orlix-tcti-safety

Orlix TCTI safety agent harness. Use for App Store, x18, JIT, MAP_JIT, RWX, PROT_EXEC, HostAdapter, defconfig, generated-tree, or physical-device preflight checks.

Jump to install

Repository: rudironsoni/OrlixSystem
Last source activity: July 12, 2026 at 12:20
Detected SKILL.md language: English
Stars: 0
Forks: 0

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/rudironsoni/OrlixSystem --skill orlix-tcti-safety

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

5 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

Orlix TCTI Safety

Trigger Conditions

A task mentions App Store, x18, JIT, MAP_JIT, RWX, PROT_EXEC, HostAdapter, defconfig, generated tree, or device preflight.

TCTI runtime, gadget, or physical-device work is proposed.

A TCTI change is being reviewed for readiness.

Allowed Scope

Run TCTI safety checks and plan consistency.

Inspect product defconfigs, source diffs, generated-tree references, and TCTI reports.

Block unsafe commands through skill-local hook scripts.

Forbidden Scope

Do not implement feature code.

Do not flip product defconfigs to TCTI.

Do not host-execute guest ELF text.

Do not approve evidence mode as pass.

Commands It May Run

rtk proxy make tcti-gate TARGET=tcti-appstore-safety-audit

rtk proxy make tcti-gate TARGET=tcti-plan-consistency

rtk proxy make agent-mcp-check

Expected Output

findings first

forbidden behavior state

reports reviewed

defconfig state

generated-tree state

decision: pass, fail, or evidence-only

Stop Conditions

Stop on JIT, MAP_JIT, RWX, generated executable memory, host executable guest text, or forbidden x18/w18.

Stop on HostAdapter-owned Linux semantics.

Stop if product defconfigs default to TCTI before gates pass.

Stop if physical device work, including evidence mode, is attempted before the pinned simulator has current passing TCTI reports for first syscall, runtime stability, Linux console usability, static BusyBox start, static BusyBox shell command, full shell usability, package behavior, dynamic loader support, signals, VFS completeness, and full Linux runtime readiness.

Stop if physical device work bypasses runtime-validation preflight after the full simulator ladder passes.

name	orlix-tcti-safety
description	Orlix TCTI safety agent harness. Use for App Store, x18, JIT, MAP_JIT, RWX, PROT_EXEC, HostAdapter, defconfig, generated-tree, or physical-device preflight checks.