claude-compaction-restore — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-compaction-restore (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Compaction keeps facts and loses connections. After a compaction you still know file names, row ids and decisions as items. What you lose is the web between them: why a file matters, what depends on what, which decision produced which artifact, what you were about to do next, and how this window relates to the ones before it. Seats whose value is a wide, long-running picture (planners, orchestrators, reviewers holding a standard) lose the most.
This skill keeps that picture alive across compactions. Before compacting, you write a restore map: a short summary plus the connections between things that already exist on disk. After compacting, you re-enter the world, read your own map, and rebuild the picture before acting. Over several compactions the maps chain into one continuous record: a global context window that outlives any single session.
The previous version of this skill is kept at reference/SKILL-v1.md for comparison.
Already on disk; point to it, don't copy it:
~/.claude/projects/<cwd-slug>/<session-uuid>.jsonl (the post-compaction restorerequest names the exact path). It holds every message and tool call you made, in order. It does not hold your reasoning;
SPEC.md, NOTES.md, PROGRESS.md), your seat'sLEARNED.md, evidence folders, branches and PRs.
Only in your head; write it down:
authorizes it;
The map is the second list, pinned to the first.
Every restored seat must come back competent. It should understand the OpenRig world and its command surface, the project, its own role, and where it stands in time. Some seats also need the global picture.
Both classes read the same thing: the ranked reading list in your own map, in order. They differ only in how far down the list they go.
| Class | Who | Reads |
|---|---|---|
| Default | drivers, builders, reviewers, QA, and any seat not listed below | Tier 1: the top of the list, to about 100k of real context |
| High-context | orchestrators, planners, advisors, leads: any seat that makes product, scope or routing decisions | Tier 1 and Tier 2, to about 200k of real context |
The tiers are real context added by the restore, on top of what the compaction summary leaves (about 60k). These budgets assume a context window of about 1M tokens; on a smaller window, scale them to about 10% and 20% of it. File size is a poor guide to that cost: in OpenRig's own runs, real context grew 1.7 to 2 times the bytes ÷ 4 estimate, because of line numbers on reads, tool output and your own reasoning. So rank to about 50k of bytes ÷ 4 for Tier 1 and about 100k for Tier 2, and check real usage at each checkpoint with rig compact-plan --json (your seat's estimatedUsedTokens).
Tier 2 buys width, not depth: more sources, more connections, more of the mission's history and the wider worlds, not the same files read more fully. Choose your class from your role (rig whoami --json). A per-seat instruction file or your own map can name the class explicitly, and that overrides the role default. In both classes, transcripts and the session JSONL appear only as targeted line ranges, never as whole files.
If there is no ranked list (no preparation turn happened), use this default order. Default seats stop at about 100k of real context:
SPEC.md and NOTES.md;High-context seats then add, to about 200k:
PROGRESS.md and recent returns;RESTORED notes;LEARNED.md.You are about to lose every connection you have built. Spend this turn making them durable.
What were the threads? What did you work out about how the pieces fit? What is unfinished? What did you decide, and why? What were you about to be wrong about?
request's completion instructions: use your ordinary file-edit tool to write the named .tmp file, with the exact completion marker as its last line, then finish and close it. The daemon publishes the completed map atomically; do not run a shell rename or write the final file incrementally. Do not substitute the seat folder or another map. Managed preparation normally publishes <launch cwd>/.openrig/compaction/preparation/<session>/<attempt>/RESTORE-MAP.md; its parent compaction folder ignores itself in Git because maps hold private working context. Unknown or unwritable launch directories retain the instance-home fallback named in the request; it may need permission if outside your working directories. When there is no named path, use your durable seat folder instead: <topology root>/rigs/<rig>/seats/<seat>/RESTORE-MAP-<UTC yyyymmdd-hhmm>.md, derived from rig whoami --json and rig config get topology.root. Run `date -u` for the timestamp and every time you write in the map. Do not estimate times: an estimated time can land before events it describes.
window, what is next and who authorizes it, and any hold in force. Publish that summary as your seat recap too: save it, plus a line naming the map's path, to a file and run rig context recap-write --rig <rig> --seat <seat> --file <that file>. If your world profile has a seat recap atom, it loads this recap, and an old recap would be served as if it were current.
it, the mission and slice you work in.
and why it matters.
F", "G is owned by seat H", "I and J disagree; unresolved".
caught or nearly missed.
grep -n the JSONL for a row idor timestamp), and which file holds the evidence for which claim.
grep -n), not thewhole file unless the whole file is the point;
wc -c);rig context profile … --json (totalEstimatedTokens).
context), and continue to about 100k for Tier 2 (about 200k real).
section that explains how things fit over a long file of detail you can look up later.
RESTORED note, if one exists) so a laterreader can walk back through earlier windows.
copying, and leave out what a command can re-derive.
LEARNED.md; mission state goes in the mission's own files; work another seat must act on goes in a queue row. The map points to these rather than repeating them.
/compact next; the summary shouldname the map path and the next authorized step.
A map that lists files without saying how they connect is an inventory, and an inventory is what compaction already leaves you. The edges are the point.
You have facts without connections. Rebuild the connections before you act on anything.
Use the native read tool for file reads throughout restoration. Load refocusing and consume the current topology and work trace that actually arrived with the restore request; do not rerun Python merely to duplicate it. If no current trace arrived, name that delivery gap. A packet pointer, compact summary or truncated extract is not a full source read. Read required notes and full sources separately and complete the restore steps and read-depth audit below; partial reading does not establish completed restoration. The earlier acknowledgement-only boundary is not a restore request.
(<OPENRIG_HOME>/compaction/post-compact-extra/<session>.md, named by your full session such as [email protected]) when it exists, the newest row or message from whoever routes your work, and any hold from the authority above them. A hold, a release order or an operator's own restore map overrides the default order below. Before any write, also run rig whoami --json and rig queue whoami.
checkpoint at each step below. The budget exists so that the restore leaves room for the work it was restored to do. Step 5 takes a high-context seat to its Tier 2 line; the extra sources under "Two restore classes" apply only when there is no ranked list.
rig context list; for a private world install, run rig context profile <world-ref> --situation post-compaction --rig <rig> --seat <seat> (the seat flags are needed for its seat-scoped recap atom; take both values from rig whoami --json). Without a private world, run rig context profile world-public --situation post-compaction and rig context get onboarding-width. This restores how the system works before you restore what you were doing in it. If your work belongs to a project, re-enter its declared context too: rig context work-install lists what the project declares (intent, context files, skills), so read the pieces your task needs. --deliver prints them all; when several projects are declared (--json lists the ids), name one with --project <id>.
request or compaction summary. Only when none names a path, look for the newest RESTORE-MAP-*.md in your seat folder. If the selected map points to an earlier map for context you need, read that too.
Then check every row you hold (rig queue show <id> --full --json) and anything that may have changed since the map was written: merged PRs, new rows, a new hold. The map records what was true when it was written; current state still has to be derived.
specific question needs it. The packet's restore-instructions.md and touched-files.md help find things the map does not cover.
restore-instructions.md, then the most recent unique narrative, tail first, within the budget; and say in your report that you restored without a map.
restored from packet at <path>; resumed at step <X>, naming the map you used. When no packet exists, give the map's path as <path> and say that you restored from the map.
The audit message asks for a read-depth table and tells you not to conserve tokens. Do both in this form:
map marks required) with FULL, PARTIAL or NOT_READ, the ranges you actually read, and a reason. Mark FULL only for content you read after this compaction; content carried in through the summary is inherited, not read, and a file the harness re-attached after compaction is PARTIAL (injected), not FULL, until you read it.
FULL. "Required" means the ranked entriesabove your class's tier line, in the exact parts they name. Everything else is lookup-only: every file in the restore packet (touched-files.md, restore-instructions.md, transcript.md, transcript-latest.md, restore-summary.json), the session JSONL and archives. Those stay NOT_READ with the reason "lookup only", unless a human or the owning seat releases them. The audit message's "do not optimize for token conservation" applies to required items: read those fully rather than skimming them. It does not turn lookups into reading lists. In an early run of this skill, reading the packet transcripts during the audit cost a default seat about 75k, more than the restore itself.
RESTORED-<UTC yyyymmdd-hhmm>.md beside themap:
The next restore map links this note, which keeps the chain unbroken.
Resume the outcome selected by the user's current instructions, standing duties and assigned work. Use existing task records, decisions and your recap to recover the next useful action, remaining constraints and evidence already earned. Check uncertain effects before replaying work. Available skills and historical suggestions do not by themselves widen scope or create required stages. Use authorized skills, subagents, peer help and useful tests within your remit without another permission request. Route a missing decision to its existing owner and continue unaffected work.
"lean" a seat or prepare a starter image; a compacted seat can sound confident while missing the context it needs.
PARTIAL with its reason is a correct outcome. Claiming coverage you did not reach is thefailure.
not why they matter.
work.
compaction.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.