boffin-pack-routing

boffin-pack-routing is a cursor rule for Cursor from MicSm/boffin. It costs 1,819 tokens per session, scanned A, original, MIT.

A set of coding-workflow rules for focused changes and broader code reviews. It describes a staged audit process and a findings ledger for tracking work.

In plain words
What is it for?
Auditing code, recording findings, applying stage-specific guidance, and verifying focused fixes.
Why use it?
It helps keep changes within scope and makes review work traceable across the relevant stages.

Cursor rule for Cursor

Written for Cursor: installed under .cursor/. Also seen: mentions subagents.

Good fit Auditing code, recording findings, applying stage-specific guidance, and verifying focused fixes.

Compare 6 cursor rules from other repositories ↓
Install with agentmods
npx agentmods add rules/micsm/boffin/boffin-pack-routing
View source ↗ MicSm/boffin
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/MicSm/boffin

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for boffin-pack-routing

README.md
[![agentmods](https://agentmods.dev/badge/rules/micsm/boffin/boffin-pack-routing/github.svg)](https://agentmods.dev/rules/micsm/boffin/boffin-pack-routing)
Your own site
<a href="https://agentmods.dev/rules/micsm/boffin/boffin-pack-routing"><img src="https://agentmods.dev/badge/rules/micsm/boffin/boffin-pack-routing/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for boffin-pack-routing

Your own site · 80×15
<a href="https://agentmods.dev/rules/micsm/boffin/boffin-pack-routing"><img src="https://agentmods.dev/badge/rules/micsm/boffin/boffin-pack-routing.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,819 This file is loaded in full into every session.
When invoked 1,819 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01819 $0.01819
Opus 5.5 $0.00728 $0.00728
Sonnet 5.5 $0.00364 $0.00364
Haiku 4.5 $0.00182 $0.00182

Measured 2mo ago against content hash b0e2224235cc, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

boffin-pack-routing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/rules/boffin-pack-routing.mdc · 107 lines

How it starts

The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ParselFire Core Pack Activation

Default Workflow

First match scope to the task, then pick the path:

  • Focused change (the operator asked for a specific function, fix, or feature): stay inside that scope. Make only the change requested, apply the stage guidance to what you touch, and prove it with a check. Do not scan the whole file or build a file-wide ledger; turning a scoped coding task into a file-wide refactor breaks the task boundary and gets rejected.
  • Open-ended refactor, cleanup, or review of existing code: run the two-pass audit below, scoped to what the task covers.

Two-pass audit (refactor / review / cleanup). Never fix while you are still searching; the first strong improvement you find is not the finish line.

Pass 1, Audit (read-only). Read the target across the task's scope. Walk stages S00 upward and emit a findings ledger that covers every in-scope stage, including stages with nothing to change. Do not edit anything in this pass. Use one row per finding:

path | stage | status | id | kernel | anchor | check

Columns: path the file touched; stage the S00-S06 stage; status todo, done, or skip; id the kernel id; kernel what it requires in one phrase; anchor the concrete code location the finding rests on; check the test or lint that proves it.

  • status is one of todo, done, skip, and every skip carries a reason.
  • Record every fix you name while auditing as its own row with all fields filled, and resolve it as done or skip:<reason>; never leave a fix you mentioned in reasoning off the ledger.
  • skip:clean means Pass 1 found nothing on that stage; every in-scope stage still gets a row, never an omitted one.
  • A finding you deliberately will not act on is skip:<reason> whose reason names the blocking kernel (for example, keeping a genuine special case instead of flattening it), never skip:clean.
  • A row recorded as todo resolves only to done (with its check) or skip:<reason>; never downgrade a todo to skip:clean.

Read the full file on GitHub · 107 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 107 lines · 1,819 tokens per session scan A b0e2224235cc

Subscribe to this mod's changes

boffin-pack-routing is a cursor rule published in the GitHub repository MicSm/boffin (37 stars, last pushed 2mo ago), licensed MIT. It adds 1,819 tokens to every session, about $0.0073 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other cursor rules, from other repositories