system-reconcile

system-reconcile is a skill for Claude Code, Codex from friedbotstudio/baseline. It costs 107 tokens per session (1,271 once invoked), scanned A, original, Apache-2.0.

A read-only checker for a central system specification stored under docs/system/. It reports missing coverage, stale references, broken links between parts, duplicates, and incomplete annotations.

In plain words
What is it for?
Use it to audit system documentation and produce a repair list for human review.
Why use it?
It shows where the specification has drifted or become inconsistent before anyone changes it.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/friedbotstudio/baseline/system-reconcile
Any agent
npx skills add friedbotstudio/baseline --skill system-reconcile
Clone the repo
git clone --depth 1 https://github.com/friedbotstudio/baseline

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for system-reconcile

README.md
[![agentmods](https://agentmods.dev/badge/skills/friedbotstudio/baseline/system-reconcile.svg)](https://agentmods.dev/skills/friedbotstudio/baseline/system-reconcile)
Your own site
<a href="https://agentmods.dev/skills/friedbotstudio/baseline/system-reconcile"><img src="https://agentmods.dev/badge/skills/friedbotstudio/baseline/system-reconcile.svg" alt="Measured on agentmods" height="20"></a>
Per session 107 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,271 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00107 $0.01271
Opus 5 $0.00053 $0.00635
Sonnet 5 $0.00021 $0.00254
Haiku 4.5 $0.00011 $0.00127

Measured today against content hash 75af39e82999, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

system-reconcile scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

The scan reads SKILL.md. This mod also ships 3 executable files (cli.mjs, gate-render.mjs, reconcile-report.mjs), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/system-reconcile/SKILL.md · 92 lines

How it starts

The opening of the file, as written. The whole thing — 92 lines — stays where its author put it; the contents beside it link to each section on GitHub.

system-reconcile — corpus health, reported before anything is repaired

Invocable by the user (/system-reconcile) and by Claude (/archive Step 5.5, report-only).

The corpus at docs/system/ accumulates two kinds of drift: the tree moves out from under the model, and the model grows entries the tree no longer backs. Seven checks name both directions. The report is the deliverable — repairs are a second, human-confirmed step, and most runs end after the report.

The one-writer rule

/archive Step 5 is the corpus's only writer on the primary tree. This skill does not have an apply mode and reconcile-report.mjs exports no writer, so no workflow phase can reach one through it. When a repair is confirmed, you perform it here in main context using the writers that already exist — never by adding one to the report module.

Step 1 — check the flag

node .claude/skills/workspace/cli.mjs flags   # gates on memory.architecture_map.enabled — read the `architecture_map:` line

false → stop and tell the user the corpus is not enabled for this project. Every path below is inert, so running them would print seven empty arrays and read as a clean corpus rather than an absent one.

Step 2 — run the report

node .claude/skills/system-reconcile/cli.mjs report --json

Nothing is written. docs/system/ is byte-identical afterwards, which is the property /archive Step 5.5 depends on.

Step 3 — read the seven checks

Check What a non-empty result means The repair, once confirmed
gaps A governed-surface file no element anchors. The map is no longer total over what it claims to describe. Reported only — /archive Step 5.5 never gates on it. Add an element whose anchor covers it, or widen an existing anchor to a glob.
stale The element's stored anchor_digest no longer matches the file's structural interface — something another file could depend on moved. Re-stamp the element after confirming the diagram still describes it.
dangling The anchor resolves to nothing. A broken route, not an unfalsifiable drawing. Repoint the anchor, or remove the element if the subject is gone.
duplicateAnchors Two ids claim one anchor — usually a merge where each branch derived the same anchor under a different name. Reported, never auto-resolved: two meanings sharing one anchor cannot be told apart mechanically. Ask which id survives.
orphanShards A .puml section naming no element. The corpus cannot say what the diagram shows. Add the missing element, or delete the shard.
unillustrated An element with no shard. Advisory as a severity — a gap in illustration, not a broken model — but /archive Step 5.5 gates on it, so an unillustrated element blocks the next commit until it is drawn. Draw it with writeDiagramShard.
missingKind A shard carrying no ' @kind, so witness.bindingFor returns witness: none and the element routes but is never citable as evidence. Write the kind the shard already declares structurally with writeDiagramShard.

Read the full file on GitHub · 92 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 92 lines · 0 tokens per session scan A 75af39e82999

Subscribe to this mod's changes

system-reconcile is a skill published in the GitHub repository friedbotstudio/baseline (14 stars, last pushed yesterday), licensed Apache-2.0. It adds 107 tokens to every session and 1,271 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

probe

Report this absolute source path, then read the nested routine.

arbiterForge/codeArbiter · 14 tokens

dev-standards

Enforces development workflows, quality gates, coding standards, and release processes for the deterministic-agent-control-protocol project. Use when implementing features, fixing bugs, refactoring architecture, adding integrations, updating policies, writing tests, updating documentation, or preparing releases.

elliot35/deterministic-agent-control-protocol · 56 tokens

brainstorming

The Socratic spec-refinement front of /feature, and the planning front of /sprint. Routed to BEFORE any code — it takes a one-line idea and drives it to an approved, concrete spec with testable acceptance criteria. Five gated phases — frame, shape, refine, write, review-and-approve. No implementation and no handoff to…

arbiterForge/codeArbiter · 99 tokens

commit-gate

The only path to a commit. Routed to when the user invokes /commit or otherwise instructs codeArbiter to persist staged changes. Nine gated phases — permission, branch, classification, verification (test/lint/secrets), behavioral proof, diff review, selective stage, message, commit. Nothing reaches version control…

arbiterForge/codeArbiter · 81 tokens

context-check

Optional manual drift audit — report stale provenance-tracked docs (via provenancelib drift detection across .codearbiter/.provenance/), then per stale doc offer re-scout / re-baseline / defer. Not the daily loop; commit-gate auto-heal owns routine maintenance.

arbiterForge/codeArbiter · 64 tokens

context-creation

The brownfield back-fill. Routed to by /create-context, and by startup when .codearbiter/CONTEXT.md lacks the body marker but source code exists. Six gated phases — pre-flight, scout dispatch, synthesis, gap interview, write, lock. Reads the existing codebase through parallel scouts, drafts every surviving…

arbiterForge/codeArbiter · 90 tokens