Borrowing it
Nothing to install: this file belongs to kurone-kito/idd-skill. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/kurone-kito/idd-skill/main/.github/instructions/idd-advisory-wait.instructions.mdgit clone --depth 1 https://github.com/kurone-kito/idd-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/kurone-kito/idd-skill/idd-advisory-wait)<a href="https://agentmods.dev/instructions/kurone-kito/idd-skill/idd-advisory-wait"><img src="https://agentmods.dev/badge/instructions/kurone-kito/idd-skill/idd-advisory-wait/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/kurone-kito/idd-skill/idd-advisory-wait"><img src="https://agentmods.dev/badge/instructions/kurone-kito/idd-skill/idd-advisory-wait.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.06693 | $0.06693 |
| Opus 5.5 | $0.02677 | $0.02677 |
| Sonnet 5.5 | $0.01339 | $0.01339 |
| Haiku 4.5 | $0.00669 | $0.00669 |
Grade C, and why
idd-skill idd-advisory-wait.instructions.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Hidden instructionshighPrompt injection
Directives inside HTML comments, invisible characters or bidirectional overrides are read by the model and not by the person reviewing the file.
<!-- idd-generated-from: idd-template/.github/instructions/idd-advisory-wait.instructions.md Generated by sync-docs. Edit the source above, then run `node scripts/sync-docs.mjs --apply`; do not edit this file. --> How it starts
The opening of the file, as written. The whole thing — 489 lines — stays where its author put it; the contents beside it link to each section on GitHub.
IDD — Copilot Advisory-Wait Protocol
Shared advisory-wait protocol used by D4
(idd-pr-submit.instructions.md), E14
(idd-review-fix.instructions.md), F2 (idd-pre-merge.instructions.md),
and F3 (idd-merge.instructions.md). Policy constants (cap/windows)
are named in
docs/policy-constants.md; this file
owns behavior; advisoryWait.exemptBotAuthoredPrs is convergence-only.
Scope — Copilot-only settle/wait window
This protocol's settle/wait window covers Copilot only. Other
advisoryBotLogins get no wait window in this file. A configured
advisoryWait.secondaryQuietWindow is F2's separate
secondary-quiet-window blocker (idd-pre-merge.instructions.md, which
holds its elapsed-window rule). It is an elapsed-window check, not a poll
until any secondary bot reaches HEAD. Unset never adds it.
For non-Copilot bots, late findings still use the E1 snapshot +
review-watermark delta, re-checked by F2/F3, which forbids a
bare CI-green merge without a fresh covering snapshot.
Do not build a substitute wait for a non-primary bot. A poll
on any bot but advisoryWait.primaryBotLogin is not this protocol:
no caps, timeouts, or hold routes, and the bot may never review. Use
the E1 net above; the F2 elapsed-window blocker is not a substitute.
Fast path — common case
The advisory bot usually reviews current HEAD within minutes, reducing
the gate to one check: poll LAST_COPILOT_COMMIT; once it equals
PR_HEAD_SHA, the gate is SATISFIED unless DISPOSITION_NEEDED.
Otherwise, skip the AW2-AW5 machinery and take the caller's SATISFIED
action from the caller mapping table (common to both the
canonical path and shell-fallback AW3 row one). Enter the full protocol
below only when LAST_COPILOT_COMMIT != PR_HEAD_SHA.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago Changed · +5 lines · +78 tokens per session 692b3942bcc2
- 7d ago Changed · +6 lines · +187 tokens per session efde3f13e419
- 8d ago Changed · -9 lines · -158 tokens per session 0ecfdb1e9747
- 12d ago Changed · +3 tokens per session 05d2eda16bd5
- 22d ago Changed · -5 lines · -49 tokens per session aa6ea0357c66
- 23d ago Changed · -3 lines · -29 tokens per session d31df89a1aa0
- 24d ago Changed · +1 lines · +18 tokens per session 6a2752b47d9d
- 26d ago Changed · -8 tokens per session 647ccaea3961
- 27d ago Changed · +2 lines · +37 tokens per session e15f4a5eda20
- 28d ago First seen · 492 lines · 6,614 tokens per session scan C 405a8caac69f
idd-skill idd-advisory-wait.instructions.md is an instructions file published in the GitHub repository kurone-kito/idd-skill (11 stars, last pushed today), licensed MIT. It adds 6,693 tokens to every session, about $0.0268 per session on Opus 5.5. A static security scan graded it C with 1 finding (hidden instructions). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.