Install
$ agentstack add skill-mblauberg-provenant-orchestrate ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Multi-agent orchestration
Overview
Decompose -> waves -> reduce -> gate.
Rules
- Use parallel fan-out only after the decomposition/value gate passes.
- Preflight dependencies/shared errors.
- No concurrent shared-state writes. Partition authorised writers into
repository .worktrees/; otherwise use a serial applier.
- Parallel lanes stop ready-to-merge. The chair merges serially, refreshes the
next branch from current main, then reruns checks and reviews after commit/tree changes.
- Keep topology exact. One chair; leaders settle recursive obligations.
Handoff is a generation-bound operator action.
- Answer-bearing external work uses Fabric request/reply; Herdr only wakes.
Pane injection is fire-and-forget steering. Without callback, record FABRIC-ROUNDTRIP-UNAVAILABLE and collect an artifact.
- Record worker cwd; never assume repository.
- Workers write full output to files; return a digest/path.
- Cross-family follows the HARNESS risk ladder. Targeted lenses plus other
primary; distinct family when available; record terminal skips.
- Objective checks outrank opinions. You own the final call.
- Discover current model/tool options at runtime.
When This Pays
Before parallel dispatch, require:
- independent information or artefacts;
- stable interfaces and dependencies;
- non-overlapping writes;
- independently checkable return contracts; and
- expected information gain greater than coordination, shared-state and
tool-density cost.
If the gate fails, keep serial ownership with the chair or one specialist; shared-error or tightly coupled work stays serial. Choose the smallest passing topology.
Adaptive Loop
- Preflight authority/isolation/disclosure/receipts.
- Use native same-session subagents first. **Use same-family CLI only for
auth/preflight smoke tests**.
- Dispatch parallel read/partitioned-write and serial shared-state waves;
adapt leaders on evidence and keep one chair/stage owner.
- Reduce to a claim/conflict map; verify the live tree before repair.
- Add only informative waves: narrow, repair, verify, **cross-family broad
review, or Document update wave**.
- Final gate: no untriaged P0/P1, missing anchors, unresolved doc drift,
unrecorded family status or user gate. Record CROSS-FAMILY-NOT-RUN when disclosure or availability prevents dispatch.
Worker Contract
Every worker gets task class, route (tier, model, effort, route receipt), identity, objective, authority, paths, output, checks, stop and budget; validate payloads, never infer permission. See [orchestration-contract.md](references/orchestration-contract.md) for the full contract, gates and recovery transitions.
Autonomous-implementation mode
Pulls accepted/ready issues through implement unattended. Merge stays user-controlled by default, deferring to the nearest repository merge policy. Lower authority than autopilot's run-until-STOP loop. See [autonomous-implementation.md](references/autonomous-implementation.md) for the entry gate, loop, receipt contract and the autopilot distinction.
References
Load relevant [references](references/) only: trigger-boundary.md, routing-and-tiers.md, codex-subagents.md, orchestration-contract.md, dynamic-workflows.md, paired-primary.md, herdr-panes.md, layering-and-context.md, retrieval-and-tool-routing.md, verification.md, cli-headless.md, memory-scratchpad.md, evaluation-and-observability.md, domain-adaptation.md, and autonomous-implementation.md. scripts/ and evals/ hold helpers/guards; cf_dispatch.sh is degraded fallback/preflight only.
Adapter-absent path
Without Console, Herdr or GitHub, emit the skill-owned [portable kind](portable-workflow.v1.json) from canonical project artifacts. It grants no Fabric authority or second task owner.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mblauberg
- Source: mblauberg/provenant
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.