القائمة
Use when working on tool-definition drift detection, MCP transport conformance, the live fleet probe, or the discovery-catalog snapshots that close the CI≠prod gap.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
| name | fleet-drift-conformance |
| description | Use when working on tool-definition drift detection, MCP transport conformance, the live fleet probe, or the discovery-catalog snapshots that close the CI≠prod gap. |
Follow AGENTS.md first. These tools catch two failure classes CI alone misses: prod divergence (a backend green in CI but dead / renamed in prod) and tool poisoning / rug-pull (a tool definition changing after approval).
make fleet-probe — live-probe every enabled backend for reachability + a non-zero tool harvest; fails loud on 0-tool or unreachable backends. Run before trusting /health.genefoundry-router drift (drift.py) — fingerprint each tool definition and diff a live snapshot against the pinned fleet manifest; exits non-zero for CI/cron.make conformance — MCP Transport & Session Standard v1 probe (single stateless /mcp, no 307, canonical serverInfo / health).make snapshot-fleet / make snapshot-catalog / make snapshot-baseline — regenerate the fleet manifest, discovery catalog, and pinned drift baseline.make fleet-probe (or drift / conformance) and read the diff.make snapshot-baseline / regenerate the catalog.make ci-local./health instead of a live harvest.