Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/formin/spec-kit-harnessWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/formin/spec-kit-harness/speckit.harness.verify)<a href="https://agentmods.dev/commands/formin/spec-kit-harness/speckit.harness.verify"><img src="https://agentmods.dev/badge/commands/formin/spec-kit-harness/speckit.harness.verify.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.00985 |
| Opus 5 | $0.00009 | $0.00492 |
| Sonnet 5 | $0.00004 | $0.00197 |
| Haiku 4.5 | $0.00002 | $0.00098 |
Grade A, and why
speckit.harness.verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Claim Verification
Turn unexamined assertions into verification records. Following Harness-1 (arXiv:2606.02373), verification is part of the externalized harness state: every checked claim leaves a durable record with a verdict, a method, and an evidence pointer — so later phases (and later sessions) know what is proven, what is refuted, and what is merely assumed.
User Input
$ARGUMENTS
Optional. May name target artifacts (e.g. plan.md, spec.md,
curated) and/or specific claims to check. Default targets: the active
feature's spec.md and plan.md, plus all critical-importance entries in
curated.md that have no verification record yet.
Prerequisites
Resolve HARNESS_DIR as in /speckit.harness.init. Require an initialized
harness (budget.md present) — otherwise instruct the user to run
/speckit.harness.init and stop. Load the verification budget (Remaining in
budget.md) and existing verification.md records.
Steps
1. Extract claims
Read the target artifacts and extract load-bearing factual claims: statements about the codebase, dependencies, APIs, data, or environment that, if wrong, would change the design or break the implementation. Typical shapes: "X is handled by Y", "library Z supports W", "there is no existing implementation of V", "endpoint U returns T".
Exclude: requirements (decisions, not facts), pure opinions, and claims that
already have a verified record at high confidence in verification.md
(re-verify only if the user asks, or the underlying source changed).
Rank claims: critical curated links and architectural assumptions first.
Cap the list at the remaining verification budget; say explicitly which
claims were deferred for budget reasons.
2. Verify each claim — adversarially
For each claim, in rank order:
- Try to refute it, not confirm it. Ask: what would be true if this claim were false? Check that.
- Go to the primary source — open the actual file/API/doc at its current
state. Never accept the curated summary or the artifact's own citation as
proof;
evidence.mdtells you where to look, not what is true. - Decide the verdict:
verified— the primary source confirms it now, and your refutation attempt failed.refuted— the primary source contradicts it (record what is actually true).unverifiable— cannot be checked with available access/budget (record what would be needed). Assign confidencehigh | medium | low.
- Record a row in
verification.md(claim, method — e.g. "re-read src/auth/session.ts:40-80", verdict, confidence, evidence ID, date). Add or update theevidence.mdentry so the record has a pointer. Decrement the verification budget and append an action-log row inbudget.md. - Propagate refutations: if a curated entry is refuted, change its
importance row in
curated.mdtorefuted (see V-xxx)— do not delete it; a recorded dead end prevents re-deriving the same error later.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 94 lines · 18 tokens per session scan A a31227d46c53
speckit.harness.verify is a command published in the GitHub repository formin/spec-kit-harness (5 stars, last pushed 2mo ago), licensed MIT. It adds 18 tokens to every session and 985 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
archive
Archive a feature specification into main project memory after merge, resolving gaps and conflicts.
sddp-implement-qc-loop
Command description: Run implement and QC in a continuous loop. Argument hint: [optional: feature directory or branch name] Command category: orchestration Prerequisites: spec, plan, tasks.
sddp-checklist
Command description: Generate and evaluate a requirements quality checklist. Argument hint: [optional: quality focus or feature context] Command category: feature-delivery Prerequisites: spec, plan.
sddp-plan
Command description: Create an implementation plan from the current feature specification. Argument hint: [optional: planning constraints or focus areas] Command category: feature-delivery Prerequisites: spec.
sddp-prd
Command description: Create or refine the canonical product document. Argument hint: [rough product idea, users, domain, or market opportunity] Command category: project-bootstrap Prerequisites: none.
sddp-qc
Command description: Run quality control against the implemented feature. Argument hint: [optional: testing focus such as unit tests, security audit, requirements sync] Command category: feature-delivery Prerequisites: spec, plan, tasks, implementation:complete.