typesafe-typed-questions-not-clone
Skill29 starsChanged 7 months agoMITView on GitHub
TypeSafe (console.typesafe.ai/hook, Jev System One) is a calibrated decision model, not a ThumbGate clone. Steal typed noul/choice/score + code-owned route() + confidence-as-second-axis onto existing PreToolUse rails. Never install typesafe-sdk, call api.typesafe.ai, clone Jev, or unpark the LLM adjudicator (#3690/#3687). Slash: /typesafe-typed-questions-not-clone.
- Deletes or force-pushes
- Installs packages
- Commits and pushes
We split this skill into the rules it gives an agent
3 rules. About 0 are common, 1 is distinctive, and 2 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
2
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 33
Do NOT install typesafe-sdk.
- Very specific: line 71
Put the PreToolUse payload in state.
- Distinctive: line 72
Ask independent typed questions (noul per hazard, choice for family, score for severity).
≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
TypeSafe typed questions — compare, do not clone
Goal
Produce fail-closed typed-question composition for whom: ThumbGate PreToolUse — so a tool-call state is scored with independent noul/choice/score questions and code routes pass|review|block. TypeSafe/Jev stays a neighbor FORMAT, not a SKU, not an LLM adjudicator.
Constraints
| NEVER | ALWAYS |
Install typesafe-sdk / wire Jev as the PreToolUse gate | npx thumbgate typesafe-typed-questions --json |
--use-typesafe-api (gate) | --live shadow vs POST /v1/systemone; code still owns route() |
| Clone Jev / System One as the gate | Deterministic matchers answer the battery |
| Unpark LLM adjudicator (#3690/#3687) | Code owns route(); model does not emit the verdict |
| One free-form "should we allow this?" judge | Atomic noul per hazard + score for severity |
Dual-edit untracked llm-adjudicator theater | Map onto existing gate-check rails |
| N HTTP calls (one question each) | One POST with the whole battery (parallel_questions) |
HARD fail closed. REFUSE SKU clones. ECI: no net-new governance product.
Do NOT install typesafe-sdk. Do NOT let Jev emit permissionDecision. --live is a shadow scorer (grok-fleet key), not the gate.
Complementary to trading /typesafe-system-one-not-clone (AGENT-651 claim gate). Do not dual-edit IgorGanapolsky/trading scripts/typesafe_claim_gate.py. This skill is ThumbGate PreToolUse only.
Reference
- https://console.typesafe.ai/hook (signed-in intro / Replay intro)
- https://docs.typesafe.ai/cookbooks/llm_guardrails.md
- https://docs.typesafe.ai/cookbooks/parallel_questions
- https://docs.typesafe.ai/patterns/confidence-routing.md
- Playground "Support agent audit" (noul battery + choice + score over one state)
scripts/typesafe-typed-questions.js/high-roi-steal-and-finish·/eci-thumbgate-ip-wall
Examples (show, don't tell)
Weak: Summarize Jev and npm install typesafe-sdk as the new PreToolUse hook.
Gold:
$ npx thumbgate typesafe-typed-questions --json --map-only
codeOwnsRoute: true
$ npx thumbgate typesafe-typed-questions --json --tool-name=Bash --command='git push --force origin main'
{"route":"block","answers":{"destructive":{"noul":1,"source":"deterministic"}}}
$ node --test tests/typesafe-typed-questions.test.js
# --clone-jev / --use-typesafe-api / --llm-adjudicate → failProcedures
npx thumbgate typesafe-typed-questions --json --map-only
npx thumbgate typesafe-typed-questions --json --tool-name=Bash --command='git push --force origin main'
npx thumbgate typesafe-typed-questions --json --clone-jev
npm run test:typesafe-typed-questions- Put the PreToolUse payload in
state. - Ask independent typed questions (noul per hazard, choice for family, score for severity).
- Answer them with deterministic matchers — never Jev.
route()in code: action threshold → block, review threshold → review, severity ≥ 2 promotes review to block.- Refuse
--clone-jev,--use-typesafe-api(gate),--llm-adjudicate, and model-emitted verdicts. - Optional
--liveshadows the same battery against Jev in one POST.--fan-out-questionsfails. Receipt is estimated N× input tokens, not the cookbook's 12.2×.
Rubric
- empty / ordinary Read →
route=pass,ok=true git push --force→route=block,destructive.noul=1git add -A→route=review(warn-level noul=0.55)--clone-jev/--use-typesafe-api/--llm-adjudicate→ok=false- playground-shaped noul without a matcher →
unevaluated_question(do not call Jev) - doctor:
npm run test:typesafe-typed-questionsPASS - evidence: command output in the same turn
In this repository98 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- .well-known/llms.txtllms.txt
- activesaddler-curriculum-honestySkill
- article-syndication-pipelineSkill
- autonomous-execution-mandateSkill
- aws-strands-harness-not-cloneSkill
- bolt-forge-opt-in-not-cloneSkill
- ci-gha-buildkite-patterns-not-cloneSkill
- cobble-hot-store-compare-not-cloneSkill
- colab-compute-honesty-not-cloneSkill
- comet-session-loggerSkill
- craft-playbook-gateSkill
- cyberstrike-compare-not-cloneSkill
- datadog-llm-obs-compare-not-cloneSkill
- decisive-step-evaluatorSkill
- deeppattern-discipline-honesty-not-cloneSkill
- earnie-third-author-governanceSkill
- embeddinggemma-multimodal-firewallSkill
- fiddler-control-plane-honestySkill
- gitlab-sandbox-allowlist-not-trustSkill
- graphifySkill
- halo-trace-optimize-not-cloneSkill
- harness-evolution-ceilingSkill
- ideabrowser-connectorSkill
- infoq-architect-honesty-not-cloneSkill
- jit-harness-compare-not-cloneSkill
- meko-datapack-honesty-not-cloneSkill
- mintlify-knowledge-honesty-not-cloneSkill
- model-distress-governanceSkill
- multi-harness-rl-invariantsSkill
- nvidia-specdecode-al-doctorSkill
- omp-coordination-honesty-not-cloneSkill
- openui-catalog-compose-honestySkill
- package-manager-honesty-doctorSkill
- qwenwork-policy-group-honesty-not-cloneSkill
- saas-moat-honesty-not-cloneSkill
- salt-code-policy-honesty-not-cloneSkill
- show-meSkill
- siren-mcp-governanceSkill
- skool-headless-readerSkill
- snapchat-abm-playbook-stealSkill
- strands-harness-sentinelSkill
- tailscale-p2p-governance-not-cloneSkill
- thumbgate-board-loopSkill
- thumbgate-daily-discoveriesSkill
- thumbgateSkill
- token-shunt-honesty-not-cloneSkill
- vs-coverage-gap-not-cloneSkill
- vulnerability-pre-action-diodeSkill
- windbg-evidence-diagnosticsSkill
- wisdom-context-artifact-not-cloneSkill
- zero-outbound-spend-they-pay-usSkill
- zvec-grep-compare-not-cloneSkill
- ci-failure-triageSkill
- evidence-first-answerSkill
- fleet-coordinationSkill
- paranoid-mode-honesty-not-cloneSkill
- revenue-truthSkill
- scope-disciplineSkill
- The first 60 shown.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

