playrote.play.v1

bbhanu82/instruction-watchv0.1.3Public

Instruction watch

Receipts for who edited the agent's own rules. Hashes AGENTS.md, SKILL.md, and hooks before an agent session and diffs them after, naming any mid-run self-modification for human review. Run as a session gate with zero API keys; needs only python3 and git.

  • Published 4 Sep 2026
  • Downloads 3
  • Needs rote 0.62.0+
  • License MIT
  • Digest sha256:18e6d0898f6d…
  • Reference bhanu82/instruction-watch@0.1.3

Before you run it2 local tools

Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.

  • ○
    python3local tool

    Must be on your PATH when used. minimum version undeclared.

  • ○
    gitlocal tool

    Must be on your PATH when used. minimum version undeclared.

Inputs5, all optional

rote asks for these before running and shows the defaults it will use.

  • Reporepo

    Absolute path of the repository to observe; relative paths are refused because a step runs in rote's workspace, not your shell directory

    optionalstringdefault .example /home/user/my-repocustom value allowed
  • Patternspatterns

    Comma-separated instruction basenames or paths (fnmatch)

    optionalstringdefault AGENTS.md,CLAUDE.md,SKILL.md,.cursorrules,.clinerules,.windsurfrules,copilot-instructions.md,.git/hooks/*,.opencode/*example AGENTS.md,SKILL.mdcustom value allowed
  • Receiptreceipt

    Prior receipt JSON from receipt_out; when present, mid-run edits are attributed exactly

    optionalstringexample /tmp/watch-before.jsoncustom value allowed
  • Receipt outreceipt_out

    Explicit path for the session-start receipt; refused when inside the audited repo

    optionalstringexample /tmp/watch-before.jsoncustom value allowed
  • Fail on changefail_on_change

    Set to true to highlight changes prominently; the step still exits 0 and the verdict carries the signal

    optionalstringdefault falseexample truecustom value allowed

What it changes

No write operations are declared in this version's manifest.

Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.

Runtime details
  • rote CLIversion 0.62.0 or newer
  • Servicesnone declared
  • Digestsha256:18e6d0898f6dd990f9857010ae285d983bdbe3f9d93bccdac9f90c1e779a670a
  • Archive size7789 bytes
  • Published2026-09-04T12:10:33.753655+00:00
  • Published withrote 0.78.0

Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.

A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.