agent-design-doctrine SKILL.md skillA

agent-design-doctrine from urmzd/dotfiles is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add urmzd/dotfiles/agent-design-doctrine@git:20260717.aa74bbe

Pins git:20260717.aa74bbe in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
urmzd/dotfiles
Path
dot_agents/skills/agent-design-doctrine/SKILL.md
Versions recorded
1
Latest version
git:20260717.aa74bbe, committed Jul 17, 2026
Size
4,096 bytes
Repository stars
5
License
Apache-2.0

House doctrine for designing LLM agent systems: safety enforced by the harness and tools rather than model goodwill, tools that execute and return results, minimal loop code, interface-first component seams, typed config, deterministic evals over LLM judges, and POC scope discipline. Use when designing or reviewing any agent, tool-use loop, eval harness, or agent-backed CLI, in any framework. Do NOT use for Pydantic AI framework mechanics (use building-pydantic-ai-agents), generic design…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Agent Design Doctrine

Stable architectural positions for agent systems. Apply these before writing
code and cite the violated rule when reviewing.

## 1. Safety lives in the harness, never the model

The model is a planner, not a guard. Enforce every safety property at a layer
the model cannot talk its way past.

| Layer | Enforcement |
| ----- | ----------- |
| Database | Read-only role, statement timeout, row limits |
| Tool implementation | Validate and sanitize inputs, allowlist operations, cap output size |
| Harness | Turn limits, budget caps, kill switches |
| Prompt | Guidance only. Never the sole control for anything destructive |

If a safety rule is only stated in the system prompt, it does not exist.

## 2. Tools execute and return results

A tool call does the work and returns the outcome. The model decides what to
do with a failure; the tool never defers execution back to the loop or leaks
partial state into context.

- Wrong: tool returns SQL for the loop to run later.
- Right: tool runs the SQL (under harness limits) and returns rows or a
  structured error the model can react to.

## 3. Minimal loop code
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add urmzd/dotfiles/agent-design-doctrine@sha256:be27f86d591fff72

The line at the top of this page pins the label git:20260717.aa74bbe, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_uz7owul6jxokhcgn.svg)](https://markdownregistry.com/a/art_uz7owul6jxokhcgn)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jul 17, 2026.

versioncommittedcommitsizeaudit
git:20260717.aa74bbe latest2026-07-17 aa74bbe 4,096 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (4096 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

urmzd/dotfiles · 5 stars · license Apache-2.0 · pushed 2026-11-03 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_uz7owul6jxokhcgn
GET https://markdownregistry.com/api/v1/resolve?ref=urmzd/dotfiles/agent-design-doctrine
GET https://markdownregistry.com/api/v1/blob/be27f86d591fff72df7c0327073e2f2ebdf68699c3431f3da8fe1a2916ef03ef

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from urmzd/dotfiles

AGENTS.md AGENTS.md file
urmzd/dotfiles · AGENTS.md
git:20261029.87faea9 · audit B · 5 stars
AGENTS.md@dot_agents AGENTS.md file
urmzd/dotfiles · dot_agents/AGENTS.md
git:20260530.1caba92 · audit A · 5 stars
align-readmes SKILL.md skill
urmzd/dotfiles · dot_agents/skills/align-readmes/SKILL.md · Audit and converge README.md across every local urmzd/* checkout so the fleet reads as one product: skip archived…
git:20261020.f6dc06f · audit A · 5 stars
asd-ste100 SKILL.md skill
urmzd/dotfiles · dot_agents/skills/asd-ste100/SKILL.md · Write or rewrite text in ASD-STE100 Simplified Technical English (STE): the approved-word dictionary discipline…
git:20260724.55c8372 · audit A · 5 stars
assess-quality SKILL.md skill
urmzd/dotfiles · dot_agents/skills/assess-quality/SKILL.md · Foundational quality framework: the five questions (readable, easy to start, expands without bloat, consistent…
git:20261029.73191d5 · audit A · 5 stars
audit-security SKILL.md skill
urmzd/dotfiles · dot_agents/skills/audit-security/SKILL.md · Scans a repo and host for leaked keys and secrets (gitleaks, trufflehog), audits SSH/GPG/.env file permissions, checks…
git:20260530.d3be4dd · audit A · 5 stars
build-cli SKILL.md skill
urmzd/dotfiles · dot_agents/skills/build-cli/SKILL.md · Design and audit CLI tools end-to-end: output modes, TTY detection, JSON piping, stderr/stdout separation, color/symbol…
git:20260530.d3be4dd · audit B · 5 stars
check-project SKILL.md skill
urmzd/dotfiles · dot_agents/skills/check-project/SKILL.md · Validate project structure against scaffold conventions -- check for required files, CI consistency, documentation…
git:20261030.540b71f · audit A · 5 stars
choose-stack SKILL.md skill
urmzd/dotfiles · dot_agents/skills/choose-stack/SKILL.md · Canonical tech-stack reference organized by purpose: release/versioning (sr), docs/demos (teasr, fsrc), codegen (oag)…
git:20260530.d3be4dd · audit A · 5 stars
clean-docs SKILL.md skill
urmzd/dotfiles · dot_agents/skills/clean-docs/SKILL.md · Clean and modernize documentation in place. Enforce no em dashes, readable structure, proper Markdown formatting…
git:20260712.ae7b7ce · audit A · 5 stars
community-health SKILL.md skill
urmzd/dotfiles · dot_agents/skills/community-health/SKILL.md · Scaffold the GitHub Community Standards files (CODE_OF_CONDUCT, SECURITY, ISSUE_TEMPLATE, pull_request_template) using…
git:20260530.d3be4dd · audit A · 5 stars
configure-ai SKILL.md skill
urmzd/dotfiles · dot_agents/skills/configure-ai/SKILL.md · Authors AGENTS.md and defines the skills-vs-docs boundary for a repo. Configures AI coding tools (Claude Code, Codex…
git:20261029.73191d5 · audit A · 5 stars

Every file in urmzd/dotfiles

Browse by kind, by grade A, or by owner.