Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/CATWILLgh/MAINFRAMEWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/catwillgh/mainframe/tickets-verify)<a href="https://agentmods.dev/commands/catwillgh/mainframe/tickets-verify"><img src="https://agentmods.dev/badge/commands/catwillgh/mainframe/tickets-verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/catwillgh/mainframe/tickets-verify"><img src="https://agentmods.dev/badge/commands/catwillgh/mainframe/tickets-verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01571 |
| Opus 5 | $0.00000 | $0.00785 |
| Sonnet 5 | $0.00000 | $0.00314 |
| Haiku 4.5 | $0.00000 | $0.00157 |
Grade A, and why
tickets-verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Verify implemented project tickets
This is a user-invocable command. Execute it only because the current invocation explicitly selected it. It takes no arguments: every invocation processes the complete current project queue awaiting independent verification.
Independently verify each eligible implementation, record one evidence-backed verdict, and continue until no ticket remains that this command can reliably process. Do not discover unrelated problems, repair code or tests, deploy, or perform product-wide or release acceptance during this command.
Establish the queue and authority
Resolve the current project root, its configured issue route, and the lifecycle states that represent implemented work awaiting verification, resolved work, rejected work, ready work, scope review, and decisions. Do not use another project's queue or MAINFRAME's central harness-feedback queue.
If the project has no configured issue route or verification lifecycle, return the exact missing configuration and stop without inventing one. If the queue is external, mutate it only when the current caller supplied that authority. Otherwise perform the permitted checks and return the complete ticket updates with the exact missing write action.
The invocation authorizes project inspection, safe local verification, and the ticket mutations required to record verdicts. It does not authorize changes to implementation code or tests, deployment, writes to remote or shared environments, destructive operations, material infrastructure changes, repository-history changes, commits, or pushes. Preserve the starting branch, unrelated dirty work, existing processes, and user-owned configuration.
Establish independent execution
Verify a ticket only through an execution trajectory that did not materially author, direct, or accept its implementation or regression protection. Prior implementation notes, claims, commands, and green results are leads, never independent evidence.
When the active trajectory participated in a queued ticket's implementation, do not verify or mutate that ticket from the same trajectory. Use a separate task or a genuinely independent delegated verifier when that capability is available and permitted. Give an independent verifier the ticket, current project state, authority, and required observable boundary, but do not prescribe the verdict or treat the implementer's conclusions as facts. If no independent trajectory is available, return the exact requirement and leave the ticket awaiting verification.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 82 lines · 0 tokens per session scan A e6956e2fb322
tickets-verify is a command published in the GitHub repository CATWILLgh/MAINFRAME (2 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,571 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-08.
Other commands, from other repositories
epic-validate
Validate epic readiness, dependencies, and coordination policy.
aqa-flow
Router workflow for test automation: routes to ui-aqa-flow, api-aqa-flow, or testgen-flow. Kept for backward compatibility.
qa
Systematic QA testing of a web application — diff-aware, tiered, with fix-and-verify loop.
autoresearch
Autonomous improvement loop — scan codebase metrics, scaffold experiment files, run agent-driven iterations until metric improves.
plan-eng-review
Engineering architecture gate — lock architecture, diagrams, edge cases, and test matrix before writing implementation code.
plan-execute
Execute a validated plan: worktree isolation, TDD scaffolding, level-based parallel agents, quality gate with smoke test, PR creation and merge. Handles everything through to merged PR.