Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/iliaal/whetstoneWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/iliaal/whetstone/ia-lfg)<a href="https://agentmods.dev/commands/iliaal/whetstone/ia-lfg"><img src="https://agentmods.dev/badge/commands/iliaal/whetstone/ia-lfg/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/iliaal/whetstone/ia-lfg"><img src="https://agentmods.dev/badge/commands/iliaal/whetstone/ia-lfg.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00734 |
| Opus 5 | $0.00009 | $0.00367 |
| Sonnet 5 | $0.00003 | $0.00147 |
| Haiku 4.5 | $0.00002 | $0.00073 |
Grade A, and why
ia-lfg scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 51 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Run these steps in order. Do not stop between steps -- complete every step through to the end.
Mode detection: If $ARGUMENTS contains --swarm, use swarm mode (parallel execution in steps 4-6). Otherwise run sequentially.
Arguments guard: If $ARGUMENTS is empty (no feature description and no --swarm), ask for a feature description before proceeding. Do not invoke /ia-plan with empty input.
Sequential steps
/ia-plan $ARGUMENTS(strip--swarmfrom arguments if present)/ia-deepen-plan(auto-detects latest plan indocs/plans/)
Build
/ia-work
Swarm mode: Use Task list and launch parallel agent swarm subagents to build the plan. Normal mode: Execute sequentially.
Verify (parallel in swarm mode)
/ia-review/ia-test-browser
Swarm mode: Launch steps 4 and 5 as parallel background Task agents. Wait for both to complete. Normal mode: Run sequentially.
Finalize
/ia-resolve-todo-parallel-- resolve any findings from review/ia-feature-video-- record walkthrough and add to PR
CI watch (after PR opens)
- Before polling: distinguish actionable CI failures from non-actionable gates. Run
gh pr view --json isDraft,reviewDecisionplusgh pr checks --json name,state,bucket(thebucketfield categorizesstateintopass,fail,pending,skipping, orcancel; there is noconclusionfield on this subcommand). Add--requiredto see only required checks. Classify by bucket, not vendor name:bucket: failon a required check (gh pr checks --required --json name,state,bucket) -> actionable, fix in Step 9.isDraft: truewith no checks after a grace period -> stop and reportDRAFT_PR_WITH_NO_CHECKS. Do not mark ready for review unless asked.reviewDecision: REVIEW_REQUIREDor any human-approval gate with no failing checks -> stop and reportBLOCKED_BY_REVIEW_GATE. Human review is not an actionable failure.- No checks registered after a grace period -> stop and report
NO_CHECKS_REGISTERED. bucket: skipping/cancel, orbucket: pendingon non-required checks -> do not wait. Required-status-checks (configurable viagh api repos/{owner}/{repo}/branches/{branch}/protection) are the source of truth; common examples include test/lint/build jobs and code-review bots (Sentry, Codecov, Cursor, BugBot, etc.) — treat each by its bucket, not its name.
- Poll CI for the new PR. On failure: read the job log, identify the root cause, fix, push. Cap at 3 fix iterations.
- Do NOT weaken, skip, or mock the failing assertion to make CI green -- repair the actual issue. If genuinely flaky after 3 iterations, document the residual in the PR body and stop.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 51 lines · 17 tokens per session scan A 3a1955e08a38
ia-lfg is a command published in the GitHub repository iliaal/whetstone (33 stars, last pushed 2d ago), licensed MIT. It adds 17 tokens to every session and 734 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-07.
Other commands, from other repositories
risk-log
Create or update a risk and issue log.
raci
Generate a RACI matrix for an initiative.
apollo-tasks
Create Jira tasks for Apollo GraphQL migration repositories.
update-jira
Update a Jira task with a summary of the fix implementation.
f5-implement
Implement features and fix bugs with traceability.
f5-import
Import documents - single, batch, analyze, or schema management.