Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/openplanr/planr-pipelineWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/openplanr/planr-pipeline/operate)<a href="https://agentmods.dev/commands/openplanr/planr-pipeline/operate"><img src="https://agentmods.dev/badge/commands/openplanr/planr-pipeline/operate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/openplanr/planr-pipeline/operate"><img src="https://agentmods.dev/badge/commands/openplanr/planr-pipeline/operate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00018 | $0.01331 |
| Opus 5.5 | $0.00007 | $0.00532 |
| Sonnet 5.5 | $0.00004 | $0.00266 |
| Haiku 4.5 | $0.00002 | $0.00133 |
Grade A, and why
operate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 84 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenPlanr Operate — Claude Code-native workflow
Run the full workflow for the user. They do not write an orchestration prompt or run lifecycle commands. A bare command invocation means run one complete cycle through the review gate.
- Run
planr operate inspect --json. - Bind the cycle to
claude-code; never invoke Codex or Cursor. - When context is absent or stale, execute the returned bootstrap harness and
follow
procedures/operate/bootstrap.md. Research the workspace before asking questions. Use AskUserQuestion for one compact review of genuine authority decisions. Never dump a questionnaire. - Preview and start one cycle, then follow only current
handoff.next[].argv. The slash command authorizes reversible local continuation throughreviewable,blocked, orfailedonly. - Dispatch the independent
operating-<role>agents with their v1.4 mandates andprocedures/operate/advisor.md, preferably in parallel. Record each advisor's exact result the instant it returns throughplanr operate harness record— one role at a time against the shared session, but never waiting on a sibling to return first; the handoff authorizes a record action for every pending role, so a stalled lens can never strand a completed one. Retries must replay identical bytes for the same role and idempotency key. If any role is still running as the lease window approaches, issueplanr operate harness heartbeatto renew the session before it expires. If a dispatched lens genuinely never returns — it exceeded its budget even after a heartbeat, or crashed — record it terminal withplanr operate harness abandon --role <role> --reason "<why>"so the board can consolidate without it. That lens is markednot_evaluatedwith your reason, its recorded siblings are untouched, and the Chair names it as an explicit gap it must not synthesize around. Never fabricate a result for a lens that did not return; abandon it honestly instead. - Dispatch Chair with
procedures/operate/chair.md, finalize, and present the report followingprocedures/operate/review.md. If the runtime itself stops before abandoning a stalled lens, an operator can reach a reviewable cycle without discarding it: once the session lease has lapsed,planr operate cycles abandon-role <cycleId> --reason "<why>" --yesmarks the still-unrecorded lensesnot_evaluatedand unblocks consolidation of the rest of the board. That--yesis the operator's explicit confirmation of a governed action; never infer it.
Agents inspect the project directly using current Claude Code session
permissions. Planr grants no permissions and sends no repository JSON body.
Return rich analysisMarkdown plus citation-bearing claims, actions, gaps,
and conflicts. Uncited opinion cannot create work.
Local research is automatic. Connected research requires a per-cycle preview and explicit consent. Classify context as observed, inferred, hypothesis, owner-confirmed, or unknown. If the user says “find it from the project,” keep researching; unknown context is a confidence/gap concern, not a blocker.
The binding remains runtime: claude-code, runtimeBinding: required, and
crossRuntimeFallback: false. Preserve all handoff binding values exactly.
Legacy adapter commands are compatibility-only; new flows use harness.
Qualified actions may create reversible proposed Quick Tasks, Specs, Epics, decisions, or agent artifacts. List them at review, but never approve or execute them. Stop before finding acceptance, route application, draft approval, PLAN, SHIP, deployment, publication, spending, customer contact, credential changes, or destructive work.
When the user requests a public read-only subcommand, perform only it. The dashboard is optional and never the sole report.
Completion is an explicit phase discipline, not a judgement call. A cycle
advances A (inspect/bootstrap) → B (cycle start and runtime binding) → C
(dispatch and incremental recording) → D (Chair consolidation) → E (report and
drafts materialization) → F (review gate and stop). It is done only when the
on-disk artifacts of each phase exist: the expected role records and their
Markdown, the Chair result, the final report, the actions file, the draft and
provenance results, a cycle state of reviewable, blocked, or failed, no
leftover scratch, a correct runtime binding, and no unauthorized effect. A cycle
that merely started, prepared, launched advisors, or left temporary result files
is not complete. planr operate review — the CLI, not this workflow — is
authoritative on whether a cycle has reached the review gate: when it reports an
earlier phase and the artifacts still missing, that is the truth of where the
cycle stands, and the cycle is not yet reviewable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 84 lines · 18 tokens per session scan A 91c89fdf752e
operate is a command published in the GitHub repository openplanr/planr-pipeline (2 stars, last pushed 28d ago), licensed MIT. It adds 18 tokens to every session and 1,331 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
iteration-loop
Run a whole iteration Phase 1→6 autonomously — code-first direction lock with a retained prototype, then execute → close → PR → merge-ready → post-merge close. Optional direction hint and scale S|M|L|XL; explicit autonomous opt-in, no grill-me, no routine confirmation.
iteration-drive
Drive or resume the selected locked iteration through Phase 2→6 — autonomous execute → iteration-close → PR → merge-ready loop → post-merge close. Takes no arguments.
codebase-audit
Read-only codebase survey — a prioritized, evidence-backed review report of what is worth doing. Use standalone or before /iteration-start; scope keywords pick the effort level and focus. Never edits source.
amazing-e2e-check
Run explicitly requested E2E, browser, device, or installed-deployment scenarios in an independent verification workflow.
init
First-time Archcore setup — wire host configs, measure the authored context, compose the full first-day seed in one preview, and create it on one confirm; import converts CLAUDE.md, AGENTS.md, rule files, ADRs, and docs into native documents; refresh adds new facts or drills into one domain.
document
Record the present state by mode — decision (ADR, RFC, rule), code (spec, doc, guide, scenario), or research (a ready report or one external material); a gate picks the document type.