Install
$ agentstack add skill-miaoy0ushan-fp-evidence-ledger ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README — it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
FP: Evidence Ledger
Every completion claim needs evidence. The canonical machine record is JSON v1 validated by contracts/evidence-ledger.v1.schema.json; Markdown is only a human view.
Use When
- A medium, debug, live-system, multi-agent, or risky task executed.
- A task failed, blocked, exceeded scope, or needs a durable handoff.
- Metrics or adaptive improvement will consume the result.
Small clear changes may use the Tiny Evidence form instead.
Procedure
- Record task ID, authority mode, write authorization, and scope.
- List files read and touched using normalized repository-relative paths when possible.
- Record each command/check with exact result and evidence; do not equate “ran” with “passed.”
- For debug work, record hypothesis, probe, actual result, decision, and next step. Before completion, add
debug_evidencewith the causal chain, first divergence, condition-based wait evidence or a justified fixed wait, and distinct direct/sibling observed checks for any touched shared boundary. - Tie every verified claim to evidence and list every remaining unverified claim.
- Record scope and context-budget violations explicitly.
- Record remaining risk, decision, and next action.
- For remote/stateful work, record baseline, rollback, effective runtime, external-client and negative-control evidence.
- For externally retrieved context, record source, version, structured freshness basis, authoritative page, claim, and unresolved gap.
- For incomplete cross-session work, compile a continuation block; never use it to auto-replay writes.
- When a deliberate shortcut is accepted because it has a known safe limit, add
deferred_itemswith its location, shortcut, ceiling, observable upgrade trigger, evidence, and anevidence_refthat resolves to observed command or verified-claim evidence. Do not create debt entries for vague future work or use them to excuse a current acceptance failure. - For multi-agent work, record the parent authority ceiling and every delegation envelope, including allowed resources, read-only status, summary budget, artifact path, and observed proposal evidence references.
Completion Gate
result=passneeds at least one passing check and one evidenced claim.decision=completeneedsresult=pass.- Required checks come from the Execution Brief and must all pass.
- Report-only work cannot touch files or claim write authority.
- Unknown values stay
unknown/null. - A stale live-system observation is historical evidence, not current state.
Output
Use templates/evidence-ledger.md. Run:
node scripts/lint-contracts.js --ledger --brief
If the run needs metrics, pass the canonical JSON and its brief to metrics. Use adaptive improvement only when the ledger contains evidence for a reusable change.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: MiaoY0uShan
- Source: MiaoY0uShan/FP
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.