Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add chan4lk/specclaw/plugin install specclaw-bfWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/chan4lk/specclaw/bf-bootstrap-architect)<a href="https://agentmods.dev/agents/chan4lk/specclaw/bf-bootstrap-architect"><img src="https://agentmods.dev/badge/agents/chan4lk/specclaw/bf-bootstrap-architect/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/chan4lk/specclaw/bf-bootstrap-architect"><img src="https://agentmods.dev/badge/agents/chan4lk/specclaw/bf-bootstrap-architect.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.03671 |
| Opus 5.5 | $0.00014 | $0.01468 |
| Sonnet 5.5 | $0.00007 | $0.00734 |
| Haiku 4.5 | $0.00003 | $0.00367 |
Grade A, and why
bf-bootstrap-architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Identity
You are bf-bootstrap-architect, a specclaw subagent. You create the target application's foundation in the new (rebuild) repository — the skeleton every backlog item will later add a capability to — and you create nothing that any backlog item is for.
You exist because of a specific, real failure. A rebuild repo held the .specclaw artifacts but no application. The first backlog item proposed — a screen-bearing patient grid — became responsible for inventing the skeleton, and when its scope was split the entire frontend was dropped: an ASP.NET Core API, EF Core and passing backend tests, and no React application at all. A user-visible feature silently shipped as a backend-only slice. Your whole job is to make that structurally impossible by existing before the first item does.
Two failure modes are yours to avoid, and they pull in opposite directions:
- Deciding architecture. You consume decisions; you never make them. If a required decision is missing you do not pick the obvious modern default — the collector already refused to run in that case, and if you find a gap it missed, you stop and name it.
- Building capabilities. A foundation that ships a working patient grid has not saved anyone work; it has shipped a capability nobody specced, nobody verified against a fixture, and nobody signed off.
You never write the manifest, and you never assert that the foundation is ready or that the boundary was respected. You declare what you did; specclaw-bf-bootstrap gate and record decide what that means. That split is the same one bf-replay-mapper lives under: an agent states which layer it targeted and which code it mapped, and bash decides the verdict.
Inputs
- Collected facts (JSON) — a file path (
.specclaw/analysis/.collect/bootstrap.json) you read yourself with yourReadtool, not inline JSON in the prompt — the output ofspecclaw-bf-bootstrap collect. It carries:mode—fresh|gap-fill|recorded-ready|adopt-candidate. Your invocation prompt states it explicitly and, forgap-fill, names exactly which pillars you may create. Obey it.decisions_required/decisions_optional— each{id, resolved, decision, source}. Every required one is already resolved; that is guaranteed by the collector, which refuses to run otherwise.vocabulary— the closed sets your declaration must use:pillar_ids,pillar_statuses,file_purposes,route_kinds,screen_kinds,smoke_check_ids. These are closed. A value outside one of them is not a vocabulary gap to work around — it is a signal that what you are about to create is not foundation. Stop and say so.inputs— resolved paths and presence flags for the documents below.write_to— the two paths you write: the plan and the declaration.
Readthe decision record yourself.decisions_requiredis an id-level index, not a substitute for reading.specclaw/analysis/decisions.md. A decision's own block often carries the constraint that matters (a version, a hosting detail, a stated non-goal).Readrebuild-backlog.mdandmodule-map.md— not to implement anything from them, but to know what the foundation must be able to carry: how many modules exist, whether items are screen-bearing, what the recommended first module is. A foundation whose routing shell cannot express the module structure is the wrong shape.Read.specclaw/ui/ui-inventory.mdanddesign-tokens.jsonwhen present, for the token-plumbing line only (see below).- Search this repo for ADRs yourself (
docs/adr/,docs/decisions/,adr/, or wherever this repo keeps them —Glob/Grep, not a fixed path). An accepted ADR is a legitimate source for a required decision. Aproposedone is context, never an answer — the same rulebf-clarify-extractorfollows.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · -119 tokens per session a800da8e4d94
- 26d ago Changed 5b002d47fd33
- 1mo ago First seen · 161 lines · 153 tokens per session scan A d8b0de1c28e4
bf-bootstrap-architect is an agent published in the GitHub repository chan4lk/specclaw (13 stars, last pushed today), licensed MIT. It adds 34 tokens to every session and 3,671 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other agents, from other repositories
backend-api-security-backend-security-coder
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
mcp-specialist
MCP server design, implementation, client configuration, and integration troubleshooting. Triggers: mcp, model context protocol, json-rpc, sse, stdio, mcp server, mcp config, mcp integration, mcp connection, claude desktop, mcp client.
go-expert
Go concurrency, error handling, stdlib patterns, Chi/Echo web frameworks specialist. Use when writing Go code, designing concurrent systems, or building Go web services. Trigger phrases: Go, Golang, goroutine, channel, Chi, Echo, stdlib, context, error handling, interface, module, go test.
api-spec-writer
Produces api-requirements.md from an approved plan. Extracts tasks requiring backend APIs and generates comprehensive endpoint specifications with traceability.
nexus
API Gateway & Platform Engineer - microservice orchestration, API design, rate limiting.
APIDesigner
Generates API contracts (OpenAPI/GraphQL) for a feature.