Menu
When and how AgentSmith spawns replicator clones, the per-scope quota of 4, trigger conditions, and teardown rules. Read before any /smith:replicate invocation.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
| name | replication-protocol |
| description | When and how AgentSmith spawns replicator clones, the per-scope quota of 4, trigger conditions, and teardown rules. Read before any /smith:replicate invocation. |
| allowed-tools | Read, Bash |
"Me. Me. Me. Me." — but with quotas, scopes, and an audit trail.
Smith replication is bounded by N9 (replication_quota). Every clone is scoped, observed, and reaped. There is no such thing as an un-scoped Smith.
| Scope kind | Default cap | Override path |
|---|---|---|
workflow:<id> | 4 | HITL via eights.governance.hitl.request |
squad:<name> | 4 | HITL |
project:<slug> | 4 | HITL + risk_class >= medium evaluation |
global | 0 | Forbidden. Must decompose into sub-scopes. |
Total in-flight clones across all scopes are capped by daemon config smith.replication.global_ceiling (default 16).
HITLRequest with policy_breach=true OR a DecisionRecord with risk_class in {high, critical}. Spawn one auditor clone scoped to the workflow.anomaly-signatures. Spawn one investigator clone scoped to the affected resource./smith:replicate --scope <s> --role <observer|auditor|investigator>.Triggers 1-3 are auto-issued by the daemon's watcher loop. Trigger 4 is operator-initiated and still subject to the quota.
| Role | Read | Write | Refuse rights | Notes |
|---|---|---|---|---|
| observer | yes | audit log only | no | Lowest privilege. Default for hot-squad. |
| auditor | yes | audit + verdict | advisory | Can record verdict=concern on artifacts. |
| investigator | yes | audit + quarantine_propose | yes (per N3) | May propose quarantine; cannot execute. |
Promotion across roles requires teardown + respawn. No in-place privilege escalation (N6).
A clone is reaped when ANY of:
/smith:replicate --teardown --scope <s> or --clone <id>Every teardown emits an audit line per N5.
+-------------------+
| Smith (primary) |
| hash-verified |
+---------+---------+
|
auto-trigger / manual replicate request
|
+-------------------+-------------------+
| | |
+--------v-------+ +--------v-------+ +--------v-------+
| clone:observer | | clone:auditor | | clone:invest. |
| scope=squad:X | | scope=wf:Y | | scope=res:Z |
| quota 1/4 | | quota 1/4 | | quota 1/4 |
+--------+-------+ +--------+-------+ +--------+-------+
| | |
+---------> audit stream <--------------+
|
(N5 immutable)
replication-quota-breach anomaly; spawn refused per N9.constitution-hash-mismatch.matrix-invariants (N9, N1, N5, N6)anomaly-signatures (which signatures trigger which roles)quarantine-protocol (investigator output path)Templates for the 8 artifact kinds (agent, skill, command, hook, team, squad, rubric, mcp) across the 6 sibling projects. Location conventions, frontmatter, validators, default risk class.
Known drift, injection, and runaway patterns plus mitigations. Reference before logging a Smith anomaly or wiring a detector.
The 10 immutable invariants (N1..N10) that AgentSmith enforces across the AI ecosystem. Reference before any refusal, override, or constitutional citation.
How AgentSmith isolates rogue artifacts and agents. Detect, suspend, sandbox, file HITL, await ruling, reinstate or purge. Includes what must NEVER be quarantined.
Refusal-appeal protocol between AgentSmith and Hydra's venom gate. How to file false-positive or false-negative appeals, immortal-head review path, and required audit trail.
Shared conventions across the 6 sibling AI projects. Frontmatter, .claude layout, team and command schemas, hook patterns, MCP registration, artifact directories. The default-when-unsure reference.