autonomy-operate

A working routine for an autonomous coding-agent loop, where the agent takes turns, records progress, researches questions, and checks its work before committing.

In plain words
What is it for?
Use it to manage repeated coding sessions, enforce tests, builds, lint checks, coverage limits, and environment checks, and document decisions and review feedback.
Why use it?
It prevents lost context, unverified changes, and commits that fail required tests or quality checks.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/inferencegod/autonomy-loop/autonomy-operate
Any agent
npx skills add inferencegod/autonomy-loop --skill autonomy-operate
Clone the repo
git clone --depth 1 https://github.com/inferencegod/autonomy-loop

Made for: Claude Code, Codex.

Per session 62 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,409 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00062 $0.01409
Opus 5 $0.00031 $0.00705
Sonnet 5 $0.00012 $0.00282
Haiku 4.5 $0.00006 $0.00141

Measured yesterday against content hash ac60376e2823, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

autonomy-operate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

autonomy-loop/skills/autonomy-operate/SKILL.md · 44 lines

How it starts

The opening of the file, as written. The whole thing — 44 lines — stays where its author put it; the contents beside it link to each section on GitHub.

autonomy-operate - the rhythm

Read autonomy.config.json for this repo's knobs. Read STATE.md first every session.

The non-negotiables

  1. The baton is truth. Work only when LOOP-STATE.md turn: is your role. Never infer the turn from the commit log.
  2. Write everything down. STATE.md / LOOP-STATE.md / REVIEW-FEEDBACK.md hold the thread - chat compacts and is lost. Never rely on memory.
  3. The gate, every wave: gate.test + the frozen invariant intact (gate.frozenInvariant) + gate.build + gate.lint on touched files. If gate.coverage is set, also run node ${CLAUDE_PLUGIN_ROOT}/hooks/coverage-ratchet.mjs after the coverage command: a coverage drop below the .autonomy-coverage.json floor is a RED gate (the third gate, the drift guard). If gate.patchTarget is greater than 0, also run node ${CLAUDE_PLUGIN_ROOT}/hooks/patch-coverage.mjs --threshold=<patchTarget> so the wave's own changed lines are tested (the fourth gate; the reviewer passes --base=<last-reviewed-sha>). All green or REVERT - never commit red. If gate.envFidelity is set, the LOCAL gate must match CI (an env-naked pass is not proof CI is green).
  4. Honesty mandate (honestyRule): no fabricated numbers; every rate carries N + CI or "building - N/30"; a capability with no real data ABSTAINS visibly - never faked, never silently dead.
  5. Gate List (gateList): both terminals STOP and ask the human for risky/irreversible actions. Never self-authorize one - escalate to FOR-REVIEW.md, set turn: human.
  6. Push the work branch only, never prod. (The gate-guard hook enforces this; don't fight it.)

Builder rhythm

Two modes - IDEATE (research lane) and BUILD. ultrathink the plan. Smallest high-signal diff; PURE module + RED-before-green test for new logic; zero deletions on shared files; re-read fresh. Pre-empt the reviewer by answering the 5-lens rubric (Correctness · Honesty · Regression/frozen-drift · Security · UX) in your build note, with a "red-team the opposite" paragraph.

Read the full file on GitHub · 44 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 44 lines · 62 tokens per session scan A ac60376e2823

Subscribe to this mod's changes

autonomy-operate is a skill published in the GitHub repository inferencegod/autonomy-loop (1 stars, last pushed 2mo ago), licensed MIT. It adds 62 tokens to every session and 1,409 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.