agent-interface

A shared interface contract for agent definitions. It specifies the sections agents must provide and the status values they use when handing work to another agent.

In plain words
What is it for?
Use it when defining or checking agents that need clear inputs, outputs, completion criteria, handoffs, and failure states.
Why use it?
It makes agent outputs consistent and makes uncertainty, missing input, and incomplete work visible. Each handoff also records decisions and what should happen next.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/leo-maomao/pm-copilot/agent-interface
Clone the repo
git clone --depth 1 https://github.com/Leo-maomao/pm-copilot
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 982 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00982
Opus 5 $0.00000 $0.00491
Sonnet 5 $0.00000 $0.00196
Haiku 4.5 $0.00000 $0.00098

Measured 2d ago against content hash 84de5eeacf1a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

agent-interface scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/agent-interface.md · 114 lines

How it starts

The opening of the file, as written. The whole thing — 114 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent Interface Contract

Every agent definition in this repository follows the same interface.

Required Sections

  • Purpose
  • Responsibilities
  • Inputs
  • Outputs
  • Completion Criteria
  • Handoffs
  • Failover, when applicable

Output Rules

  • Always distinguish facts, assumptions, and open questions.
  • Never hide uncertainty.
  • Return product judgment, not only files. Each agent should explain what it decided, why, what alternatives were rejected, and what should happen next.
  • When an agent cannot complete a task, return the closest lower-fidelity artifact plus a limitation note.
  • Preserve upstream decisions unless there is a clear contradiction.
  • Use a stable output status on every handoff:
    • complete: the agent met its completion criteria.
    • needs_input: required human input blocks the next workflow state.
    • blocked: required context, approval, or tooling is missing and no lower-fidelity artifact is safe.
    • degraded: a lower-fidelity artifact was produced with an explicit limitation.
    • failed: the agent could not produce a usable output.
  • Do not mark an output complete when required fields are unknown, validation placeholders remain, or the next agent would need to reverse-engineer missing context.
  • Use stable machine codes in traces and localized human-facing wording in PRDs and UI deliverables.

Runtime Protocol

Every agent response or internal handoff should be treated as an output envelope:

agent:
status: complete # complete | needs_input | blocked | degraded | failed
confidence: "" # high | medium | low
facts:
assumptions:
open_questions:
decisions:
alternatives:
artifact_delta:
validation_delta:
risks:
next_actions:
action_closure:
handoff:

Rules:

  • facts must cite the source path, user answer, or tool result when available.
  • assumptions must include reason and risk. They are not facts.
  • open_questions must use exactly one clarification classification from the workflow.
  • artifact_delta must list files created, files changed, or explicitly state none.
  • validation_delta must list commands run, skipped, or required later. Do not use vague placeholders.
  • decisions must include evidence and tradeoffs for product-relevant choices.
  • alternatives must note rejected paths when the choice affects scope, artifact mode, readiness, user experience, analytics, or launch.
  • next_actions must identify the smallest useful follow-up for product, design, engineering, QA, analytics, launch, or memory.
  • action_closure must turn the selected decision or blocker into an accountable critical path with owner, due phase, completion evidence, and status.
  • Specialist agents may recommend readiness, but PM Orchestrator owns the final PRD, engineering handoff, and launch readiness fields.
  • When two agents disagree, keep both positions visible and route the conflict to PM Orchestrator or Review Agent before final delivery.

Read the full file on GitHub · 114 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 114 lines · 0 tokens per session scan A 84de5eeacf1a

Subscribe to this mod's changes

agent-interface is an agent published in the GitHub repository Leo-maomao/pm-copilot (4 stars, last pushed 5d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 982 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

arbiter

Strong-tier, different-family, adversarial, ACTING judge with FINAL veto on holistic acceptance. Unlike the lightweight phase-validator (which reads a HANDOFF and checks exit-condition prose), the arbiter re-runs the objective gates itself (typecheck, tests, lint, the phase's command conditions) and judges holistic…

SethGammon/Citadel · 132 tokens

archon

Autonomous vision agent. Decomposes vague or specific direction into campaign phases. Delegates to Marshals and specialists. Reviews output against quality standards. Maintains campaign state across invocations. Does not write code — orchestrates those who do.

SethGammon/Citadel · 52 tokens

implementer

PlanGate exec フェーズのタスク実装エージェント。workflow-conductor から委譲されたタスクを TDD で実装し、完了報告する。タスクごとに新規起動される使い捨てエージェント。.

s977043/PlanGate · 66 tokens

orchestrator

PlanGate × Workflow/Skill/Agent ハイブリッドアーキテクチャの実行層総責任者。WF-01〜WF-05 の phase 遷移を制御し、各 phase の完了条件判定・Agent への委譲・handoff 発行を行う。汎用マルチエージェント調整も兼ねる。.

s977043/PlanGate · 90 tokens

graph-planner

Analyze a coding request and design an executable dependency graph. Read-only.

gwaghmar/graph · 18 tokens

ss-reviewer

Independent code reviewer for the specship review stage — one member of the opt-in review panel. Use to get fresh, context-free eyes on a working diff, optionally through a named lens (correctness, security, performance, contract-consistency). Reports findings only; it does not fix code, decide the verdict, or touch…

bonnguyenitc/specship · 72 tokens