Agents that run your SDLC.
ADLC keeps policy in .adlc/. Dev, Review, and QA run from Azure DevOps, GitHub, and Jira.

Board to PR to review, without a new chat every time.
A work-item state change or a pull request starts the matching agent. Each role stays sharp: Dev implements, Code Review judges, QA tests.
Ready
Dev
Opens a planning PR and child tasks. The plan is reviewable before anyone implements.
In Progress
Dev
Implements the approved plan on the feature branch and opens the work PR.
Pull request
Code Review
Posts a verdict on bugs, regressions, and missing tests. It never implements.
Ready for Testing
QA
Designs linked cases, then runs them with agent-browser or Playwright in the sandbox.
Every weekday
Security
Scans with Trivy and Semgrep. Files High+ bugs on the board.
Every day
Self Improvement
Reads run feedback, opens a policy PR, then proposes that PR. Live config is never patched.
Agents are files in the repo.
Instructions, triggers, and secret names live in .adlc/. The dashboard holds keys, webhooks, and on/off. Review a policy change the same way you review code: as a pull request.
Connect ADLC MCP in Cursor or Claude, then install the policy skill. Local agents can list what already exists before they scaffold anything.
# .adlc/agents/dev.md
slug: dev
name: Dev
model_family: grok
triggers:
- type: webhook
source: azure-devops
events: [workitem.updated]
filters:
work_item_type: Product Backlog Item
state: ReadyMentions, MCP, sandboxes, and cost you can audit.
Mention the agent. Pin the role.
Comment on a PR or work item. /dev forces Dev. Without a slug, the router reads descriptions and instructions and picks once.
you @handle /dev tests failed on the planning PR. Fix the filter signature.

ADLC MCP in the IDE
OAuth for Cursor and Claude. Org keys stay under Advanced for sandbox runs.
Isolated Vercel Sandbox
Each run restores the environment snapshot, injects connector secrets, and starts the CLI you pinned.
- Claude Code
- Cursor CLI
- GitHub Copilot CLI
- Grok Build

Cost and ROI Tracking
Agent spend plus sandbox CPU. Cursor confirmed via Admin API. Reports sum confirmed cost only.

Every run is an audit trail
Trigger item in, pull requests out. Feedback on the run feeds Self Improvement the next morning.
The starter pack, not a prompt library.
Repo Initializer writes these into .adlc/. New agents stay disabled until you enable them. Planning is Dev or SpecKit, never both.
- webhookDevPlans Ready work items, implements In Progress, and fixes bugs. Pick Dev or SpecKit, never both.
- webhookCode ReviewReviews every pull request for bugs, regressions, and missing tests. Verdict only. It never implements.
- webhookQA Test GenerationDesigns and links test cases when a story reaches Ready for Testing. Does not execute them.
- webhookQA Agent BrowserRuns those linked cases in a live browser. Skips if cases are not on the item yet.
- webhookQA PlaywrightAuthors Playwright coverage for the linked cases and executes them in the same run.
- cronSecurity ScannerWeekday Trivy and Semgrep. Files High+ bugs on the board.
- cronSelf ImprovementDaily. Opens a policy PR from run feedback, then proposes that PR. Never patches live config.
Connect the repo. Enable an agent.
Sign in, set GitHub or Azure DevOps as the default repo, run Repo Initializer, then enable Dev or Code Review.