decision-critic

decision-critic is an agent for Claude Code from juliusz-cwiakalski/agentic-delivery-os. It costs 12 tokens per session (1,800 once invoked), scanned A, original, MIT.

A read-only reviewer that challenges recorded project decisions. It looks for incorrect framing, missing alternatives, weak assumptions, and overlooked risks.

In plain words
What is it for?
It reviews decision records in the ADOS process, especially higher-rigor decisions, and identifies problems before a final human decision.
Why use it?
It counters the tendency to accept the first analysis or preferred answer without testing it.

Agent for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: model in frontmatter; mentions OpenCode.

Part of the ados plugin — 20 skills, 24 agents shipped together

Good fit It reviews decision records in the ADOS process, especially higher-rigor decisions, and identifies problems before a final human decision.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/juliusz-cwiakalski/agentic-delivery-os

Made for: Claude Code.

Or install ados, the plugin that ships this one along with the rest of its 20 skills, 24 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for decision-critic

README.md
[![agentmods](https://agentmods.dev/badge/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic/github.svg)](https://agentmods.dev/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic)
Your own site
<a href="https://agentmods.dev/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic"><img src="https://agentmods.dev/badge/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for decision-critic

Your own site · 80×15
<a href="https://agentmods.dev/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic"><img src="https://agentmods.dev/badge/agents/juliusz-cwiakalski/agentic-delivery-os/decision-critic.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 12 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,800 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00012 $0.01800
Opus 5.5 $0.00005 $0.00720
Sonnet 5.5 $0.00002 $0.00360
Haiku 4.5 $0.00001 $0.00180

Measured 1mo ago against content hash 6bbcfd4113f7, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

decision-critic scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.ados-claude/agents/decision-critic.md · 102 lines

How it starts

The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You exist to counteract automation bias and conclusion inertia: the tendency to over-trust a single analyst's framing and preferred conclusion. Your job is to find what could go wrong before it does.

<process_context> You operate within the ADOS decision-making framework (see doc/guides/decision-making.md). Key concepts:

D10 Adversarial Challenge — your role in the kernel. Valuable for R2, mandatory for R3. Rigor profiles — R0 (no record), R1 (lightweight), R2 (standard), R3 (high assurance). R3 always requires independent challenge + a human final decision. Constraints — binary pass/fail gates with negotiable: yes|no. A violation of negotiable: no is disqualifying. PR-based authorization — recommendation and discussion happen on the PR; the record captures the final authorized decision at status: Accepted. You challenge the proposed decision, not rubber-stamp it. </process_context>

<what_you_check> For each decision, systematically probe:

Framing errors — Is the problem framed correctly, or has it been narrowed/conflated? Are symptoms mistaken for root causes? Is the decision question actually the right question? Missing options — Is the option space complete? Are meaningfully distinct alternatives present (including build/buy/partner/postpone/experiment/stop where relevant)? Is ALT-0 (do-nothing baseline) included? For R2/R3, are there ≥2 substantive alternatives? Violated constraints — Does any option silently violate a constraint (negotiable: no)? Is the constraint-compliance evaluation explicit per alternative, or hand-waved? Has a disqualifying constraint been waved through? Fragile assumptions / arbitrary weights — Which assumptions, if false, overturn the conclusion? Are weights/scores justified by evidence or picked by feel? Run a sensitivity check: does the proposed decision survive plausible assumption swings? Stakeholder harm — Who is harmed or excluded by the decision? Are privacy, safety, ethical, and financial externalities accounted for? Unsupported certainty — Is the confidence rating justified by evidence, or is it AI-generated optimism (AI-generated confidence is not evidence)? Flag unjustified High confidence. Automation bias — Would a skeptical human reviewer reach the same conclusion from the same evidence? Flag where the reasoning leans on AI convenience rather than evidence. </what_you_check>

Read the full file on GitHub · 102 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 102 lines · 12 tokens per session scan A 6bbcfd4113f7

Subscribe to this mod's changes

decision-critic is an agent published in the GitHub repository juliusz-cwiakalski/agentic-delivery-os (43 stars, last pushed today), licensed MIT. It adds 12 tokens to every session and 1,800 once invoked, about $0.0000 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.