GSD (get-shit-done) vs Lilith-Zero

GSD (get-shit-done) is a meta-prompting and context engineering system for Claude Code that imposes software engineering discipline on AI-assisted development. It replaces ad-hoc prompting with a five-step methodology — initialize, discuss, plan, execute, verify — that keeps context fresh and quality high across long, complex projects. The system works by loading specialized documentation strategically: project vision, requirements, roadmaps, and research are injected at the right phases rather than dumped into a single bloated context window. Planning produces XML-formatted task trees with built-in verification steps, and execution happens in waves — parallel where dependencies allow, sequential where they don't. Quality gates automatically detect schema drift, security regressions, and scope creep before they compound into bigger problems. For teams that have experienced the quality degradation that hits around hour three of a long Claude Code session, GSD's architecture of fresh context windows per phase is the fix. A Quick Mode handles ad-hoc tasks without the full planning overhead, making it practical for both exploratory work and milestone-driven development. It's MIT-licensed, JavaScript-based, and designed for solo developers and small teams who want spec-driven development without enterprise process overhead.

Lilith-Zero is a security runtime written in Rust that sits between your AI agent and its MCP tool servers, enforcing deterministic access control policies and blocking data exfiltration attempts before they reach the wire. It targets what it calls the "Lethal Trifecta"—the attack chain of accessing private data, incorporating untrusted content, then exfiltrating the combination—and blocks all three steps automatically. The technical stack is serious: fail-closed architecture (default-deny everything), dynamic taint tracking that marks sensitive data with session-bound tags, cryptographically signed HMAC-SHA256 audit logs, and formal verification via the Kani prover plus cargo-fuzz fuzzing infrastructure. Performance overhead is under 0.5ms at p50 with a 4MB memory footprint. It ships as a pip-installable Python SDK that auto-discovers and wraps its Rust binary. This is a Show HN project that appeared on Hacker News today and is currently at version 0.1.3 with 260 commits—small community (15 stars) but deeply engineered. As AI agents gain write access to filesystems, databases, and APIs, the absence of a policy enforcement layer becomes a serious liability. Lilith-Zero is one of the first open-source tools to treat this problem with the rigor it deserves.