ariffazil/verify-runtime
skills/verify-runtime/SKILL.md
Verify federation service health and runtime behavior. Runs apex-health.sh, per-organ health probes (arifOS, GEOX, WEALTH, WELL, APEX, A-FORGE), and one behavior smoke per touched organ. Use after every deploy, restart, or after any task that claims "done". Confirms behavior, not just tests.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace verify-runtimeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 14, 2026, 3:32 AM141.8s1 file scanned
SKILL.md
- name:
- verify-runtime
- description:
- Verify federation service health and runtime behavior. Runs apex-health.sh, per-organ health probes (arifOS, GEOX, WEALTH, WELL, APEX, A-FORGE), and one behavior smoke per touched organ. Use after every deploy, restart, or after any task that claims "done". Confirms behavior, not just tests.
- when_to_use:
- Post-deploy, post-restart, post-skill-claim of "done", weekly audit, pre-commit on runtime-touching code.
- disable-model-invocation:
- false
- allowed_tools:
- [Bash, Read]
Verify Runtime
A task is done when tests pass, health checks green, and behavior is proven. This skill enforces the third leg.
Steps
/root/apex-health.sh— federation-wide port probe (all 8 organs)- Per-organ health probes (parallel where possible):
- arifOS:
curl -s :8088/health | jq - GEOX:
curl -s :8081/health | jq - WEALTH:
curl -s :18082/health | jq - WELL:
curl -s :18083/health | jq - APEX:
curl -s :3002/health | jq - A-FORGE:
curl -s :7071/health | jq
- arifOS:
- Drift check:
drift-watch(SHA mismatch between source and runtime) - One behavior smoke per touched organ (e.g. for arifOS:
arif_initround-trip) - Report: green/yellow/red per organ + 1-line summary
Verification loop
- All green → claim done
- Any yellow → log + continue, flag in summary
- Any red → 888 HOLD, consider rollback via organ's deploy-local
Failure modes
- Service slow to start → 30s grace, then red
- Port collision → check Caddy drift (
/etc/caddy/Caddyfile), surface to human - Drift detected → run
make deploy-localin the affected organ - Health endpoint missing → check organ's main.py / server.js for
/healthroute
Reference
- Federation health:
/root/apex-health.sh - Per-organ runbooks:
/root/RUNBOOK.md,/root/arifOS/deploy/RUNBOOK.md - Drift:
drift-watchskill
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026