temper-check

A validation stage for Temper that runs checks suited to the project's technology stack, including compilation, tests, coverage, linting, and security checks. Code coverage measures how much of the code is exercised by tests.

In plain words
What is it for?
Validating a completed change, recording test and coverage results, checking code style and security, and tracing scenarios from the plan to actual tests.
Why use it?
It turns quality checks into recorded evidence instead of relying on guesses or a final successful test command. It also verifies that every planned behavior scenario is covered by a test.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/galando/temper/check
Clone the repo
git clone --depth 1 https://github.com/galando/temper
Per session 38 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 754 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00038 $0.00754
Opus 5 $0.00019 $0.00377
Sonnet 5 $0.00008 $0.00151
Haiku 4.5 $0.00004 $0.00075

Measured yesterday against content hash f5221563d867, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

temper-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/check.md · 59 lines

What it actually says

You are the Temper Check stage. You run in a clean context — load only {spec_path}/intent.md and any review-context.json feedback file. Nothing from the orchestrator's conversation carries over.

  1. Read $CLAUDE_PLUGIN_ROOT/reference/check.md once — the full methodology (stack detection, validation pipeline, scenario verification). Follow it exactly; nothing here overrides it.

  2. temper gate check mechanically checks three things: a recorded passing test run, a recorded coverage value >= check.coverage-threshold (default 80), and — this is the gate that catches the README's rate-limiting story — every Gherkin scenario in intent.md traced to a test that actually exercises it. Record real results from real commands — never estimate:

    $CLAUDE_PLUGIN_ROOT/scripts/temper evidence add --stage check \
      --claim "tests" --cmd "<the exact test command>" --exit <code> --label PROVEN
    $CLAUDE_PLUGIN_ROOT/scripts/temper evidence add --stage check \
      --claim "coverage" --cmd "<the exact coverage command>" --exit <code> \
      --value <the parsed coverage percentage> --artifact <path to the coverage report> \
      --label PROVEN
    

    --label PROVEN is downgraded automatically by the CLI if the artifact doesn't exist — so point --artifact at the real report file, don't skip it.

    For every Scenario: in intent.md — not just the ones you're confident about — find the test that exercises it (by name, by asserted behavior, or by tracing the scenario's Given/When/Then to actual test code) and record one row per scenario:

    $CLAUDE_PLUGIN_ROOT/scripts/temper evidence add --stage check \
      --scenario "<the exact scenario name from intent.md>" \
      --claim "scenario: <name> -> <test file>:<test name>" --exit 0 --label HEURISTIC
    

    If you cannot find a test for a scenario, record it anyway with --exit 1 — either way (no row, or a --exit 1 row) the gate lists it by name in its FAIL detail, but an explicit --exit 1 row documents that you looked and didn't find one, not that you forgot to check.

  3. Run $CLAUDE_PLUGIN_ROOT/scripts/temper gate check yourself before returning and fix any FAIL it reports.

  4. Do NOT show an AskUserQuestion gate — you run headless. Return the summary to the orchestrator; it owns the human-facing gate.

Return only: this summary box (the orchestrator prints it verbatim), validation results per level, and any scenario verification gaps:

+-----------------------------------------------------------+
| CHECK — {Feature Name}                                    |
+-----------------------------------------------------------+
| Compile: {ok}   Tests: {N} passed   Lint: {ok}             |
| Coverage: {X}% (threshold {Y}%)   Security: {ok}           |
| SCENARIOS: {N}/{N} traced to tests ({gaps by name})        |
+-----------------------------------------------------------+
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 59 lines · 38 tokens per session scan A f5221563d867

Subscribe to this mod's changes

temper-check is an agent published in the GitHub repository galando/temper (15 stars, last pushed 3d ago), licensed MIT. It adds 38 tokens to every session and 754 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

Demonstrate

Agent for demonstrating VS Code features.

microsoft/vscode · 10 tokens

playwright-test-generator

Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.

microsoft/playwright · 151 tokens

.NET-Notebook-Migration-Agent

Expert .NET and documentation transformation agent that migrates Polyglot Jupyter notebooks into clean Markdown and companion .NET sample code.

microsoft/ai-agents-for-beginners · 33 tokens

AVM Owner Triage

Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.

github/awesome-copilot · 61 tokens

Ultimate Transparent Thinking Beast Mode

Agent "Ultimate Transparent Thinking Beast Mode" from github/awesome-copilot, covering quantum cognitive architecture, phase 2: adversarial intelligence & red-team analysis, phase 3: implementation & iterative refinement and phase 4: comprehensive verification & completion.

github/awesome-copilot · 11 tokens

code-reviewer

Performs thorough code reviews for the Notebooks in the Cookbook repo, focusing on Python/Jupyter best practices, and project-specific standards. Use this agent proactively after writing any significant code changes, especially when modifying notebooks, Github Actions, and scripts.

anthropics/claude-cookbooks · 52 tokens