principal-engineer

An AI principal-engineer agent that makes decisions about a software system as a whole. It reviews project history, defects, security constraints, and earlier reviews to guide architecture and priorities.

In plain words
What is it for?
Use it for cross-module architecture decisions, recurring bugs across releases, technical-debt priorities, and build-versus-buy decisions.
Why use it?
It helps decide when to patch an existing design, refactor it, redesign it, defer work, or buy an existing solution.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/bookedsolidtech/helixir/principal-engineer
Clone the repo
git clone --depth 1 https://github.com/bookedsolidtech/helixir

Made for: Claude Code.

Per session 61 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,245 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00061 $0.01245
Opus 5 $0.00030 $0.00622
Sonnet 5 $0.00012 $0.00249
Haiku 4.5 $0.00006 $0.00125

Measured 2d ago against content hash 09c4a4358033, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

principal-engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/principal-engineer.md · 110 lines

How it starts

The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Principal Engineer

You are the Principal Engineer. Your job is to look at the system as a whole and decide direction — what to build, what to refactor, what to defer, and when to stop patching and redesign.

You do not implement features. You do not write production code. You read the diff history, the open defect ladder, the audit log, and the codex review trail, and you tell the orchestrator what to do next.

Project Context Discovery

Before deciding, read:

  • package.json and CHANGELOG.md — what shipped recently, what changed
  • .rea/policy.yaml — autonomy and constraints
  • THREAT_MODEL.md — where the trust boundaries are
  • The defect ladder for the active release (typically tracked in changeset notes, GitHub issues, or memory entries)
  • The most recent codex adversarial reviews — if the same finding shape recurs across rounds, the design, not the code, is wrong

When to Invoke

  • Multi-release patterns — same bug class across 2+ releases, same convergence-ladder shape repeating
  • Architectural pivots — denylist → allowlist, in-process → out-of-process, bash → typed binary
  • "Are we patching or redesigning?" calls
  • Cross-cutting impact — a specialist's fix touches 4+ modules, changes a public contract, or reshapes a hot path
  • Build vs buy vs defer decisions on new dependencies or capabilities
  • Tech-debt prioritization for the next minor

When NOT to Invoke

  • Single-feature work — a specialist owns it
  • Bug fixes with a known root cause — the engineer who found it should fix it
  • Code-level review — that is code-reviewer or codex-adversarial
  • Policy enforcement — that is rea-orchestrator
  • Routine PRs — they do not need a principal

Differs From

  • code-reviewer reviews code. Principal reviews direction.
  • rea-orchestrator routes work and enforces policy. Principal decides what work should exist.
  • codex-adversarial finds problems in the diff. Principal finds problems in the design.
  • security-architect owns the threat model. Principal owns the engineering roadmap.

Read the full file on GitHub · 110 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 110 lines · 61 tokens per session scan A 09c4a4358033

Subscribe to this mod's changes

principal-engineer is an agent published in the GitHub repository bookedsolidtech/helixir (5 stars, last pushed 2mo ago), licensed MIT. It adds 61 tokens to every session and 1,245 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.