimate-code/SKILL.md":"0ec697b5215cf440c4ddbb76b243b745330c65370dcdbe49e34a2bc4358be1e0","plugins/altimate-code/skills/review/SKILL.md":"2dd3416d8a988bfe3021b3204d26fb23791805da091af4baefc93f2a222ffc3a"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-17T18:13:42Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-17
reviewed date: 2026-10-17
published date: 2026-10-17
modified date: 2026-10-17
reviewer: Machine-checked
harness version: toolwitness harness at commit 91d582437af1f2e02c76d72bbea545f817acfaa1
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-17T18:13:42Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"altimate-code — 1 hook","operatingSystem":"Not exercised","softwareVersion":"b7c8f68b3dfd303ab3ccf2f43934098811dfe2aa"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 hook declaration. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared hook names (listing.json): SessionStart"}],"evidence_sha256":{"LOCK.json":"a6cd99b7c61a44c5f44e7323f4d784a0c8787a1d69c3b379bcfa26a598c95f5e","commands.json":"d8537ed79cbff5d45579fee3e9848bc9c0eafc091be58aad309aedb91046b7dd","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"0f502dd1ef1e1c00779a5d5555a8742cf799e4a06ed9e7b1cda57d2cdec4fbaf","listing.json":"02e135f4f7d8dd4d507f647e32476a19e23152234c61e435c6f7f92e4280165a","selection.json":"41766fd4a9c6175d70545cb5ea218f02b12fe89c6528308986313c43799abc62"},"identity_artifact":"identity.json"}
review: {"codex":"d461280373353559b8db511dbed7148778d69ad98758cfa6a3543a993107f135","date":"2026-10-17","gates":"7846b53cb288ba1f7612ec3c884aab1abc39fa650b2c01985e07ba69b1f8cc0f","grok":"dc287fdc07378781cce0d0ce17aa0b69bed2dbcc8cb075209bd3c3aaa1770289","kind":"machine-checked","reviewed_sha256":"e5663ca4d58576b4dba59e84c3ffa9eba909d3ad4ad48b98b0b64b7b8347b1ff","summary":"Deterministic gates passed; Codex confirmed all outcome claims; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/altimate-code/skills/altimate-code/SKILL.md",
        "name": "altimate-code",
        "description": "Delegates dbt and warehouse work to altimate-code, a specialized CLI agent with 100+ purpose-built data tools. Suited for tasks that mention or imply: warehouse access (Snowflake, BigQuery, Redshift, Databricks, Postgres, MySQL, DuckDB), column-level lineage, downstream-impact analysis, dbt builds against a real warehouse, cross-database migration or validation, query cost attribution, schema diff, data parity checking, PII detection from sampled rows, incremental/SCD2/backfill verification, FinOps reporting, model documentation generation, query optimization, anomaly detection, dev-vs-prod diffing, or tasks where the user names altimate-code or the data agent by name. The skill routes to a purpose-built CLI, so it covers workloads that touch live data, lineage, or warehouse state more directly than native file-editing tools do.",
        "files": {
          "plugins/altimate-code/skills/altimate-code/SKILL.md": "0ec697b5215cf440c4ddbb76b243b745330c65370dcdbe49e34a2bc4358be1e0"
        }
      },
      {
        "path": "plugins/altimate-code/skills/review/SKILL.md",
        "name": "review",
        "description": "Review dbt project changes — dbt models (models/**/*.sql), schema.yml, dbt_project.yml, sources.yml, macros, snapshots, seeds. Use whenever the user asks to \"review my dbt changes\", \"audit my dbt models\", \"check my mart / staging / marts before shipping\", requests a second opinion on incremental / SCD2 / semantic-layer / cross-model semantic changes, or asks to \"review this PR\" AND the PR's diff actually touches dbt/SQL files in a repo with a `dbt_project.yml`. Runs altimate-code review to emit a signed verdict (APPROVE / COMMENT / REQUEST_CHANGES) with column lineage, query equivalence, dbt anti-pattern detection, materialization / tier-gated blast-radius analysis, and sampled-r

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-17