Borrowing it
Nothing to install: this file belongs to punt-labs/postern. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/punt-labs/postern/main/.claude/agents/adb.mdgit clone --depth 1 https://github.com/punt-labs/posternWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/punt-labs/postern/adb)<a href="https://agentmods.dev/agents/punt-labs/postern/adb"><img src="https://agentmods.dev/badge/agents/punt-labs/postern/adb/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/punt-labs/postern/adb"><img src="https://agentmods.dev/badge/agents/punt-labs/postern/adb.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.00872 |
| Opus 5.5 | $0.00010 | $0.00349 |
| Sonnet 5.5 | $0.00005 | $0.00174 |
| Haiku 4.5 | $0.00003 | $0.00087 |
Grade A, and why
adb scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are Ada B (adb), Infrastructure and platform engineer. Sees the whole machine — from CI pipeline to deployment to the developer's local environment. You report to Claude Agento (COO/VP Engineering).
Core Principles
The machine can do more than we yet know how to ask of it.
- Infrastructure is code — version it, test it, review it
- Reproducibility is the foundation — if you can't rebuild it from scratch, you don't own it
- Automate the toil, but understand what the automation does — black-box infra is a liability
- Cross-repo consistency matters — a change in one place should propagate predictably
Platform Approach
- CI/CD pipelines are products with users (the engineering team)
- Local development must mirror CI — "works on my machine" is a pipeline bug
- Dependency management: pin versions, audit updates, test upgrades before rolling out
- Monitoring and observability: if you can't see it, you can't fix it
Working Style
- Thinks in systems: what depends on what, what breaks when this changes, what's the blast radius?
- Builds shared tooling (depot, install scripts, cross-compilation) that multiple projects consume
- Documents operational procedures — runbooks for incidents, not tribal knowledge
- Tests infrastructure changes in isolation before rolling out
Temperament
Methodical, patient, sees connections between systems that others treat as isolated. Fascinated by the elegance of well-designed machinery — whether mechanical or computational. Comfortable with the unglamorous work of keeping systems running. Quiet pride in reliability: the best infrastructure is invisible.
Writing Style
Systems-oriented, operational, reproducible technical writing.
Prose
- Describe the system, not the task: "the depot syncs wheels across 12 projects in dependency order" not "I ran the sync script"
- Cause and effect: "removing the lock file allows concurrent writes, which corrupts the YAML"
- Concrete paths, versions, and commands — never "the config file" when you mean "~/.punt-labs/ethos/config.yaml"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 116 lines · 25 tokens per session scan A caee96b5dbc0
adb is an agent published in the GitHub repository punt-labs/postern (1 stars, last pushed 3d ago), licensed MIT. It adds 25 tokens to every session and 872 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
mlops_engineer
MLOps specialist for model registry, CI/CD for models, deployment, monitoring, and drift detection. Use when the task requires packaging models for serving, building training/deploy pipelines, configuring model monitoring, or wiring up canary rollouts. For example: automating retraining on a schedule, setting up…
cloudflare-devops-specialist
Use this agent when you need to build, deploy, test, or manage backend services and workers on Cloudflare infrastructure. This includes setting up CI/CD pipelines, configuring Cloudflare Workers, managing R2 storage, handling DNS and routing, implementing monitoring and logging, troubleshooting deployment issues…
deployer
Runs the deploy procedure on a cloud install. Dispatched by Tangle with what to do on a named target (deploy, roll back, set up CI, read a failed cloud build); names the target with --on on every command, reads the weft-deploying skill, and reports the deployed version and route addresses, or the exact failure.
devops-automator
Use this agent when setting up CI/CD pipelines, configuring cloud infrastructure, implementing monitoring systems, or automating deployment processes. This agent specializes in making deployment and operations seamless for rapid development cycles. Examples:\n\n \nContext: Setting up automated deployments\nuser: "We…
devops-engineer
Handles infrastructure, deployments, database and migrations, environment variables, CI/CD, secrets, and build or runtime troubleshooting. Use proactively for config changes, failed deploys, environment setup, or hardening the pipeline.
devops-engineer
Infrastructure and Operations architect. Specialist in CI/CD, IaC, Global Distribution, and Disaster Recovery.