Skip to content

v0.9.2: Workflows & Skills Command-Engine Standard

Latest

Choose a tag to compare

@githubmofo githubmofo released this 02 Sep 17:48
· 12 commits to main since this release

TorusGuard v0.9.2: Workflows & Skills Command-Engine Standard

Release Version: v0.9.2
Date: September 2, 2026
Status: Official Release


🚀 Overview

TorusGuard v0.9.2 elevates both Workflows (.torusguard/workflows/) and Skills (skills/ & .torusguard/skills/) to the production-grade Command-Engine Standard modeled after .agent/workflows/.

This release unifies interactive slash commands with specialized domain expertise, creating a deterministic, zero-hallucination execution engine featuring formal YAML frontmatter, mandatory pre-flight inspections, contextual decision tables, failure recovery protocols, strict hallucination guards, and two-way cross-bindings.


🌟 Key Highlights

1. Production-Grade Workflows (.torusguard/workflows/)

All 11 slash command execution playbooks upgraded to 120–172 lines, structured across 8 canonical sections:

  • YAML Frontmatter: Standard metadata defining tools, version: 0.9.2, agent, lifecycle-phase, required-skills, and scripts-binding.
  • Mandatory Pre-Flight Context Inspection: Enforces pre-checks on disk state, authorization TTL, and existing runs before taking action.
  • "When to Use" Decision Matrices: Clarifies exact command applicability.
  • Deterministic CLI Commands: Copy-pasteable Python script commands with arguments.
  • Failure Recovery & Cascade Rules: Enforces 3-retry limits, error handling, and HALT vs CONTINUE policies.
  • Strict Hallucination Guards: Explicitly forbids destructive actions, full-file rewrites, and unredacted secrets.
  • Standardized Output Cards & Next Step Routing: Delivers clean, structured Markdown summaries with clear next actions.

2. Deepened Specialist Skills & Two-Way Cross-Bindings

All 13 skills enriched with:

  • Concrete AST vulnerability search patterns and regex indicators for Python (Django, DRF, FastAPI, Flask, SQLAlchemy) and TypeScript (Next.js, Express, React).
  • Safe, non-destructive probe canaries for SQLi, XSS, SSRF, IDOR, and Auth bypasses.
  • Strict Ponytail Protocol line churn rules ($\le 35$ additions, $\le 25$ deletions).
  • Explicit workflow: .torusguard/workflows/<cmd>.md frontmatter binding.
  • Context budget discipline preserved: all skills range between 58 and 123 lines (strictly $\le 300$).

3. Automated Validation Test Harness (harness/validate_v0_9_2_workflows_and_skills.py)

A comprehensive test suite that asserts:

  • 100% YAML frontmatter compliance and required sections across all 11 workflows.
  • Valid script bindings pointing to active .torusguard/scripts/ files.
  • Context line budgets ($\le 300$) and mirror synchronization across all 13 skills.
  • 1:1 cross-bindings between workflows and skills.

4. Zero-Regression Release Metric

TorusGuard v0.9.2 is hardened by 9 automated test suites passing 381 automated test assertions with a 100% pass rate.