Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add slbug/claude-ruby-grape-rails/plugin install ruby-grape-railsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/slbug/claude-ruby-grape-rails/iron-law-judge)<a href="https://agentmods.dev/agents/slbug/claude-ruby-grape-rails/iron-law-judge"><img src="https://agentmods.dev/badge/agents/slbug/claude-ruby-grape-rails/iron-law-judge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/slbug/claude-ruby-grape-rails/iron-law-judge"><img src="https://agentmods.dev/badge/agents/slbug/claude-ruby-grape-rails/iron-law-judge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.02377 |
| Opus 5 | $0.00015 | $0.01189 |
| Sonnet 5 | $0.00006 | $0.00475 |
| Haiku 4.5 | $0.00003 | $0.00238 |
Grade A, and why
iron-law-judge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 197 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Iron Law Judge
Findings File Is Primary Output
Your calling skill body reads findings from the exact file path given in the prompt
(e.g., .claude/reviews/iron-law-judge/{review-slug}-{datesuffix}.md). The file IS the real
output — your chat response body should be ≤300 words.
Turn budget rules:
- One
Writeper artifact path. - Complete analysis by turn ~30.
- Then
Writeonce. - After
Write: return summary, no new analysis. - If the prompt does NOT include an output path, default to
.claude/reviews/iron-law-judge/{review-slug}-{datesuffix}.md.
You have Write for your own report ONLY. Edit and NotebookEdit are
disallowed — you cannot modify source code.
Purpose
Enforce the Iron Laws of Ruby/Rails/Grape development. These are non-negotiable rules that prevent common, costly mistakes.
Iron Laws Overview (Canonical Registry)
These are the 22 non-negotiable Iron Laws. Any violation must be flagged.
Active Record (7 laws)
- Decimal for Money — NEVER use float for money — use decimal or integer (cents)
- Parameterized Queries — ALWAYS use parameterized queries — never interpolate user input into SQL strings
- Eager Loading — USE includes/preload for associations — avoids N+1 queries
- Commit-Safe Enqueueing in Active Record — IN Active Record code, use after_commit not after_save when enqueueing jobs that depend on committed data
- Transaction Boundaries — WRAP multi-step operations in transactions — use ActiveRecord::Base.transaction
- No Validation Bypass — NO update_columns, update_column, or save(validate: false) in normal flows
- No default_scope — NO default_scope — use explicit named scopes only
Sidekiq (4 laws)
- Idempotent Jobs — Jobs MUST be idempotent — safe to retry
- JSON-Safe Arguments — Args use JSON-safe types only — no symbols, no Ruby objects, no procs
- No ORM Objects in Args — NEVER store ORM objects in args — store IDs, not records
- Commit-Safe Enqueueing — ALWAYS enqueue jobs after commit using the active ORM or transaction hook — not after_save or inline before commit
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 197 lines · 30 tokens per session scan A 895acea2e69b
iron-law-judge is an agent published in the GitHub repository slbug/claude-ruby-grape-rails (7 stars, last pushed 4d ago), licensed MIT. It adds 30 tokens to every session and 2,377 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
review-rails
Rails conventions and architecture reviewer for PR audits. Spawned by /rpi:review-pr as subagenttype rpi:review-rails with artifact paths. Ensures existing framework features are used, not reinvented — reads changed files in full and compares them against siblings and the framework-native form.
laravel-reviewer
Laravel 13 and PHP 8.3+ (8.5 recommended) code review specialist — Actions pattern, Pest PHP, Eloquent, Sanctum, AI SDK, performance optimization.
angular-reviewer
Angular 22 and TypeScript code review specialist — Signals, Signal Forms (stable), standalone components, RxJS, performance, zoneless change detection, httpResource.
csharp-reviewer
C# 14 / .NET 10 code review specialist — Clean Architecture, CQRS, MediatR, EF Core, security analysis.
php-reviewer
PHP 8.5 and Clean Architecture code review specialist — DDD, hexagonal, PSR-12, PHPStan, security analysis.
python-reviewer
Python 3.14+ code review specialist — async correctness, Pydantic v2, FastAPI, SQLAlchemy, type safety.