Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Redtropig/harness-anchorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/redtropig/harness-anchor/verify)<a href="https://agentmods.dev/commands/redtropig/harness-anchor/verify"><img src="https://agentmods.dev/badge/commands/redtropig/harness-anchor/verify/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/redtropig/harness-anchor/verify"><img src="https://agentmods.dev/badge/commands/redtropig/harness-anchor/verify.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.01038 |
| Opus 5.5 | $0.00025 | $0.00415 |
| Sonnet 5.5 | $0.00013 | $0.00208 |
| Haiku 4.5 | $0.00006 | $0.00104 |
Grade A, and why
verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 81 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/verify
Run the project's full verification suite via a fresh-context subagent and produce an evidence-based report.
This is the Anthropic three-agent architecture's "evaluator" role — independent from the code-writing agent so leniency bias is minimized.
Steps
-
Dispatch
verification-runnersubagent via theTasktool:Task tool with: subagent_type: verification-runner prompt: Verify the active feature in feature_list.json. Use the project's documented verification commands from AGENTS.md if present; otherwise infer from project type (cmake, npm, cargo, etc.). Follow the fixed report format in your skill instructions. Do not modify code. -
Receive the report. It will be structured as
### Build,### Tests,### Integrity,### Verdict,### Recommendationsections. -
Surface the report to the user verbatim — do not paraphrase. The point of fresh-context evaluation is the user sees the evaluator's actual words.
-
If verdict is READY TO MARK PASS:
- Ask the user: "Verifier reports ready to mark as pass. Update feature_list.json now?"
- On yes: invoke
feature-state-keeperskill behaviour to update with the evidence object from the report
-
If verdict is NOT READY:
- Surface the specific failing criteria
- Offer: (a) opt into the bounded auto-fix loop (see "
--fixmode" below), (b) fix manually and re-run/verify, or (c) leave as-is and end the session
--fix mode (opt-in auto-fix loop)
Default /verify is read-only. Enter auto-fix ONLY when the user explicitly opts in —
/verify --fix (the --fix token is in the command arguments) or a direct request like
"verify and fix what you can." Never enter this mode on a bare /verify.
When opted in AND the verdict is NOT READY, run a bounded fix→re-verify loop:
- Read the
### Recommendationfrom the report — the failing criteria + suggested next commands. That is your only sanctioned fix scope. - Apply fixes for that scope, transparently — show each change (file + short diff or description). Do NOT touch anything outside the recommendation; if a real fix would require that, STOP and ask the user first.
- Re-verify with a FRESH
verification-runner— a newTaskdispatch, not the prior subagent's context. Independence per cycle is the point: a fresh evaluator can't inherit the fixing agent's optimism. - Decide:
- READY → report "converged after N cycle(s)", list every change applied, then offer the feature_list.json update (step 4 above).
- NOT READY and cycles completed < 2 → run one more cycle (back to 1).
- NOT READY after 2 cycles → STOP. Report honestly: what each cycle tried, what was applied, and the remaining failures with evidence paths. Never claim pass; never start a 3rd cycle.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 81 lines · 63 tokens per session scan A e64c8baf27c6
verify is a command published in the GitHub repository Redtropig/harness-anchor (13 stars, last pushed 2mo ago), licensed MIT. It adds 63 tokens to every session and 1,038 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
verify
Run verification loop to validate implementation.
fix-issue
Fixes GitHub issues using parallel analysis agents for root cause investigation, code exploration, and regression detection. Reads issue context from gh CLI, searches codebase and memory for related patterns, generates a fix with tests, and links the resolution back to the issue via PR. Includes prevention analysis to…
verify
Grade work that already exists and decide whether it can merge. Runs the project's current unit, integration, and E2E suites plus security scanning and type checking, scores every dimension 0-10, and returns a merge verdict with a VERIFIED-vs-CLAIMED evidence manifest. Writes no test files and edits no source. Use…
expect
Diff-aware AI browser testing — reads the git diff, maps changes to affected pages via the route map, generates a targeted test plan, and executes it via agent-browser (Rust daemon + CDP, ARIA-tree-first) with pass/fail reporting. Use when testing UI changes, verifying PRs before merge, or running regression checks on…
fire-verify-uat
Conversational User Acceptance Testing with automatic parallel diagnosis on failures.
simplify-fn
Refactor a complex function to reduce cyclomatic complexity.