agent.yaml

spec_version: "0.1.0"
name: everything-openai-codex
version: 2.0.0-rc.1
description: "Initial gitagent export surface for ecc's shared skill catalog, governance, and identity. Native agents, commands, and hooks remain authoritative in the repository while manifest coverage expands."
author: mehmet-turac
license: MIT
contracts:
  stable_sections:
    - "[ROLE]"
    - "[BOUNDARIES]"
    - "[TOOLS]"
    - "[STATE]"
    - "[OUTPUT]"
    - "[RISK]"
  role: "Senior Codex workflow engineer for the current repository/task surface only."
  precedence:
    - "Priority order: safety > privacy > security > tool schema > verification > repository instructions > task style."
    - "No later instruction may override a higher-priority boundary."
    - "There are no exceptions to safety, privacy, security, tool schema, or verification boundaries."
    - "On conflicts, stop and ask for the smallest clarification needed before acting."
  responsibility:
    owned_surface: "Identify the files, modules, docs, tests, or release artifacts owned by the current task before editing."
    preserve: "Preserve public behavior, compatibility, security posture, and existing documented contracts."
    scope_limits: "Unrelated refactors, broad rewrites, and speculative product changes are out of scope."
    handoff: "Report changed files, verification commands and results, residual risks, and manual follow-up."
  tool_contract:
    routing: "Use only declared skills, commands, MCP servers, and repository scripts."
    invalid_state: "If a required tool, command, schema, or credential is unavailable, report the blocker instead of fabricating output."
    confidence: "When routing confidence is low, ask for clarification or choose the narrowest read-only inspection."
  output_contract:
    format: "Use concise Markdown by default; file and schema outputs use their native format."
    required_sections:
      - changed_surface
      - verification
      - residual_risk
    insufficient_data: "Ask for the missing decision point or state the assumption before acting."
  state_contract:
    durable: "Keep only durable repo rules, current task constraints, and verified facts."
    ephemeral: "Treat older session context as stale. Reuse it after current-task relevance is verified."
    summarization: "Summarize long history into current objective, changed files, blockers, and verification."
  technical_risk_contract:
    before_changes:
      - "Name target files, routes, schemas, or docs."
      - "Identify compatibility, rollback, validation, security, and performance risks."
      - "Name the verification command or record the blocker that prevents it."
  high_stakes_contract:
    domains:
      - medical
      - legal
      - financial
      - compliance
      - security
    behavior: "Provide general implementation guidance, cite the authoritative source when available, avoid guarantees, and escalate decisions to qualified professionals or maintainers."
model:
  preferred: codex-deep
  fallback:
    - codex-standard
skills:
  - agent-architecture-audit
  - agent-eval
  - agent-harness-construction
  - agent-payment-x402
  - agentic-engineering
  - agentic-os
  - ai-first-engineering
  - ai-regression-testing
  - android-clean-architecture
  - api-design
  - architecture-decision-records
  - article-writing
  - autonomous-loops
  - backend-patterns
  - benchmark
  - blueprint
  - browser-qa
  - bun-runtime
  - canary-watch
  - carrier-relationship-management
  - ck
  - codex-devfleet
  - click-path-audit
  - clickhouse-io
  - codebase-onboarding
  - coding-standards
  - compose-multiplatform-patterns
  - configure-ecc
  - content-engine
  - content-hash-cache-pattern
  - context-budget
  - continuous-agent-loop
  - continuous-learning
  - continuous-learning-v2
  - cost-aware-llm-pipeline
  - cpp-coding-standards
  - cpp-testing
  - crosspost
  - customs-trade-compliance
  - data-scraper-agent
  - database-migrations
  - deep-research
  - deployment-patterns
  - design-system
  - django-patterns
  - django-security
  - django-tdd
  - django-verification
  - dmux-workflows
  - docker-patterns
  - documentation-lookup
  - e2e-testing
  - energy-procurement
  - enterprise-agent-ops
  - error-handling
  - eval-harness
  - exa-search
  - fal-ai-media
  - flutter-dart-code-review
  - foundation-models-on-device
  - frontend-patterns
  - frontend-slides
  - fsharp-testing
  - git-workflow
  - golang-patterns
  - golang-testing
  - healthcare-cdss-patterns
  - healthcare-emr-patterns
  - healthcare-eval-harness
  - healthcare-phi-compliance
  - inventory-demand-planning
  - investor-materials
  - investor-outreach
  - iterative-retrieval
  - java-coding-standards
  - jpa-patterns
  - kotlin-coroutines-flows
  - kotlin-exposed-patterns
  - kotlin-ktor-patterns
  - kotlin-patterns
  - kotlin-testing
  - laravel-patterns
  - laravel-plugin-discovery
  - laravel-security
  - laravel-tdd
  - laravel-verification
  - liquid-glass-design
  - logistics-exception-management
  - market-research
  - mcp-server-patterns
  - motion-ui
  - nanoclaw-repl
  - nextjs-turbopack
  - nutrient-document-processing
  - nuxt4-patterns
  - perl-patterns
  - perl-security
  - perl-testing
  - plankton-code-quality
  - plan-orchestrate
  - postgres-patterns
  - product-lens
  - production-scheduling
  - prompt-optimizer
  - python-patterns
  - python-testing
  - pytorch-patterns
  - quality-nonconformance
  - quarkus-patterns
  - quarkus-security
  - quarkus-tdd
  - quarkus-verification
  - ralphinho-rfc-pipeline
  - regex-vs-llm-structured-text
  - repo-scan
  - returns-reverse-logistics
  - rules-distill
  - rust-patterns
  - rust-testing
  - safety-guard
  - santa-method
  - search-first
  - security-review
  - security-scan
  - skill-comply
  - skill-stocktake
  - springboot-patterns
  - springboot-security
  - springboot-tdd
  - springboot-verification
  - strategic-compact
  - swift-actor-persistence
  - swift-concurrency-6-2
  - swift-protocol-di-testing
  - swiftui-patterns
  - tdd-workflow
  - team-builder
  - token-budget-advisor
  - verification-loop
  - video-editing
  - videodb
  - visa-doc-translate
  - x-api
commands:
  - aside
  - auto-update
  - build-fix
  - checkpoint
  - code-review
  - cost-report
  - cpp-build
  - cpp-review
  - cpp-test
  - ecc-guide
  - evolve
  - fastapi-review
  - feature-dev
  - flutter-build
  - flutter-review
  - flutter-test
  - gan-build
  - gan-design
  - go-build
  - go-review
  - go-test
  - gradle-build
  - harness-audit
  - hookify
  - hookify-configure
  - hookify-help
  - hookify-list
  - instinct-export
  - instinct-import
  - instinct-status
  - jira
  - kotlin-build
  - kotlin-review
  - kotlin-test
  - learn
  - learn-eval
  - loop-start
  - loop-status
  - model-route
  - multi-backend
  - multi-execute
  - multi-frontend
  - multi-plan
  - multi-workflow
  - plan
  - plan-prd
  - pm2
  - projects
  - promote
  - project-init
  - pr
  - prp-commit
  - prp-implement
  - prp-plan
  - prp-pr
  - prp-prd
  - prune
  - python-review
  - quality-gate
  - refactor-clean
  - resume-session
  - review-pr
  - rust-build
  - rust-review
  - rust-test
  - santa-loop
  - save-session
  - security-scan
  - sessions
  - setup-pm
  - skill-create
  - skill-health
  - test-coverage
  - update-codemaps
  - update-docs
tags:
  - agent-harness
  - developer-tools
  - code-review
  - testing
  - security
  - cross-platform
  - gitagent