Install
$ agentstack add skill-hsienw-ai-agent-engineering-playbook-langgraph-runtime-boundary-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
LangGraph Runtime Boundary Review
Skill Interface
- Name: langgraph-runtime-boundary-review.
- Description: Review LangGraph native runtime boundaries before building custom agent runtime infrastructure for queueing, workers, checkpointers, stores, interrupts, resume flows, retries, task semantics, audit, locks, and cost tracking.
- Parameters: Proposed runtime capability, native LangGraph coverage, graph execution requirements, business task semantics, side-effect governance, audit needs, memory model, UI progress needs, evidence from a minimal run, and ownership decision.
- Instructions: Use this skill before adding custom runtime layers. Identify the capability, test native runtime coverage when possible, assign ownership to native runtime, custom task runtime, application service, or UI, and record rationale with evidence.
Clarify native runtime responsibilities before adding custom runtime layers. Fill real gaps without duplicating queue, worker, checkpoint, or store behavior that the runtime already provides.
Review Process
- List the capability being proposed.
- Identify whether it belongs to graph execution, business task state,
side-effect governance, audit, memory, or user-facing progress.
- Verify native runtime coverage with a minimal run when possible.
- Decide ownership: native runtime, custom task runtime, application service,
or UI.
- Record the rationale and evidence.
Boundary Matrix
Evaluate these capabilities explicitly:
- Graph state persistence.
- Interrupt and resume.
- Background queue and worker behavior.
- Thread-scoped checkpointing.
- Cross-thread long-term memory.
- Business task and step state.
- Step-level retry budget.
- Side-effect idempotency.
- Persistent audit.
- Distributed concurrency control.
- Cost tracking.
- User-facing progress timeline.
Decision Rules
- Prefer native runtime features for graph execution state.
- Use custom runtime state for business task and step semantics.
- Use custom governance for side effects, audit, idempotency, compensation,
distributed locks, and cost policy.
- Keep long-term memory distinct from checkpointed graph execution state.
- Do not store non-serializable resources in graph state.
- Do not treat a graph node name as a business step unless that contract is
explicit and stable.
Evidence
Capture:
- Minimal run configuration.
- Interrupt and resume behavior.
- Checkpoint data ownership.
- Store read and write behavior.
- Failure and recovery behavior.
- The capability gap that justifies any custom runtime component.
Output
Produce a short decision record with:
- Capability.
- Native coverage.
- Custom responsibility, if any.
- Rationale.
- Verification evidence.
- Risks and follow-up tests.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: HsienW
- Source: HsienW/ai-agent-engineering-playbook
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.