cp-gate SKILL.md skillA
cp-gate from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/cp-gate@git:20261021.9117d5cPins git:20261021.9117d5c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/cp-gate/SKILL.md- Versions recorded
- 12
- Latest version
- git:20261021.9117d5c, committed Oct 21, 2026
- First version recorded
- Aug 26, 2026
- Size
- 36,232 bytes
- Repository stars
- 432
- License
- AGPL-3.0
执行 CP1（需求确认）/ CP2（方案确认）与条件 CP3（实施计划确认）。CP1→CP2 强制按序，CP3 按工作流能力矩阵判定。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## 模式判断 CP 门控**不受 ENV_MODE 影响**。dev/prod 均强制保持 CP1→CP2 顺序；CP3 是否 required 由工作流/子类型/风险决定： | ENV_MODE | CP 行为 | |----------|--------| | `prod`（默认）| CP1→CP2 强制按序；命中 CP3 条件时再确认实施计划 | | `dev` | 同 prod；额外执行完整规范与方案验证，不扩大 CP3 触发面 | > ⛔ CP 是用户交互机制（确认需求/方案/计划），与规范验证无关。CP1/CP2 必须确认；CP3 未触发时必须记录 `N/A + subtype/risk evidence`，不得伪装成已确认。 > **CP 跳过路径**：显式 `@devcodex-auto`、全局默认 `@rocky`、Profile `config.json` 的 `extensions.devcodex.autoAliases` 替换别名或明确自然语言 auto 授权（如“进入 auto 模式执行”）；这是 Agent 级行为，与 ENV_MODE 无关。 工作流能力的唯一结构化事实源为 `../routing/workflow-capabilities.json`；本文件只拥有确认交互和 CP3 细化条件。 ## WorkflowPlanDecisionV1（流程、方案与验证独立决策） CP1 前后必须使用 `workflow-plan-decision.v1.schema.json` 与 `hooks/_runtime/workflow-plan-decision-v1.cjs` 形成唯一决策对象： - 三个轴独立：`ceremonyTier=simple|standard` 只决定流程仪式，`designDepth=minimal|standard` 只决定技术方案深度，`assuranceLevel=targeted|affected|full` 只决定验证路由；任一轴都不得反推其他轴。 - 优先级固定为“用户当前任务明确意图 > `extensions.devcodex.workflowRouting` 配置 > 智能识别 > 回退”。Profile 配置只提供流程仪式默认值，不得覆盖用户当前意图，也不得降低验证或强制义务。 - 先基于 prompt/config 形成 `phase=precheck`，完成唯一项目与有界项目事实读取后形成 `phase=post-context`；只有实际 scope 扩张才形成 `phase=scope-expansion`。PC8 必须说明二次判断是否变化及原因。 …
Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/cp-gate@sha256:0c76dc0bdd01551fThe line at the top of this page pins the label git:20261021.9117d5c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_zizv7mco5y3ssh3g)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 12 versions of this file, between Aug 26, 2026 and Oct 21, 2026, about one every 5 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261021.9117d5c latest | 2026-10-21 | 9117d5c | 36,232 B | A | view · diff |
| git:20261017.1c96ba3 | 2026-10-17 | 1c96ba3 | 35,356 B | A | view · diff |
| git:20261017.f684a0e | 2026-10-17 | f684a0e | 34,461 B | A | view · diff |
| git:20261017.ff16c84 | 2026-10-17 | ff16c84 | 34,197 B | A | view · diff |
| git:20260915.a530a79 | 2026-09-15 | a530a79 | 33,545 B | A | view · diff |
| git:20260912.307f84e | 2026-09-12 | 307f84e | 33,537 B | A | view · diff |
| git:20260912.8688be4 | 2026-09-12 | 8688be4 | 32,902 B | A | view · diff |
| git:20260908.6caf1bf | 2026-09-08 | 6caf1bf | 32,118 B | A | view · diff |
| git:20260830.8b59a2d | 2026-08-30 | 8b59a2d | 32,174 B | A | view · diff |
| git:20260829.ef3a006 | 2026-08-29 | ef3a006 | 31,744 B | A | view · diff |
| git:20260826.937258a | 2026-08-26 | 937258a | 29,856 B | A | view · diff |
| git:20260826.db2bfbd | 2026-08-26 | db2bfbd | 29,808 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (36232 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_zizv7mco5y3ssh3g GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/cp-gate GET https://markdownregistry.com/api/v1/blob/0c76dc0bdd01551f17f53ed830e6f5f9201a224e984b55845c2a7ea53d2c49ae
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.