Menu
Use when working on tool-definition drift detection, MCP transport conformance, the live fleet probe, or the discovery-catalog snapshots that close the CI≠prod gap.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
| name | fleet-drift-conformance |
| description | Use when working on tool-definition drift detection, MCP transport conformance, the live fleet probe, or the discovery-catalog snapshots that close the CI≠prod gap. |
Follow AGENTS.md first. These tools catch two failure classes CI alone misses: prod divergence (a backend green in CI but dead / renamed in prod) and tool poisoning / rug-pull (a tool definition changing after approval).
make fleet-probe — live-probe every enabled backend for reachability + a non-zero tool harvest; fails loud on 0-tool or unreachable backends. Run before trusting /health.genefoundry-router drift (drift.py) — fingerprint each tool definition and diff a live snapshot against the pinned fleet manifest; exits non-zero for CI/cron.make conformance — MCP Transport & Session Standard v1 probe (single stateless /mcp, no 307, canonical serverInfo / health).make snapshot-fleet / make snapshot-catalog / make snapshot-baseline — regenerate the fleet manifest, discovery catalog, and pinned drift baseline.make fleet-probe (or drift / conformance) and read the diff.make snapshot-baseline / regenerate the catalog.make ci-local./health instead of a live harvest.