Django is a Python natural fit for healthcare. GreatCTO auto-detects both — adds the healthcare archetype overlay, wires healthcare-specific gates, and runs 83 specialist agents around your existing Django workflow.
GreatCTO reads your pyproject.toml / requirements.txt and detects django + healthcare archetype from signals: imports, file structure, env vars, README hints.
Attaches the healthcare archetype overlay: HIPAA gates, BAA tracking, PHI encryption review, 21 CFR Part 11 audit-trail. Override if your specifics differ; the defaults are sensible for Django-style projects.
qa-engineer runs mypy / ruff / pytest --cov; security-officer scans for SQL injection patterns common in ORMs (SQLAlchemy, Django ORM); performance-engineer profiles async patterns for I/O contention.
Bugs you've hit before in other Django projects (connection-pool exhaustion, ORM N+1 queries, retry storms) — the agent's Step 0 includes the prior detection order. MTTR drops 94 % on second occurrence (methodology).
$ cd my-django-app && npx great-cto init ✓ scanning manifests… found pyproject.toml ✓ stack: django (Python) ✓ archetype: healthcare ✓ overlay: applied ✓ 83 agents ready $ /start "add HL7 patient resource endpoint" ▸ architect drafting ARCH-healthcare.md… ▸ pm decomposing into beads tasks… ⚐ gate:plan — your approval needed
Approve → 3 senior-devs run in parallel worktrees → 5 reviewers fan out in parallel → gate:ship → deploy. One real run walked stage-by-stage: /proof.
This is the shape of what senior-dev drafts for "HL7 patient resource endpoint" — auth first, schema validation, and the audit line the healthcare reviewer requires before gate:ship opens.
# healthcare/views.py — drafted by senior-dev, reviewed by 5 agents
from django.contrib.auth.decorators import login_required
from .audit import audit_log # gate:healthcare: every decision logged
@login_required # security-officer: auth before handler
def create(request):
form = HealthcareForm(request.POST) # qa-engineer: form validation enforced
if form.is_valid():
result = handle(form.cleaned_data, request.user)
audit_log(who=request.user.pk, what="HL7 patient resource endpoint", confidence=result.confidence)
return JsonResponse(result.as_dict())healthcare overlay.Patient-facing portals handling PHI under HIPAA.
FHIR / HL7 integration services for EHR data.
Clinical-workflow tools with 21 CFR Part 11 audit trails.
No black-box "AI does it all" loop. GreatCTO is a deterministic state machine — 8 stages, 22 nodes, 2 human gates. Every node maps to a real agent on GitHub. Inspect the state machine →
$ npx great-cto init
Free, MIT, runs locally. Built as a Claude Code plugin — install with one command.
Eight stages, two human gates, four memory layers. Why this exact shape, and what I tried that didn't work.
One run, one feature, from prompt to merged PR. Time, cost, and gate-by-gate breakdown — no marketing math.
Regex vs LLM-based archetype detection, the false-positive count, and why I keep rejecting the obvious fix.
The bottleneck in agentic SDLC isn't model quality — it's process governance. Here's the state machine that closes the gap.