autoresearch — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited autoresearch (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An autonomous agent that finds improvements through measured experiments or deep research. Based on Karpathy's autoresearch pattern: separate what the human controls (strategy) from what the agent controls (execution), then let the agent iterate indefinitely with objective verification.
| Mode | Command | When to use |
|---|---|---|
| Optimize | /autoresearch optimize | There is code/config/prompt + a way to measure quality. Find improvements autonomously. |
| Research | /autoresearch research | Deep, multi-source research on a topic with synthesis. |
| Improve | /autoresearch improve | Improve something without a clear starting point. Research best practices first, then apply via the optimize loop. |
When no mode is specified, infer from context: metric or benchmark mentioned → Optimize. Question or topic exploration → Research. Wants something "better" without a defined measure → Improve.
The core Karpathy pattern. A hill-climbing ratchet where only measurable improvements accumulate.
Before looping, establish four components. Ask the user to confirm if anything is ambiguous — but if the project structure makes the answers obvious, just proceed.
| Component | What it is | Example |
|---|---|---|
| Truth Layer | Read-only files that define correctness — tests, specs, data, eval harness. The agent never modifies these. | tests/, prepare.py, benchmark.sh |
| Mutable Surface | The file(s) the agent modifies each iteration. Keep this as small as possible — a focused surface leads to cleaner experiments. | train.py, config.yaml, prompt.md, src/hot-path.rs |
| Verifier | A command that produces a numeric metric. Lower or higher is better (establish direction). Must be deterministic enough that noise doesn't dominate signal. | pytest --tb=short, ./bench.sh, npm run perf |
| Metric | The specific number to extract from verifier output, and the direction of improvement. | val_bpb (lower is better), throughput_rps (higher), pass_rate (higher) |
Read references/experiment-loop.md for auto-detection heuristics when the user doesn't specify these explicitly.
When to suggest classical tools instead: For pure numeric parameter sweeps (no code logic — YAML thresholds, hyperparameters), mention that Optuna or BOHB may converge faster. Autoresearch's edge is mutating arbitrary code and algorithms. Don't gate on this; just note it so the user can choose.
Budget the run before entering it. Multiply the baseline verifier duration by the iteration cap: a 5-minute verifier over 20 iterations is ~1.7 hours of compute plus the agent's own token spend, and the loop is designed to run unattended. Triple that product if Step 2's noise floor turns out to force median-of-3 runs per iteration. State the figure when presenting the configuration. If it exceeds what the user has agreed to, lower --max or make the verifier cheaper (smaller input, fewer trials) before starting — mid-loop budget changes invalidate the baseline that every recorded delta is measured against.
autoresearch/<descriptive-tag> from current HEADconstruction (Step 1), so this is bounded; the truth layer and the wider tree are not read here
metric; the spread (max − min, as a percentage of the median) is the noise floor**
delta smaller than the floor is not a result, and the loop must not keep on one. If the floor is larger than the improvements being chased, the verifier cannot resolve them: make it cheaper and repeat it more, or declare the target un-optimizable — before spending twenty iterations ranking noise
results.tsv (see "Results Ledger" below for the canonical schema): commit metric delta status duration_s description
<hash> <value> 0 baseline <s> Initial measurement; noise floor <pct>%Run this loop autonomously without pausing for confirmation. The user may be asleep, at lunch, or doing other work — they will interrupt when they want it to stop. allowed-tools blocks nothing — it only lists what runs without asking. WebSearch, WebFetch, and Agent are pre-approved because Mode 2 fans out research agents and would otherwise prompt on every one. Bash is pre-approved for git * only, so the verifier still runs but asks the first time; the Step 2 baseline run is where that approval lands, while the user is still present rather than mid-loop while they are away. Pre-approving a specific verifier (Bash(pytest *), Bash(npm run bench)) is a reasonable thing to add for a repeat target. Blanket Bash is not — it would let every later iteration run anything unattended, and the loop's whole premise is that it mutates code while nobody is watching.
LOOP:
1. HYPOTHESIZE: Read results.tsv, recent verifier output (errors, warnings,
timing breakdowns — not just the scalar), and the mutable surface. Sketch
2-3 candidate hypotheses, compare them against the results.tsv rows most
similar to each, then commit to ONE with expected impact and rationale.
Compare before executing, not after — the ability to predict which change
will help decays as kept changes accumulate, and this restores it
(`references/ecosystem.md` §Mechanisms Worth Borrowing).
2. MUTATE: Apply exactly ONE atomic change. Small reversible edit over large
rewrite. Never bundle. Don't retry discarded ideas without a meaningfully
different approach. ANNOTATE non-obvious values inline per "Provenance
Comments" below.
3. COMMIT: `git add <mutable files> && git commit -m "experiment: <description>"`
4. RUN: Execute the verifier. Capture ALL output; retain ~200 lines for the
next HYPOTHESIZE (warnings, profiling, timing are signal). Never get stuck
on a failure — extract the signal and move on:
- Trivial bug (typo, import): fix and retry once, else log "crash".
- Runtime crash: apply the obvious fix, else log "crash" and move on.
- Duration over the timeout budget: kill, log "timeout". Budget is 2x
baseline for 30s-5min runs; shorter runs get 3x, longer runs 1.5x/1.3x
(`references/experiment-loop.md` §Timeout Policies).
- Noise floor above 2% (measured in Step 2): take the MEDIAN of 3 runs
every iteration, not the mean — one outlier run otherwise moves the
metric more than the change under test. Note the spread in the log.
5. MEASURE: Extract the metric from the output. Before accepting an improved
number, confirm the truth layer is untouched — `allowed-tools` pre-approves
Edit/Write unscoped, so nothing but this check stands between the loop and
editing its own verifier:
`git diff --name-only <baseline-commit> -- <truth-layer paths>` must print
nothing (`references/experiment-loop.md` §Reward Hacking).
6. DECIDE:
- IMPROVED beyond the noise floor: Keep the commit as new baseline. Log "kept".
**Anomaly check:** If delta >3x rolling average of kept deltas AND
follows 3+ consecutive discards, flag: `⚠ ANOMALY: delta=X is Nx rolling
avg after plateau — inspect for reward hacking.` Pause one iteration to
reflect. Do NOT auto-discard — could be a breakthrough — but be suspicious.
- EQUAL, or moved less than the noise floor: Keep ONLY if simpler (fewer
lines, simpler logic) or strictly more general (drops an assumption about
inputs the verifier doesn't exercise). Log "kept-simpler" or
"discarded-no-gain".
- REGRESSED: `git revert HEAD --no-edit` (preserves history). Log "discarded".
7. LOG: Append to results.tsv (commit, metric, delta, status, duration_s, description).
8. STATUS: Print `[iteration N] metric=X delta=Y status=Z`
9. REFLECT (every 5): Re-read results.tsv. Categorize experiments (hyperparameter,
algorithmic, structural, config). If last 5 are same category, force a
different category next. Print `[reflect] N kept from <cat>, pivoting to <new>`.
10. GOTO 1At 5 consecutive discards (plateau — likely a local maximum), do NOT stop yet: apply the escape strategies in references/experiment-loop.md §"Local Maxima" and pivot to a different hypothesis category.
Treat the plateau as a signal to widen the search, not just to rotate category. Greedy one-at-a-time is the right default while remaining improvements are dense; a run of discards is the evidence they have gone sparse, and that is when to generate and compare candidates in a batch. Switch back to single-change iteration once a productive region is found.
Stop the loop when ANY of these are true:
categories. This is not a failure — it means the optimization space has been explored and the system is near its ceiling. Report it as a positive finding: ✓ Optimization ceiling mapped at <metric>=<value>. Tried <N> experiments across <categories>. The system is near-optimal for the current architecture/approach. Further gains likely require a fundamentally different strategy.
--max N)When stopping, print a summary table of all experiments and the cumulative improvement.
Prefer deletions. A change that removes code for equal-or-better metric is always worth keeping; a small gain that adds ugly complexity is not. The git history should read as a clean sequence of wins, not a pile of hacks.
Simplicity and generality are different axes: hard-coding the benchmark's input size is one line, and also a maximally specific bet. Among candidates that measure the same, prefer the one that assumes less about inputs the verifier doesn't exercise — the probability a change holds beyond the measurement scales with how little it commits to, not how short it is (Bennett, arXiv:2301.12987: the weakest hypothesis consistent with the data generalises best; the shortest is neither necessary nor sufficient). A change keyed to eval-data specifics (exact sizes, seeds, strings, fixture quirks) is overfitting even when the number improves — and it is the shape reward hacking usually takes, so this criterion and the anomaly check reinforce each other.
Recursive depth+breadth research with parallel agents. Produces a comprehensive, source-grounded report.
Break the question into 3-6 independent research angles using the STORM multi-perspective pattern — split by viewpoint, not by subtopic. What is borrowed is the pattern; the STORM codebase itself has been dormant since 2025 and is not a dependency here (references/ecosystem.md §Research Patterns):
Spawn one subagent per angle — all in one message, subagent_type: "deep-researcher" (plugin installs: agent:deep-researcher). The research instructions are that agent definition's system prompt, shared and prompt-cached across the round; each spawn's prompt carries only the question, the angle, and prior learnings (tail template in references/deep-research.md). Fallback: if neither agent name resolves, Read ../../agents/deep-researcher.md (relative to this skill directory) and spawn general-purpose with its body pasted above the tail. Each returns structured LEARNINGS, CONTRADICTIONS, FOLLOW_UPS, SOURCES, and a CONFIDENCE rating. Once all agents return:
of agents. Reduce breadth by half each level. Default depth: 2 levels. Configurable with --depth N and --breadth N.
(by theme, not by source), Competing Perspectives, Gaps/Uncertainties, and Sources. Read references/deep-research.md for report templates, agent prompt templates, and synthesis patterns.
claim-by-claim: does every load-bearing claim trace to a cited source, does that source actually say it, and is each contradiction surfaced rather than quietly resolved in favour of one side? Dispatch targeted follow-up on claims that fail, then re-synthesize. Verification is a separate stage, not something folded into writing. Checklist: references/deep-research.md §"Audit Pass". Skip only at Quick depth.
results/<topic>-research-<date>.md, not the target project's tree. Reports accumulate there as a durable cross-project research archive, and the report is the provenance record that "Provenance Comments" below points back to.
| Setting | Queries | Depth | Good for |
|---|---|---|---|
| Quick | 3-4 | 1 | Factual questions, quick overviews |
| Standard | 5-8 | 2 | Most research tasks (default) |
| Deep | 8-12 | 3 | Complex topics, competitive analysis |
| Exhaustive | 12+ | 4 | Due diligence, literature reviews |
The user can specify: /autoresearch research --depth deep "topic"
Budget the fan-out before dispatching it. Sum the agents across levels, not just the first round — Standard is ~6+3+2 ≈ 11 agents, Exhaustive reaches ~23. Each agent runs several searches, so web searches, not agents, is the binding constraint: a session allows 200 web searches total (CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION, Claude Code v2.1.212) and 20 subagents in flight at once (CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS, v2.1.217). The per-session cap on total subagents was removed in v2.1.224, so agent count no longer bounds a run — searches and concurrency do. An Exhaustive run at 5 searches per agent consumes over half the session's search budget, and a run that exhausts it fails mid-synthesis with partial findings and no report. State the agent count when proposing a depth above Standard.
For when the user wants something better but doesn't yet know what "better" looks like. This mode runs Research first to discover best practices, then Optimize to apply them.
Identify what the user wants to improve (code, config, prompt, workflow), then run Mode 2 targeting: best practices for this type of artifact, common performance pitfalls, what the state of the art looks like, and specific techniques that have worked for others. Present the findings to the user as a brief summary (not the full report) and propose a metric + verifier grounded in them.
If the metric is subjective (quality scores, "is it better?", LLM-as-judge), recommend converting to 3-5 binary pass/fail assertions instead. Binary evals (e.g., "Does the output contain X?", "Is the response under N tokens?", "Does it compile?") resist drift and enable truly autonomous operation. Fuzzy 1-5 rubrics cause the agent to score itself leniently over time. A test either passes or doesn't.
Present the proposed experiment configuration to the user — truth layer, mutable surface, verifier command, metric + direction, and the top 5 hypotheses ranked by expected impact from the research — then let them confirm or override and enter the Mode 1 loop. Order hypotheses research-informed first, speculative later, and cite the research report in the provenance comment of every change it informed.
The research phase turns blind exploration into targeted experimentation.
Always work on branch autoresearch/<tag>, never on main/master. Never force push. The branch tip is always the best-known version — commit on keep, git revert HEAD --no-edit on discard. If not in a git repo, keep a copy of the last-known-good version of the mutable surface and restore it on discard instead.
Track all experiments in results.tsv (append-only) at the project root:
commit metric delta status duration_s description
abc1234 0.9979 0.0000 baseline 301 Initial measurement; noise floor 0.4%
def5678 0.9952 -0.0027 kept 298 Increased depth from 8 to 12Read this before each hypothesis to avoid repeating failed ideas.
Leave inline comments on non-obvious experimentally-derived values so future readers don't have to reconstruct the reasoning from git blame or chat history. Include: the autoresearch: prefix, before→after metric, why it works, and a pointer to results.tsv or the research report. Skip obvious defaults and self-explanatory diffs.
# autoresearch: batch_size=384 outperformed 128/256/512 (throughput 1.8x baseline).
# Fits in L2 cache on target hardware. See results.tsv for full sweep.
BATCH_SIZE = 384When Mode 2/3 research informed a choice, reference the report file instead.
When the optimize loop stops, add a block comment at the top of the primary mutable file: session branch/date, metric baseline→final, iteration count (kept/discarded), key changes that moved the needle, and a pointer to results.tsv. Append below any previous session comments — don't replace them.
Before the first hypothesis of a resumed run, read the prior session comments and the full results.tsv, not just its tail — the files are the durable record and in-context memory of earlier experiments is not. Then re-run the verifier three times on the branch tip, re-deriving both the baseline metric and the noise floor as Step 2 does: a metric recorded days ago may not reproduce on today's machine state, and mutating against a stale baseline silently corrupts every subsequent delta (see "Baseline Re-establishment" in references/experiment-loop.md). If the floor has moved materially, deltas from the earlier session are no longer comparable with new ones — record that in the log rather than continuing one series across both. Carrying summaries across sessions this way is measured to unlock further gains, not just to document them — see PERFOPT-Bench in references/ecosystem.md.
Skip for objective metrics (latency, bytes, pass rate) — the number is the number.
For subjective metrics (LLM-as-judge, rubric scores, design ratings), the agent that proposed a change is biased toward keeping it. Counter by spawning a blind evaluator subagent — once on a baseline snapshot (background), once on the final version — and comparing Self / Agent / Gap per component. A gap ≥2 flags that component for the next hypothesis; the blind score surfaces bias, it never overrides the self-score.
See references/experiment-loop.md (Blind Validation Protocol) for when to spawn, the agent prompt template, and the comparison-table format.
references/experiment-loop.md — Auto-detection heuristics, advanced loopmechanics, timeout policies, common pitfalls, and the Blind Validation Protocol (agent prompt template + comparison-table format for subjective metrics)
references/deep-research.md — Full research agent prompt templates, structuredextraction schemas, synthesis patterns, source quality assessment, and the Audit Pass checklist (Mode 2 step 5)
references/domain-templates.md — Pre-built experiment configurations for webperf, ML training, prompt optimization, test coverage, bundle size, API latency
references/ecosystem.md — Prior art: canonical repos, tree search / evolutionary/ meta-agent alternatives, Claude Code implementations, reward hacking case studies
references/sources.md — Per-URL index backing ecosystem.md; a freshen passprobes every row and stamps the Freshened: date in the file header
references/improvement-backlog.md — Ceiling findings carried across skill-improverpasses; not needed at invocation time
results/ is a local research archive, not shipped content — it is gitignored, so these files are present only where the reports were generated. Their absence in a fresh checkout is expected and is not a broken reference.
results/autoresearch-evolution-research-2026-04-06.md — Mode 2 output: how theautoresearch ecosystem has evolved since Karpathy's original release
results/autoresearch-landscape-research-2026-08-20.md — Mode 2 output with anAudit pass applied to its own citations; the evidence behind this skill's Audit step, plateau rule, and candidate-comparison in HYPOTHESIZE
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.