What is ring:using-lib-systemplane?

A guide to a runtime configuration system that reloads selected settings while a service is running, using PostgreSQL notifications or MongoDB change streams.

Use it to register reloadable settings, scope them to tenants, react to changes, read typed values, and safely expose the administration endpoint.

It replaces custom file watchers, restart signals, and hand-built configuration administration while keeping startup-only secrets and connection details separate.

ring:using-lib-systemplane — Skill for Cursor by LerianStudio/ring

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add LerianStudio/ring --skill using-lib-systemplane

Clone the repo

git clone --depth 1 https://github.com/LerianStudio/ring

Made for: Cursor.

Or install ring-dev-team, the plugin that ships this one along with the rest of its 35 skills, 24 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/lerianstudio/ring/using-lib-systemplane/github.svg)](https://agentmods.dev/skills/lerianstudio/ring/using-lib-systemplane)

Your own site

<a href="https://agentmods.dev/skills/lerianstudio/ring/using-lib-systemplane"><img src="https://agentmods.dev/badge/skills/lerianstudio/ring/using-lib-systemplane/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/lerianstudio/ring/using-lib-systemplane"><img src="https://agentmods.dev/badge/skills/lerianstudio/ring/using-lib-systemplane.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 106 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 8,349 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 3 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Privilege Escalation · line 148
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
high Tool Misuse · line 467
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
medium Data Exfiltration · line 76
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00106	$0.08349
Opus 5.5	$0.00042	$0.03340
Sonnet 5.5	$0.00021	$0.01670
Haiku 4.5	$0.00011	$0.00835

Measured 1mo ago against content hash 62d22bdf4e5b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ring:using-lib-systemplane scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

dev-team/skills/using-lib-systemplane/SKILL.md · 558 lines

How it starts

The opening of the file, as written. The whole thing — 558 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ring:using-lib-systemplane

When to use

Sweep mode:

"Sweep the codebase for lib-systemplane opportunities"
"Find where we hot-reload config DIY (SIGHUP, fsnotify, viper.WatchConfig)"
"Audit this service for lib-systemplane adoption"
"Find raw pgx LISTEN / Mongo change-stream watchers wired against config tables"
"Detect v4 systemplane residue (Supervisor, BundleFactory, SYSTEMPLANE_* env vars)"

Reference mode:

"What does lib-systemplane provide?"
"How do I construct the client for Postgres / MongoDB?"
"Show me Register vs RegisterTenantScoped"
"Which read accessor should I use for a duration / int / bool?"
"How do OnChange and OnTenantChange differ?"
"How do I mount the admin HTTP surface safely?"
"What does the test harness look like?"

Skip when

Working on non-Go services
Working on frontend code
Target codebase has zero hot-reloadable runtime knobs (everything is static env-var-at-startup config — DSNs, TLS material, listen addresses, secrets stay outside the plane)
Task is documentation-only or non-code

Migration partner: ring:migrating-to-lib-systemplane — end-to-end 11-gate migration cycle. This skill is the adoption/reference counterpart; the migration skill is the transformation pipeline. Similar: [[ring:using-lib-commons]], [[ring:using-lib-observability]], [[ring:using-runtime]], [[ring:using-assert]]

Mode Selection

Request Shape	Mode
"Sweep / audit / find DIY runtime config / migrate to lib-systemplane"	Sweep
"What does lib-systemplane provide for X?"	Reference
"How do I initialize / register / subscribe?"	Reference
"Replace our fsnotify + SIGHUP plumbing with lib-systemplane"	Sweep
"Wire admin routes onto our Fiber app"	Reference

Module Facts (lock-checked)

Module path: github.com/LerianStudio/lib-systemplane
Go version: 1.26.3+
Tenant context: github.com/LerianStudio/lib-commons/v5 v5.0.2 (via tenant-manager/core)
Observability: github.com/LerianStudio/lib-observability v1.1.0 (log.Logger, tracing.Telemetry, runtime.RecoverAndLog)
Dual backend: Postgres 13+ (LISTEN/NOTIFY) or MongoDB 4.4+ (change streams; polling fallback for standalone deployments)
Provisioning: migration-only via systemplane.SchemaSQL() + systemplane.DefaultSeedSQL() public artifacts. Runtime DDL hook (runSchema) was removed in v1.6.0. Consumers vendor the artifacts into their own SQL migration pipeline via the make systemplane-ddl generator pattern — see ring:migrating-to-lib-systemplane Gate 3.5 and multi-tenant.md §27 "Cold-tenant resolution"
License: Elastic 2.0
Scope: runtime-mutable knobs only — never bootstrap-only material (DSNs, TLS, listen addresses, secrets)

Read the full file on GitHub · 558 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 558 lines · 106 tokens per session scan A 62d22bdf4e5b

Subscribe to this mod's changes

ring:using-lib-systemplane is a skill published in the GitHub repository LerianStudio/ring (218 stars, last pushed 7d ago), licensed Apache-2.0. It adds 106 tokens to every session and 8,349 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Backend and APIs Claude Code Code review Databases ai-agents ai-coding code-quality developer-tools

performance-audit

Full-stack performance health check across 12 dimensions. Rendering, bundles, assets, API/network, algorithms, memory, database, caching, Web Vitals, backend runtime, concurrency, and framework-specific pathologies. Evidence-based Impact Models with confidence tiers and a prioritized optimization roadmap. Switches…

greglas75/zuvo · 90 tokens

db-audit

Database performance and safety audit. 70+ checks across 13 dimensions (DB1-DB13): query patterns, indexes, schema design, connections, transactions, migrations, caching, query optimization, ORM anti-patterns, observability, data lifecycle, DB security, and migration deployment safety. Code-level checks for all ORMs.…

greglas75/zuvo · 115 tokens

api-audit

API and endpoint integrity audit across 10 dimensions (D1-D10) plus optional contract stability (D11) and optional OWASP API Security Top 10 (D12: BOLA/BOPLA/BFLA, mass assignment, JWT alg-confusion, GraphQL introspection). Covers validation, payloads, pagination, errors, caching, HTTP semantics, waterfalls, rate…

greglas75/zuvo · 135 tokens

drift-canary

Compatibility and schema drift canary — checks for database schema migration safety, breaking API contract changes, serializable payload mismatches, and backward compatibility drift. Triggers on keywords: "/drift-canary", "drift-canary", "contract drift", "breaking changes". Use when changing DB schemas, API…

HetCreep/CoalMine · 78 tokens

ds-backend

Backend architecture — API design, database schema, authentication, data pipelines. Use when designing or reviewing a backend, REST/GraphQL APIs, data models, auth flows, or ingest/ETL pipelines.

sungurerdim/dev-skills · 45 tokens

docs

Write and update technical documentation from actual codebase analysis. Generates README, API reference, runbook, onboarding guide, or changelog. Supports update mode that patches stale sections without rewriting from scratch. Modes: readme [path], api [path], runbook [topic], onboarding, update [file], changelog…

greglas75/zuvo · 68 tokens

ring:using-lib-systemplane

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

ring:using-lib-systemplane

When to use

Skip when

Related

Mode Selection

Module Facts (lock-checked)

What this file has done since we first saw it

Other skills, from other repositories

performance-audit

db-audit

api-audit

drift-canary

ds-backend

docs