Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add EtanHey/brainlayer --skill backup-verdictgit clone --depth 1 https://github.com/EtanHey/brainlayerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/etanhey/brainlayer/backup-verdict)<a href="https://agentmods.dev/skills/etanhey/brainlayer/backup-verdict"><img src="https://agentmods.dev/badge/skills/etanhey/brainlayer/backup-verdict/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/etanhey/brainlayer/backup-verdict"><img src="https://agentmods.dev/badge/skills/etanhey/brainlayer/backup-verdict.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00091 | $0.01484 |
| Opus 5.5 | $0.00036 | $0.00594 |
| Sonnet 5.5 | $0.00018 | $0.00297 |
| Haiku 4.5 | $0.00009 | $0.00148 |
Grade A, and why
verify-backup-verdict scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Verify the backup verdict
This skill checks one promise: the dot (plan section 3d) is red exactly when memory is at risk or a
pipe stopped. It is never green without a verified copy, never red only because of a job alert,
and never clears red without the evidence section 3d names. Everything lives in
formal/backup-verdict/. Read its README first.
1. Does your change touch the verified code?
Run formal/backup-verdict/check.sh --list and open coverage.json. Your change is in
scope if it edits any file under sources, or any path:line under actions. Look out
especially for _verified_age, evaluate()'s unknown / hold / hysteresis / wake-grace branches,
backup_facts, badge_alerts, _recent_local_verified_backup, the VACUUM deferred paths in
run_maintenance, maintenance.main's report(...) calls and last_weekly.
2. Run it
formal/backup-verdict/check.sh # about 3 min; exit 0 = every case matched
python3 -m pytest -q formal/backup-verdict/test_check.py -p no:cacheprovider -o pythonpath=
This was proved once: a scratch edit that put #1583 B5's persisted max back into _verified_age
made bug-1583-B5 FAIL (exit 1), and restoring the line made it pass.
Each line reads ok|FAIL <case>: expected X, got Y. Under a bug case, replay at <ref> says
whether the real code at the pre-fix commit reproduces the counterexample, and at the current tree
whether it still does. A SYNC STALE line (exit 1 under --require-sync, which CI uses) means someone must
confirm the model describes the changed source (step 4).
3. A real bug, or a modelling error?
Open .build.noindex/backup-verdict/<run>/<case>.trace.txt (the shortest path, changed variables
only), or read the result with the pstack /statechart skill, which tells each violation as its
shortest path in plain words.
- A
current-*case fails: the change broke the promise. For aBackupVerdicttrace, confirm it against the real code: copy the bug-case pattern (a config plus aprefixref inCASES), or runcheck.sh --case <case> --src-ref <your commit>. If the real code reproduces the trace, it is a real bug. Report it in the code's words (receipts, ticks, check states), asCOUNTEREXAMPLES.mddoes. - A
bug-*case FAILs with "UNEXPECTED" on the working-tree replay: either your change brought a fixed bug back (a real regression; fix the code), or the bug's PR just merged and itsfixed_hereis still"no"(flip it to"yes"). - A
bug-*case passes, or its replay "does not reproduce" at its pre-fix ref: the model drifted from the code it claims to describe. Fix the model. Never delete the case. - A trace walks a path the real code cannot take (for example, an unobserved fact the collectors always observe): that is a modelling error. Fix the action's precondition, and cite the code that makes it impossible.
- Never weaken a property until it passes. If the code breaks section 3d, add a
finding-*case, record it inCOUNTEREXAMPLES.md, and tell the lead. F1–F3 went this way: found as findings, fixed by S1a-5, nowbug-s1a5-*cases.
What ships with it
54 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- BackupVerdict.tla 18 KB
- check.py 29 KB runs code
- check.sh 63 B runs code
- configs/bug-1583-B1-canary-latch.cfg 576 B
- configs/bug-1583-B2-resume-grace.cfg 587 B
- configs/bug-1583-B3-renewable-grace.cfg 512 B
- configs/bug-1583-B4-drive-latch.cfg 574 B
- configs/bug-1583-B5-persisted-max.cfg 512 B
- configs/bug-1583-S1-alert-lights-dot.cfg 138 B
- configs/bug-1587-B4-backlog-ages-out.cfg 578 B
- configs/bug-1587-B5-stale-canary-success.cfg 575 B
- configs/bug-1589-B5a-grace-without-clock.cfg 520 B
- configs/bug-1589-B5b-shared-revocation.cfg 526 B
- configs/bug-1589-B5c-legacy-identity.cfg 525 B
- configs/bug-1595-local-removed.cfg 533 B
- configs/bug-1595-recovery-reset.cfg 576 B
- configs/bug-1596-abandoned.cfg 524 B
- configs/bug-1596-superseded.cfg 536 B
- configs/bug-renewable-grace-ingest.cfg 572 B
- configs/bug-renewable-grace-stores.cfg 572 B
- configs/bug-renewable-grace.cfg 564 B
- configs/bug-s1a5-F1-red-to-amber.cfg 576 B
- configs/bug-s1a5-F2-unobserved-tick-keeps-count.cfg 581 B
- configs/bug-s1a5-F3-graced-stale-keeps-count.cfg 592 B
- configs/conform-embedding-main.cfg 564 B
- configs/conform-embedding-s1a6.cfg 562 B
- configs/conform-ingest-main.cfg 561 B
- configs/conform-ingest-s1a5.cfg 560 B
- configs/conform-ingest-s1a6.cfg 559 B
- configs/conform-stores-main.cfg 561 B
- configs/conform-stores-s1a6.cfg 559 B
- configs/current-backup.cfg 605 B
- configs/current-dot-liveness.cfg 142 B
- configs/current-dot.cfg 162 B
- configs/current-pipes-drive.cfg 580 B
- configs/current-pipes-embedding.cfg 602 B
- configs/current-pipes-stores.cfg 599 B
- configs/current-vacuum.cfg 551 B
- configs/finding-ingest-graced-stale-keeps-count.cfg 590 B
- configs/finding-ingest-red-to-amber.cfg 592 B
- configs/finding-ingest-unobserved-tick-keeps-count.cfg 579 B
- configs/limit-unreadable-log.cfg 526 B
- configs/scratch-clean-run-keeps-alert.cfg 143 B
- configs/scratch-deferred-advances.cfg 523 B
- configs/scratch-vacuum-any-receipt.cfg 531 B
- COUNTEREXAMPLES.md 18 KB
- coverage.json 9.6 KB
- DotTable.tla 5.4 KB
- PipeVerdict.tla 21 KB
- README.md 7.8 KB
- replay.py 13 KB runs code
- RESULTS.md 7.4 KB
- STATE-DIAGRAM.md 8.1 KB
- test_check.py 14 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 88 lines · 91 tokens per session scan A c910b1b9f330
verify-backup-verdict is a skill published in the GitHub repository EtanHey/brainlayer (9 stars, last pushed yesterday), licensed Apache-2.0. It adds 91 tokens to every session and 1,484 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-03.
verify-backup-verdict compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| verify-backup-verdictEtanHey/brainlayer | Skill | 9 | yesterday | Apache-2.0 | A | 91 | Claude Code, Codex |
| ixix-infrastructure/Ix | Skill | 1.1k | yesterday | Apache-2.0 | A | 44 | Claude Code, Codex |
| property-reproplastic-labs/honcho | Skill | 8.0k | yesterday | AGPL-3.0 | A | 74 | Claude Code, Codex |
| honcho-cliplastic-labs/honcho | Skill | 8.0k | yesterday | AGPL-3.0 | A | 61 | Claude Code |
| ori-memoryaayoawoyemi/Ori-Mnemos | Skill | 335 | 1mo ago | Apache-2.0 | A | 54 | Claude Code, Codex |
| remnic-memory-workflowjoshuaswarren/remnic | Skill | 231 | yesterday | MIT | A | 54 | Claude Code |
| remnic-entitiesjoshuaswarren/remnic | Skill | 231 | yesterday | MIT | A | 41 | Claude Code |