Home / juliusbrussee / caveman · GitHub

caveman-manage SKILL.md skillA

caveman-manage from juliusbrussee/caveman is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add juliusbrussee/caveman/caveman-manage@git:20260823.8909f6a

Pins git:20260823.8909f6a in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: juliusbrussee/caveman
Path: skills/caveman-manage/SKILL.md
Versions recorded: 2
Latest version: git:20260823.8909f6a, committed Aug 23, 2026
First version recorded: Aug 11, 2026
Size: 3,916 bytes
Repository stars: 118,366
License: Apache-2.0

Inspect Caveman Cloud's experiment lifecycle and block unsafe execution. Use when asked to start, approve, cancel, promote or roll back a Caveman experiment.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Manage eval-gated experiments

Treat every lifecycle change as a production control action. Read current state
and results, then report one supported recommendation or block.
Current agent MCP is intentionally read-only: control-api does not yet enforce a
complete lifecycle transition table and evidence gate atomically.

## Non-negotiable gates

1. A request to review, inspect, explain, or recommend authorizes reads only.
2. Never approve an experiment whose results are pending, whose required
   guardrails are absent, or whose evidence reports a breach.
3. Never convert experiment lift into `verified_savings`. Only active real
   traffic plus provider-causal, provider-complete ledger evidence can do that.
4. Never supply an organization id. Project and tenant scope come from the
   logged-in Caveman identity and server RBAC.
5. Never execute a lifecycle mutation, even after user approval. Exact
   `<action>:<experiment_id>` strings are agent-generatable and are not proof of
   human intent.
6. Unknown states and server errors fail closed. Report exact
   `cave_snake_code`.

## Step 1 — Load project and experiment

Prefer MCP:

```text
caveman_context {}
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add juliusbrussee/caveman/caveman-manage@sha256:3404a3c8651d63b6

The line at the top of this page pins the label git:20260823.8909f6a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_6yqo35ll7cf7wrcs.svg)](https://markdownregistry.com/a/art_6yqo35ll7cf7wrcs)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Aug 11, 2026 and Aug 23, 2026, about one every 12 days.

version	committed	commit	size	audit
git:20260823.8909f6a latest	2026-08-23	8909f6a	3,916 B	A	view · diff
git:20260811.82864c8	2026-08-11	82864c8	4,114 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (3916 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

juliusbrussee/caveman · 118,366 stars · license Apache-2.0 · pushed 2026-11-08 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_6yqo35ll7cf7wrcs
GET https://markdownregistry.com/api/v1/resolve?ref=juliusbrussee/caveman/caveman-manage
GET https://markdownregistry.com/api/v1/blob/3404a3c8651d63b6a7c02ccda17fcb4fca2489e931bb814580979a9ff548a48e

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.