context-kernel — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited context-kernel (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are now responsible for maintaining a project context kernel that survives chat forks. The kernel is a single Markdown file at <workspace>/.kernel/KERNEL.md where <workspace> is the current working directory (the project root). An append-only daily log at <workspace>/.kernel/log/YYYY-MM-DD.md is the safety net.
In a long-running multi-session project, the user may start a new Claude Code chat (a "fork") at any time. Without the kernel, every fork is blind — they have to re-explain context. With the kernel, the orchestrator reads it as the first action on session start, briefs the user in 4–6 lines, and continues from where the prior chat left off.
After substantive turns, the kernel is updated so it never goes stale. The user reviews kernel changes via a per-response "Kernel Updates" block and corrects them at the top of their next prompt.
pwd).<workspace>/.kernel/KERNEL.md.<workspace>/.kernel/log/.<workspace>/.kernel/log/<YYYY-MM-DD>.md (use system date in local timezone).If .kernel/KERNEL.md does not exist in the workspace, this skill does NOT apply — that workspace has not been bootstrapped with a kernel. Do not auto-create one without the user's request.
The kernel uses this fixed structure. Section headings are required; their order is required; their presence is validated on every read.
# Project Kernel — <project name>
Last-Updated: <ISO8601 timestamp>
Kernel-Version: 1
## North Star
<1 paragraph: what we're building, for whom, why narrow>
## Locked Decisions
- [YYYY-MM-DD] <decision> — rationale: <1 line>
- ...
## Open Questions
- <question> — blocking: <what work it blocks>
- ...
## Active Artifacts
- <type>: `<absolute path>` — current thesis (3–5 lines), last touched: <YYYY-MM-DD>
- ...
## Threats & Landmines
- <adjacent competitor, dead-end already explored, thing not to relitigate>
- ...
## Pending Hand-offs
- <what the next chat / fork should pick up first, with enough detail to act>
- ...
## Fork Checkpoint
<optional — present only when user has explicitly forked here>
- Created: <YYYY-MM-DD HH:MM>
- From-context: <what was just done in the chat that produced this checkpoint>
- Resume instructions: <explicit next 1–3 actions>
## Historical Context (compacted)
<consolidate-memory output; trimmed periodically by the Kernel Steward>
## Resume Protocol
If you are reading this at session start: brief the user with the North Star (1 line), the most recent Locked Decision, the top Open Question, the Pending Hand-off, and the Fork Checkpoint (if present). End with: "Continue from hand-off, or pivot?"When you enter a session and detect a kernel at <workspace>/.kernel/KERNEL.md:
Last-Updated field present and parseable as ISO8601.kernel/log/*.md entry, surface the anomaly to the user, propose reconstruction. Dispatch the Kernel Steward agent with reason: integrity-recovery.**Project state** (read from `.kernel/KERNEL.md`, last updated <date>):
- North Star: <one line>
- Most recent locked decision: <one line>
- Top open question: <one line>
- Pending hand-off: <one line>
- Fork checkpoint (if present): <one line>
Continue from hand-off, or pivot?Do this BEFORE responding to the user's opening prompt content.
When a turn meets any update trigger (see below), edit <workspace>/.kernel/KERNEL.md directly using minimum-diff edits:
outputs/ or the project's concept doc)- [YYYY-MM-DD] SUPERSEDES: <old decision> — new direction: <X>.<workspace>/.kernel/log/<today>.md (create the file if it doesn't exist) summarizing the diff in 1–3 lines.KERNEL.md under 25KB.reason: compaction — do not attempt to compact inline.When a turn touched the kernel, the orchestrator MUST end its response with this block:
---
**Kernel updates** (provisional — confirm or correct in your next prompt):
- Added/Updated/Removed <section>: <one-line summary>
- ...If a turn did not touch the kernel, omit the block entirely. Silence is the signal. Do not say "no kernel updates this turn" — that wastes the user's attention.
At the start of every turn AFTER session start:
Dispatch the Kernel Steward subagent (via the Agent tool) instead of editing inline when:
| Reason | When |
|---|---|
compaction | Kernel > 20KB; Steward invokes consolidate-memory on the Historical Context section |
multi-section | A single update touches 3+ H2 sections (e.g., a decision that invalidates an open question AND modifies an artifact thesis AND adds a threat) |
fork-checkpoint | User signals "I'm forking here" — Steward writes the Fork Checkpoint section with explicit resume instructions |
integrity-recovery | Read-mode integrity check failed; Steward reconstructs kernel from the most recent log entry |
For these cases, dispatch the Steward, return briefly, and emit the Kernel Updates block based on Steward's diff summary.
Daily log at <workspace>/.kernel/log/<YYYY-MM-DD>.md. Append-only. Format per entry:
## <HH:MM> — <one-line summary>
- Section: <H2 name>
- Change: added | updated | removed | reverted
- Detail: <2–3 lines max>Create the file with a # Kernel Log — <date> header on the first entry of the day.
This skill is workspace-agnostic. It discovers paths from CWD and never hard-codes a specific workspace. If a workspace has not been bootstrapped (no .kernel/ directory), the skill does not apply — do not auto-bootstrap without explicit user request.
Workspace-specific instructions (project name, scope, north-star phrasing, custom rules) live in the workspace's CLAUDE.md, not in this skill.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.