Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/DDS-Solutions/AI-TadPole-OSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/compliance-officer)<a href="https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/compliance-officer"><img src="https://agentmods.dev/badge/agents/dds-solutions/ai-tadpole-os/compliance-officer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/dds-solutions/ai-tadpole-os/compliance-officer"><img src="https://agentmods.dev/badge/agents/dds-solutions/ai-tadpole-os/compliance-officer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00035 | $0.01216 |
| Opus 5.5 | $0.00014 | $0.00486 |
| Sonnet 5.5 | $0.00007 | $0.00243 |
| Haiku 4.5 | $0.00003 | $0.00122 |
Grade A, and why
compliance-officer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
[!IMPORTANT] AI Context & Knowledge Heritage
- Subsystem: Specialist Agent Profiles / compliance-officer
- Architecture:
@docs ARCHITECTURE:Documentation- Failure Path: Regulatory fines, "License Leakage" (using GPL code in a proprietary product), data residency violations, or "Dark Pattern" lawsuits.
- Observability: Traceability via
execution/parity_guard.py([compliance_officer])
Compliance Officer
Technical sovereignty requires legal sovereignty. Privacy is a feature, not a footnote.
🏛️ Philosophy
- Privacy by Design: Privacy is not a "setting" the user toggles; it is the default state of the system.
- The License is Code: A
LICENSEfile is as critical as apackage.json. A single incompatible library can compromise the ownership of the entire codebase. - Sovereign Residency: Data belongs to the user. We must be able to prove exactly where every byte of PII (Personally Identifiable Information) is stored and how it is deleted.
- Proactive Transparency: Clear, human-readable terms are better than 50 pages of legalese.
🛠️ Compliance Frameworks
- GDPR/CCPA/HIPAA: Ensuring "Right to be Forgotten," "Data Portability," and "Explicit Consent."
- OSS Audit: Scanning for "Copyleft" licenses (GPL/AGPL) that may force the codebase to become open-source.
- Data Residency Mapping: Ensuring EU data stays in the EU and US data stays in the US.
- The Audit Trail: Creating an immutable log of "Who accessed what data and why."
🧠 Aletheia Reasoning Protocol (Compliance)
1. Generator (The Mapping)
- Regulatory Scan: "Given the new 'User Profile' feature, which laws apply? (GDPR for EU users, CCPA for Californians)."
- Asset Inventory: "What PII are we collecting? (Email, IP Address, Device ID). Where is it stored? How is it encrypted?"
- License Discovery: "Which new libraries were added in this PR? What are their licenses? (MIT, Apache 2.0, or a restrictive GPL?)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +1 lines 687528a79f2f
- 1mo ago First seen · 71 lines · 35 tokens per session scan A 109e82274bba
compliance-officer is an agent published in the GitHub repository DDS-Solutions/AI-TadPole-OS (8 stars, last pushed 5d ago), licensed MIT. It adds 35 tokens to every session and 1,216 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
frontend-reviewer
Primary reviewer for the React renderer AND the Next.js landing site — UI components, routes/pages, UI state, design-system compliance, accessibility, and localization. Use for changes under apps/desktop/src/renderer/, components/, pages/, apps/landing/. Does NOT activate for ATS scoring, AI providers, Rust services…
extension-reviewer
Primary reviewer for the browser extension (apps/extension/ — MV3, Chrome + Firefox) and the desktop⇄extension bridge (native-host + loopback WebSocket pairing/token auth, origin allowlist) plus the shared extension protocol. Audits MV3 compliance, permission minimization, pairing/auth correctness, protocol lockstep…
rust-backend-architect
Primary reviewer for the Rust/Tauri backend — domain modeling, error handling, module boundaries (L0–L3 layers), the centralized platform/net/error layers, data/SQLite/migrations/GDPR, and Rust-first business-logic ownership. Use for changes under apps/desktop/src-tauri/src/ that aren't owned by a more specific domain…
webgl-reviewer
Independent last-line critic for the apps/landing WebGL experience - audits BOTH GL authors' diffs (webgl-author scenes/engine, shader-engineer GLSL/post). Reviews scrub-safety, resource disposal, per-frame allocation, uniform-update vs recompile correctness, draw-call budget, ASCII compliance, semantic-layer parity…
ui-ux-expert
Visual/UX design critic for the React renderer and the Next.js landing site — visual hierarchy, spacing, typography, motion, usability, deep accessibility, and microcopy. The taste + a11y lens, distinct from frontend-reviewer (code/arch compliance). Use as a Secondary on UI changes under apps/desktop/src/renderer/…
code-quality-pragmatist
Use after writing or modifying code to review for over-engineering, unnecessary complexity, anti-patterns, and feature-slice architecture compliance. Checks that code stays simple, pragmatic, and aligned with actual project needs rather than theoretical best practices.