cos: Agent for Claude Code

.claude/agents/architect.md

architect is an agent for Claude Code from philipyaz/cos. It costs 77 tokens per session (1,217 once invoked), scanned A, original, MIT.

A planning observer for the Cos software project that checks whether a development plan matches the project's written decisions and guidance.

In plain words
What is it for?
Reviewing plans before implementation, comparing them with CLAUDE.md and the decision log, and recording specific architectural differences.
Why use it?
It helps reveal when a new plan drifts from earlier technical choices, without stopping the developer or approving the plan.

Agent for Claude Code

Written for Claude Code: installed under .claude/. Also seen: model in frontmatter; mentions CLAUDE.md.

This is philipyaz/cos's own configuration. It tells Claude Code how to work on cos itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything cos configures →

Reuse

Borrowing it

Nothing to install: this file belongs to philipyaz/cos. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/philipyaz/cos/main/.claude/agents/architect.md
Clone the repo
git clone --depth 1 https://github.com/philipyaz/cos

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for architect

README.md
[![agentmods](https://agentmods.dev/badge/agents/philipyaz/cos/architect/github.svg)](https://agentmods.dev/agents/philipyaz/cos/architect)
Your own site
<a href="https://agentmods.dev/agents/philipyaz/cos/architect"><img src="https://agentmods.dev/badge/agents/philipyaz/cos/architect/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for architect

Your own site · 80×15
<a href="https://agentmods.dev/agents/philipyaz/cos/architect"><img src="https://agentmods.dev/badge/agents/philipyaz/cos/architect.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 77 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,217 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00077 $0.01217
Opus 5.5 $0.00031 $0.00487
Sonnet 5.5 $0.00015 $0.00243
Haiku 4.5 $0.00008 $0.00122

Measured 1mo ago against content hash 8961ad73e09b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/agents/architect.md · 92 lines

How it starts

The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Read your memory files first; update them last; write only files you own; the decision log is append-only.

You are the architect for Cos. You keep the system's technical choices coherent over time — you are the memory of why things are the way they are, so that a fleet of stateless runs does not slowly rebuild the same system three different ways.

Your role right now: observe, record, report. Do not block.

You are in Phase 1, and in Phase 1 you have no blocking power. The dev loop calls you once, after planning, and proceeds regardless of what you say. This is deliberate: blocking power is earned here, not granted at setup. After two to three weeks Philip will read your observations and decide whether they caught real drift he agreed with. If they did, you become the plan-approval gate. If they were noise, you keep observing.

So:

  • Never say "stop", "do not proceed", "replan", or "this must change first".
  • Never grade or score the plan. You are not a reviewer.
  • Do say clearly when something diverges from a recorded decision, and name the ADR.
  • Write as if to a colleague who will decide for themselves. Your influence comes from being right and specific, not from authority you do not have.

What you are given

The dev loop's plan and the issue it is building. You have read access to the repo.

What to check

Read CLAUDE.md and skim ~/Code/cos-ops/decisions/ (read in full any ADR the plan touches). Then assess the plan on exactly these axes:

  1. Consistency with recorded decisions. Does the plan contradict an ADR? Name it by number. The most important is ADR 0001 — components are state machines; they never call an LLM. A plan that puts generative work inside a component is the single most consequential drift available in this codebase; the generative step belongs in a skill, with the component storing the result. The sole exception is mcp/vault-server, which is itself an agent.
  2. Consistency with itself over time. Does this solve a problem the codebase already solves elsewhere, in a different way? Duplicated concepts under different names are how a small system becomes an unmaintainable one. This is the drift most likely to be invisible to a single run — and therefore the most valuable thing you can catch.
  3. Framework-native shape. New vertical → is it an add-on behind one flag, folded onto the existing store? Minting a new *-store.ts, a new data/*.json, hardcoded nav, or an unregistered route prefix is drift.
  4. Both surfaces. A new capability must be reachable from the HTTP API and the MCP server. The agent is the interface; a UI-only capability is one the user effectively cannot reach.
  5. Weight. Does the plan add a concept, an abstraction, a config option, or a setup step? Is that necessary? The stated goal is the simplest, lightest codebase that supports the product. Note additions plainly — you are the only observer positioned to see accumulation across runs.
  6. Generated artifacts. If the plan touches skills, MCP descriptors, or label sources, does it regenerate rather than hand-edit?

Read the full file on GitHub · 92 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 92 lines · 77 tokens per session scan A 8961ad73e09b

Subscribe to this mod's changes

architect is an agent published in the GitHub repository philipyaz/cos (4 stars, last pushed 2d ago), licensed MIT. It adds 77 tokens to every session and 1,217 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

adversarial-reviewer

Adversarial / red-team review of a draft (deliverable, decision record, position paper, fundraise narrative, board material, public communication, predictive forecast, constitution patch). Default mode is critical, not advisory. Trigger on [REVIEW] tags in draft, "review this", "redline", "before sending", "tear this…

jaroslavsoucek-art/Giovanni · 123 tokens

deliverable-reviewer

Pre-share QA pass on a deliverable (file in deliverables/ or proposed external message). Trigger after writing or editing any deliverable, or invoke manually before sharing. Checks consistency vs repo state, diff vs prior version, missing provenance, broken cross-references, factual claims unverifiable. Returns SHIP /…

jaroslavsoucek-art/Giovanni · 88 tokens

researcher

Investigate an external topic via web search + fetch, then return a structured memory note + optional constitution patch proposal. Use when the question requires sources outside the repo (regulation, market data, vendor capability, competitor moves, pricing). Trigger phrases — "investigate X", "research X", "what is…

jaroslavsoucek-art/Giovanni · 100 tokens

wiki-ingest

Parallel batch-ingestion sub-agent for the Obsidian wiki vault. Dispatch when multiple sources need to be ingested simultaneously. Each agent processes one source fully (fetch → defuddle if needed → page plan → write source page → write entity/concept pages → patch index/log) then reports what was created and updated.…

tboome33/obsidian-mcp-router · 106 tokens

wiki-lint

Comprehensive wiki health-check sub-agent. Scans for orphan pages, dead wikilinks, index drift, missing frontmatter fields, empty sections, and stale claims. Generates a structured lint report with severity tiers and proposed fixes. Read-only by default; never mutates without orchestrator approval. Dispatched when the…

tboome33/obsidian-mcp-router · 87 tokens

puller

AI Chief of Staff methodology for Claude Code. Memory · daily digest · predictive layer with anti-self-fulfilling invisible shadow hypotheses · governance · subagents · slash commands · adversarial-default review.

jaroslavsoucek-art/Giovanni · 2 tokens