verify-ac SKILL.md skillA
verify-ac from hsuanyulee/polaris is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add hsuanyulee/polaris/verify-ac@v3.0.0Pins v3.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- hsuanyulee/polaris
- Path
.claude/skills/verify-ac/SKILL.md- Versions recorded
- 15
- Latest version
- v3.0.0, committed Oct 29, 2026
- First version recorded
- Aug 28, 2026
- Size
- 31,204 bytes
- Repository stars
- 5
- License
- MIT
施工告一段落、要判這次到底算不算達成時的站。跑硬化 oracle 給出會擋人的機械判定，另出不擋人的判斷報告，兩者分開。流程的第二個關卡，也是最後一個。 某張單做到一個段落，要驗收的時候。例如「驗收一下」「這樣算完了嗎」「跑一次判定」 「可以出貨了嗎」，或剛從 engineering 交出來。 判 PASS 之後也在這裡寫交付紀錄，供釋出尾段讀。 不用於：還在做、只是想跑個測試看看（那是 engineering 的量測）、 決定下一站是哪一站（走 driving-work-to-done）。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# verify-ac — 第二關：執行 oracle
輸出有兩部分，權力不一樣：**機械判定會擋**（由 exit code 承載，不需要讀者同意）；
**判斷報告不擋**（帶引用的意見，由人裁）。把兩者混在一起，關卡就會開始擋一些沒人能精確
定義的東西，然後大家學會繞過它。
## 機械判定：三件事
```bash
# 1. assertion 沒被動過。這一步同時查兩件事：校驗值與內文對得上，且內文與 git 歷史一致。
# 對不上就停——這時審查根本還沒開始，因為成功的定義變了。
bash .claude/skills/verify-ac/scripts/frozen-assertion-fence.sh verify {issue}/index.md
# 2. 手上這條量測命令是登錄過的。換過而沒帶紅過證據的命令不被承認。
bash .claude/skills/verify-ac/scripts/record-measurement-change.sh verify \
--ledger {issue}/.spine/measurement-ledger.json \
--assertion-id A-P1 --command '<cmd>'
# 3. 跑量測。同時看 exit code 與正向證據——exit 0 而沒有正向證據不是通過。
bash .claude/skills/verify-ac/scripts/run-hardened-oracle.sh --command '<cmd>' \
--require-tool rg --expect-evidence '<真的量到東西的痕跡>' \
--evidence-out {issue}/.spine/evidence/<assertion-id>.json
```
任一項不成立就是非 PASS，沒有討論空間。
**一條命令被好幾條 assertion 共用時，用 `--assertion` 分組，一趟就產出全部證據**：
```bash
bash .claude/skills/verify-ac/scripts/run-hardened-oracle.sh --command '<cmd>' \
--assertion A-P1 --expect-evidence '<A-P1 自己的痕跡>' --evidence-out {issue}/.spine/evidence/A-P1.json \
--assertion A-P2 --expect-evidence '<A-P2 自己的痕跡>' --evidence-out {issue}/.spine/evidence/A-P2.json
```
…Read the whole file at its exact version.
How to install
mdr add hsuanyulee/polaris/verify-ac@sha256:bb7d42142ead032aThe line at the top of this page pins the label v3.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cxufp2oydx3nbr6r)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 15 versions of this file, between Aug 28, 2026 and Oct 29, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v3.0.0 latest | 2026-10-29 | 642395e | 31,204 B | A | view · diff |
| v3.0.0 | 2026-10-27 | 562a379 | 31,214 B | A | view · diff |
| v3.0.0 | 2026-10-27 | d55c51b | 30,596 B | A | view · diff |
| v3.0.0 | 2026-10-27 | 2904212 | 30,339 B | A | view · diff |
| v3.0.0 | 2026-10-14 | 09ef23d | 29,938 B | A | view · diff |
| v3.0.0 | 2026-10-06 | 91d097e | 29,411 B | A | view · diff |
| v3.0.0 | 2026-09-30 | ac2f215 | 28,911 B | A | view · diff |
| v3.0.0 | 2026-09-30 | b165f9b | 27,857 B | A | view · diff |
| v3.0.0 | 2026-09-21 | eb0311a | 26,368 B | A | view · diff |
| v3.0.0 | 2026-09-15 | f3c5b80 | 22,674 B | A | view · diff |
| v3.0.0 | 2026-08-31 | e02ac5d | 21,548 B | A | view · diff |
| v3.0.0 | 2026-08-30 | 2df4644 | 21,227 B | A | view · diff |
| v3.0.0 | 2026-08-30 | a275a0f | 19,440 B | A | view · diff |
| v3.0.0 | 2026-08-29 | 4754d29 | 18,628 B | A | view · diff |
| v3.0.0 | 2026-08-28 | 2fd1c7c | 18,487 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (31204 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
hsuanyulee/polaris · 5 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cxufp2oydx3nbr6r GET https://markdownregistry.com/api/v1/resolve?ref=hsuanyulee/polaris/verify-ac GET https://markdownregistry.com/api/v1/blob/bb7d42142ead032a0cb2cc7620d23c77257172537d5bd21b023613325a13f28c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.