# Orch Infra

> Shared infrastructure checks run at the start of every orchestrator cycle — run_preflight.py, run_integrity.py, run_circuit_check.py. Any non-zero exit blocks the cycle with status blocked. Loaded by all orchestrators. Not user-invocable — orchestrators run the scripts directly.

- **Type:** Skill
- **Install:** `agentstack add skill-zig999-siegard-code-orch-infra`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [zig999](https://agentstack.voostack.com/s/zig999)
- **Installs:** 0
- **Category:** [Communication](https://agentstack.voostack.com/c/communication)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [zig999](https://github.com/zig999)
- **Source:** https://github.com/zig999/siegard-code/tree/main/dist/.claude/skills/orch-infra

## Install

```sh
agentstack add skill-zig999-siegard-code-orch-infra
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# orch-infra

Shared infrastructure skill: run preflight, integrity, and circuit-breaker checks at the start of every orchestrator cycle.

## Usage contract

Every orchestrator loads this skill and calls all three scripts at the start of each cycle:

```bash
python3 .claude/skills/orch-infra/scripts/run_preflight.py
python3 .claude/skills/orch-infra/scripts/run_integrity.py
python3 .claude/skills/orch-infra/scripts/run_circuit_check.py
```

On any non-zero exit: stop and return `{"status": "blocked"}` to the meta-orchestrator.

## Output envelope (all scripts)

Every script emits exactly one JSON object to stdout:

| Field | Type | Description |
|-------|------|-------------|
| `status` | `"ok"` \| `"blocked"` | Pass/fail verdict |
| `check` | string | `"preflight"` \| `"integrity"` \| `"circuit"` |
| `timestamp` | string | ISO 8601 UTC timestamp |
| `reason` | string | Present only on `"blocked"` — machine-readable failure code |
| `detail` | object | Present only on `"blocked"` — additional context |

## scripts/run_preflight.py

Runs `preflight.py --quick` (local runtime checks only). Returns blocked if any check fails.

```bash
python3 .claude/skills/orch-infra/scripts/run_preflight.py
```

Exit codes: `0` = all checks passed, `1` = at least one check failed or exec error.

Example output (ok):
```json
{"status": "ok", "check": "preflight", "timestamp": "...", "passed": 5, "total": 5, "failed_count": 0}
```

Example output (blocked):
```json
{
  "status": "blocked",
  "check": "preflight",
  "timestamp": "...",
  "reason": "preflight_failed",
  "passed": 4,
  "total": 5,
  "failed_count": 1,
  "failed_checks": [{"check": "flock_works", "reason": "fcntl not available"}]
}
```

## scripts/run_integrity.py

Verifies the hash chain of the orchestration log in strict mode. Returns ok if no log exists (first run).

```bash
python3 .claude/skills/orch-infra/scripts/run_integrity.py
```

Exit codes: `0` = chain intact (or no log), `1` = chain invalid or error.

Example output (ok):
```json
{"status": "ok", "check": "integrity", "timestamp": "...", "events_verified": 42}
```

Example output (blocked):
```json
{
  "status": "blocked",
  "check": "integrity",
  "timestamp": "...",
  "reason": "chain_invalid",
  "events_verified": 41,
  "first_error_seq": 42,
  "truncation_candidate": 42
}
```

## scripts/run_circuit_check.py

Evaluates circuit breaker state. Returns blocked if the circuit is tripped or should trip.
Returns ok if no log exists (first run).

```bash
python3 .claude/skills/orch-infra/scripts/run_circuit_check.py
```

Exit codes: `0` = circuit open (healthy), `1` = circuit tripped or evaluation error.

Example output (ok):
```json
{"status": "ok", "check": "circuit", "timestamp": "...", "tripped": false, "failure_count": 2, "threshold": 50}
```

Example output (blocked):
```json
{
  "status": "blocked",
  "check": "circuit",
  "timestamp": "...",
  "reason": "circuit_tripped",
  "tripped": true,
  "failure_count": 52,
  "threshold": 50
}
```

## What orch-infra does NOT do

- Does not know about phases or domains
- Does not read spec files or delivery artifacts
- Does not interact with humans
- Does not emit events to the log

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [zig999](https://github.com/zig999)
- **Source:** [zig999/siegard-code](https://github.com/zig999/siegard-code)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** yes
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-zig999-siegard-code-orch-infra
- Seller: https://agentstack.voostack.com/s/zig999
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.