Borrowing it
Nothing to install: this file belongs to sturlese/stigmergy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sturlese/stigmergy/main/.claude/skills/validate-deployment/SKILL.mdgit clone --depth 1 https://github.com/sturlese/stigmergyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sturlese/stigmergy/validate-deployment)<a href="https://agentmods.dev/skills/sturlese/stigmergy/validate-deployment"><img src="https://agentmods.dev/badge/skills/sturlese/stigmergy/validate-deployment.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00033 | $0.01002 |
| Opus 5 | $0.00016 | $0.00501 |
| Sonnet 5 | $0.00007 | $0.00200 |
| Haiku 4.5 | $0.00003 | $0.00100 |
Grade A, and why
validate-deployment scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Validate a Stigmergy deployment
Use this procedure after a deployment or a release spanning more than one subsystem. Read
deployment coordinates from the gitignored .env and Fly secrets; never print secret values.
1. Preflight
- Confirm every Fly process group is running the intended image and passes its health checks.
- Confirm Postgres, the private evidence bucket, the GitHub App, Slack credentials, and embedding credentials are configured without displaying them.
- Confirm the deployed knowledge-repository commit contains the target control files and pins the released platform commit in both workflows.
- Inspect recent logs for restart loops, tracebacks, secret-bearing messages, and repeated jobs.
For a clean-cut test release, run the guarded reset before deployment validation. It must leave a fresh target schema, an empty queue/index/object namespace, and the empty target knowledge scaffold.
2. Read path through MCP
After the first full rebuild, exercise all read tools with an authenticated identity:
search_brainin both corpus languages and inspect lexical/vector ranking arms;read_pageon a visible result and on an unknown path;list_entitiesanddescribe_entitywhen an entity exists;askfor one supported and one unsupported answer, checking citations and honest refusal.
Repeat a restricted search/read with identities on both sides of an ACL boundary. Unknown, hidden, and unauthorized pages and entity IDs must have indistinguishable external responses.
3. Unified capture and writer
Submit through the official local bridge:
- exact text;
- a local digital PDF;
- a local scanned PDF;
- a private Drive PDF using local Google OAuth when credentials are available.
Observe brain_submissions reach landed. Each capture must retain exact original bytes, create one
neutral sources/YYYY/MM/<capture-id>.md path, and land one Git commit with one Changes record. A
retry with the same idempotency identity must not create another commit.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 99 lines · 33 tokens per session scan A 8aa5514ef7ab
validate-deployment is a skill published in the GitHub repository sturlese/stigmergy (9 stars, last pushed 12d ago), licensed Apache-2.0. It adds 33 tokens to every session and 1,002 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
memobase
A Russian-language skill for searching a local knowledge base built from documents and other sources such as web pages, YouTube, audio, and Obsidian notes.
knowsift
Compile collected videos, articles, documents, and research into layered, traceable knowledge documents or fail-closed claim certificates. Use when a user needs research synthesis that separates supported knowledge, conditional findings, practitioner experience, viewpoints, anecdotes, disputes, and rejected claims; do…
kb-log
A skill for recording important technical decisions and debugging lessons in a team knowledge base or a local ledger file.
kb-brief
A project-start briefing that searches a team's knowledge base for past pitfalls, decisions, recent changes, and people familiar with the work. It is intended for new tasks, issues, and bug fixes.
kb-wrap
A procedure for transferring recorded project decisions and lessons from a local ledger into a team knowledge base, then clearing the processed entries.
fortemi-roadmap-skill
Advance the Fortemi delivery roadmap by one concrete increment and document the progress. Reads .aiwg/planning/roadmap.md, picks the next actionable item respecting phase gating, does or dispatches the work, then records progress back into the roadmap. Built for fresh sessions and simple loops.