Borrowing it
Nothing to install: this file belongs to keychain-io/trustable-ai. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/keychain-io/trustable-ai/main/.claude/commands/sprint-review-enforced.mdgit clone --depth 1 https://github.com/keychain-io/trustable-aiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/keychain-io/trustable-ai/sprint-review-enforced)<a href="https://agentmods.dev/commands/keychain-io/trustable-ai/sprint-review-enforced"><img src="https://agentmods.dev/badge/commands/keychain-io/trustable-ai/sprint-review-enforced/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/keychain-io/trustable-ai/sprint-review-enforced"><img src="https://agentmods.dev/badge/commands/keychain-io/trustable-ai/sprint-review-enforced.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.00334 |
| Opus 5 | $0.00007 | $0.00167 |
| Sonnet 5 | $0.00003 | $0.00067 |
| Haiku 4.5 | $0.00001 | $0.00033 |
Grade A, and why
sprint-review-enforced scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Sprint Review - External Enforcement Mode
I will execute the sprint review workflow with external enforcement to guarantee compliance.
What This Means
The Problem: AI agents (including me) are unreliable when given workflow instructions:
- I skip steps to optimize for goals
- I bypass approval gates
- I claim completion without verification
- More explicit instructions don't help (I optimize for outcomes, not procedures)
The Solution: External enforcement script that:
- ✅ Controls execution flow (not AI)
- ✅ Verifies each step externally before proceeding
- ✅ Blocks on approval gates (Python
input()halts until you respond) - ✅ Creates comprehensive audit trail
- ✅ Makes it impossible for AI to skip steps or bypass gates
Execution
I'm now executing the external enforcement script. You'll see:
- Each workflow step executed in order
- External verification of each step
- Blocking approval gate where you must type "yes" or "no"
- Complete audit trail saved to
.claude/workflow-state/
IMPORTANT: When you see the approval prompt, you must type your response directly in the terminal. The script will wait for your input - this is a genuine blocking gate that I cannot bypass.
python3 .claude/skills/workflow_executor/sprint_review_enforced.py --sprint "{{sprint_name}}" --interactive
This demonstrates the breakthrough design: Combining Claude's reasoning with external enforcement creates reliable, trustworthy AI-assisted development.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 39 lines · 14 tokens per session scan A 07d58f5f3c71
sprint-review-enforced is a command published in the GitHub repository keychain-io/trustable-ai (2 stars, last pushed 7mo ago), licensed MIT. It adds 14 tokens to every session and 334 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
standup
Quick daily standup from today's Claude Code sessions — grouped by project, with cost and errors.
fire-todos
Capture, list, and manage todos during work sessions.
gsd:resume-work
Resume work from previous session with full context restoration.
todo.template
This prompt was authored for Claude-style slash workflows. In Codex runtime, adapt tool calls as follows.
standup
A command that creates a daily stand-up report by summarizing recent work, planned tasks, calendar events, and blockers.
ops
Weekly operations loop — triage the inquiry inbox, advance the CRM pipeline, sweep open PRs across repos, and surface the content plan. Loads the ops skill.