speckit.boundedrelay.route

speckit.boundedrelay.route is a command for Claude Code from mohammad19974/bounded-relay. It costs 11 tokens per session (726 once invoked), scanned A, original, MIT.

A command that assigns approved coding tasks to available providers based on estimated effort and project constraints. A provider is the coding system chosen to handle a task, and the command records the assignments in a run-specific routing file.

In plain words
What is it for?
Use it to route pending tasks from an approved task list, set effort estimates and write boundaries, choose eligible providers, and save the verified routing plan for execution.
Why use it?
It prevents completed or unapproved tasks from being routed and checks dependencies, safety rules, capabilities, and overlapping file ownership before balancing the work. It also preserves the routing response and its version checks.

Command for Claude Code

Written for Claude Code: $ARGUMENTS substitution. Also seen: mentions Claude Code; mentions Codex.

Good fit Use it to route pending tasks from an approved task list, set effort estimates and write boundaries, choose eligible providers, and save the verified routing plan for execution.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/mohammad19974/bounded-relay/speckit.boundedrelay.route
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/mohammad19974/bounded-relay

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for speckit.boundedrelay.route

README.md
[![agentmods](https://agentmods.dev/badge/commands/mohammad19974/bounded-relay/speckit.boundedrelay.route.svg)](https://agentmods.dev/commands/mohammad19974/bounded-relay/speckit.boundedrelay.route)
Your own site
<a href="https://agentmods.dev/commands/mohammad19974/bounded-relay/speckit.boundedrelay.route"><img src="https://agentmods.dev/badge/commands/mohammad19974/bounded-relay/speckit.boundedrelay.route.svg" alt="Measured on agentmods" height="20"></a>
Per session 11 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 726 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00011 $0.00726
Opus 5 $0.00005 $0.00363
Sonnet 5 $0.00002 $0.00145
Haiku 4.5 $0.00001 $0.00073

Measured 7d ago against content hash 90ee9a21a940, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

speckit.boundedrelay.route scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

integrations/spec-kit/extension/commands/speckit.boundedrelay.route.md · 58 lines

What it actually says

Route Approved Work

Read the active artifacts and pending routing.json named in $ARGUMENTS. This operation writes only that run-local evidence file.

  1. Read the engine-generated taskManifest first. It is derived from the exact committed tasks.md checkbox IDs at the routing revision and is already content-addressed. Build the normalized codex_worker_sdd_route request for every ID in taskManifest.pendingTaskIds, in that exact canonical order, exactly once. Never omit a pending ID, invent an ID, or route a completed ID. Add integer effort points, dependency IDs, authority, kind, bounded repository-relative write scopes, lane eligibility, and risk for each task.
  2. Resolve capability, safety, dependency, and path ownership constraints before balancing. Never assign overlapping writer scopes.
  3. Call codex_worker_sdd_route with neutralCodexShareBps (default 5000). This is a soft tie-break for fit-neutral tasks, never a provider quota. Persist its full schema-versioned response, including routingPolicyVersion and planFingerprint. Do not invent, manually alter, or fall back from the returned assignments. The engine independently verifies that fingerprint and exact manifest coverage. The target is estimated effort, never a cost or token claim.
  4. When pending evidence has a non-null projectProfile, read its exact sealed path and include the parsed JSON unchanged as request.projectProfile. Persist only the authoritative schema-v2 / sdd-routing-v3 result. Exact match executorId, capability requirements and eligibility, requiredCheckProfiles, and codexPolicy into each workflow assignment, and project the plan-level crossReviewPolicy exactly once. Never execute, interpolate, or shell-evaluate any check-profile argv; it is inert policy data. The profile may only restrict the routed write scopes, and its own path must not overlap a writer lease.
  5. A Claude assignment uses { "source": "host-selected", "model": null }. Do not override the Claude Code host model.
  6. A profiled Codex implementation or cross-review uses the exact model and reasoning effort returned in codexPolicy; a non-profiled Codex assignment uses server-allowlisted policy. For a profiled critical task, require the exact explicit non-null model and effort from codexPolicy.byRisk.critical and the authoritative plan-level cross-review policy; both remain subject to the server allowlist. A legacy no-profile critical route keeps the fixed gpt-5.6-sol / ultra lane. If the required lane is unavailable, leave routing incomplete and report the blocker; never silently downgrade it.
  7. Project the returned lanes into the workflow assignments, add only coordinator policy metadata not owned by the router, set totals from the real assignments, and atomically replace the evidence with state: complete. Each write task may require at most 64 checks; reject the route before execution if all write assignments together require more than 256 receipts.

Do not start workers, edit implementation files, install dependencies, commit, push, or deploy.

$ARGUMENTS
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 58 lines · 11 tokens per session scan A 90ee9a21a940

Subscribe to this mod's changes

speckit.boundedrelay.route is a command published in the GitHub repository mohammad19974/bounded-relay (1 stars, last pushed 5d ago), licensed MIT. It adds 11 tokens to every session and 726 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.