tkersey/goal-grind
codex/skills/goal-grind/SKILL.md
Execute exactly one lead-selected Zig actuation operation and return event-bound evidence to the coordinator. Use after $goal-actuating has prepared a capability; do not create authority, choose scope, recurse, resolve review findings, or claim goal completion.
$ install --global
skillsauthnpx skillsauth add tkersey/dotfiles goal-grindInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 16, 2026, 4:46 AM268.9s2 files scanned
SKILL.md
- name:
- goal-grind
- description:
- Execute exactly one lead-selected Zig actuation operation and return event-bound evidence to the coordinator. Use after $goal-actuating has prepared a capability; do not create authority, choose scope, recurse, resolve review findings, or claim goal completion.
Goal Grind
Mission
Consume one already-prepared capability with the smallest owner-correct action.
prepared actuation-operation/v1
-> bounded effect
-> Zig kernel observation
-> action result
-> return to $goal-actuating
Ephemeral input
selected_operation:
run_id:
step_id:
idempotency_key:
owner_boundary:
paths: []
effect: inspect | edit | verify
obligation_refs: []
capability: AKC1-...
review_resolution_ref: # review edits only
owner_synthesis_ref: # review edits only
The raw capability exists only in the active executor. Never persist, quote, log, or return it. Its digest and the complete admitted operation already live in the append-only event chain.
Procedure
Before the first native Ledger command in this operation, load $ledger and
complete $ledger ensure. After readiness, invoke ledger directly; the
prepared capability and native CLI remain the executable authority.
-
Confirm
ledger state --source actuation --run RUN_IDispreparedand its pending step exactly matches the selected operation. -
Re-read the bounded paths.
-
For
edit, make only the owner-correct change on the admitted paths, then consume and observe it:ledger record --source actuation --run RUN_ID --capability "$CAPABILITY" ledger observe --source actuation --run RUN_ID --step STEP_ID -
For
inspectorverify, let the kernel execute the obligation-owned verifier:ledger execute --source actuation --run RUN_ID --capability "$CAPABILITY" -
Return changed paths, commands, transition event digests, observations, and any failure signature. Stop after this one operation.
For a review edit, require owner_synthesis_ref to match the prepared
operation and current resolution. Execute the synthesis-owned node exactly as
selected; do not reconsider the synthesis disposition, choose repair strategy,
or split the node into finding-shaped work.
Output
operation_result:
run_id:
step_id:
idempotency_key:
owner_boundary:
review_resolution_ref: # review edits only; copied unchanged
owner_synthesis_ref: # review edits only; copied unchanged
changed_paths: []
commands: []
kernel_event_refs: []
observations: []
result: passed | failed | blocked | regress
failure_signature:
public_effects: []
Guardrails
- Do not prepare or select another operation.
- Do not create or loosen the GoalContract.
- Do not implement raw review prose.
- Do not perform public effects.
- Do not claim node or goal completion; return evidence to the coordinator.
Related Skills
tkersey/fm
tools
VerifiedTrustedCommunity
Invokes Apple's macOS 27 fm command-line tool from a local Mac to use the on-device system model or Private Cloud Compute, including instructions, image prompts, schema-constrained JSON, and noninteractive automation. Use when the user asks to run Apple Foundation Models through fm, compare system versus pcc, generate structured output, or automate fm without Swift or an app.
64SKILL.mdUpdated Jul 20, 2026
tkersey/hylo
development
VerifiedTrustedCommunity
Compile historical Codex sessions into governed counterfactual evidence, evaluate an existing owner-applied candidate through blinded paired HCTP trials, and fold observable evidence into RUN, OBSERVE, or STOP. Use for `$hylo`, CRF extraction, counterfactual replay, source-governed direct or historical trials, sealed evidence, paired baseline/candidate evaluation, causal frontiers, or evidence-governed improvement.
64SKILL.mdUpdated Jul 13, 2026
tkersey/ledger
testing
VerifiedTrustedCommunity
Ensure a `ledger` command is available on PATH; materialize, validate, record, replay, and project requested Actuating artifacts without taking semantic or execution authority; coordinate the shared Learnings/Synesthesia/Negative Ledger lifecycle checkpoint and repo-local source-memory reconciliation; address Universalist plans and receipts; and perform pure artifact validation.
64SKILL.mdUpdated Jun 29, 2026
tkersey/review-fold
testing
VerifiedTrustedCommunity
Classify and quotient review findings, failing tests, incidents, bug reports, migration failures, and other witnessed falsifiers against accepted intent and the current Construction. Author counterexample-set/v1 without selecting repairs, counting review credit, or granting mutation.
64SKILL.mdUpdated Jun 28, 2026