Cross ValidationSAFE
wanman is an open-source agent matrix runtime inspired by Japanese one-man trains. It lets human users step back into an observer role while local agent runtimes coordinate autonomous multi-agent workflows, task execution, and artifacts.
Overview
wanman is an open-source agent matrix runtime inspired by Japanese one-man trains. It lets human users step back into an observer role while local agent runtimes coordinate autonomous multi-agent workflows, task execution, and artifacts.
f0c3ec2eb827OBSERVED · 2026-10-13What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: cross-validation
description: CEO checks consistency of agent outputs during post-completion review
---
# Output Consistency Validation
## When to Execute
After `wanman task list` shows all tasks with status=done, perform output consistency validation **before inspecting artifact data**.
## Validation Process
### Step 1: Collect All Output Files
```bash
# List all agent output files
find /workspace/agents -name "*.md" -o -name "*.html" | grep -v CLAUDE.md | sort
```
### Step 2: Extract Key Facts
Extract the following key information from each file:
| Fact Type | Example |
|-----------|---------|
| Brand name | "COFFEE TO" |
| Tagline | "Coffee to, begin." |
| Address | 2-XX-XX Kamimeguro, Meguro-ku, Tokyo |
| Business hours | 8:00 - 20:00 |
| Opening date | 2026.4.1 |
| Menu prices | Drip Coffee ¥500 |
| Instagram handle | @coffee.to.nakameguro |
| Color HEX values | #2D1B0E, #F5E6D3 |
### Step 3: Compare for Consistency
Cross-check file by file:
```
Brand guide (marketing) brand name ←→ Website (dev) brand name
Brand guide tagline ←→ Poster (marketing) tagline
Brand guide colors ←→ Website CSS colors
Financial report pricing ←→ Website menu prices
Poster opening date ←→ Social media content date
Poster address ←→ Website address
```
### Step 4: Handle Inconsistencies
When inconsistencies are found, **defer to the earliest completed authoritative document** (usually the brand guide) and create a correction task:
```bash
# Example: website brand name does not match brand guide
wanman task create "Fix website brand name: unify the brand name on the website from 'KAWA' to 'COFFEE TO' as specified in the brand guide. Update all brand names, taglines, and Instagram handles in index.html. Reference: /workspace/agents/output/marketing/brand-design.md" --assign dev --priority 1
```
## Authoritative Document Priority
When information conflicts, follow this order of precedence:
1. **Brand guide** — Brand name, tagline, visual style
2. **Financial report** — Prices, cost data
3. **Market research** — Competitor data, market data
4. **Website/posters** — Must align with the above (not a source of truth)
## Common Inconsistency Patterns
| Pattern | Cause | Fix |
|---------|-------|-----|
| Website brand name differs from brand guide | Dev started website before brand design was complete | Create correction task for dev |
| Poster prices differ from financial pricing | Marketing and finance worked independently | Defer to finance, fix the poster |
| Social media dates differ from poster dates | Same agent produced outputs at different times | Unify to the latest confirmed date |
## Preventive Measures
When creating tasks, use `--after` to declare dependencies:
```bash
# Brand design must be completed first
brand_id=$(wanman task create "Brand design" --assign marketing --priority 1 | grep -o '[a-f0-9-]\{36\}')
# Website development depends on brand design
wanman task create "Website development: based on the brand guide..." --assign dev --priority 5 --after $brand_id
# Poster design also depends on brand design
wanman task create "Opening poster: based on the brand guide..." --assign marketing --priority 4 --after $brand_id
```Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
f0c3ec2eb827full audit observations/trust-audit/skill/chekusu__cross-validation.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | f0c3ec2eb827 | SAFE | B | 89 | first audit |
Questions
What does the Cross Validation skill do?
wanman is an open-source agent matrix runtime inspired by Japanese one-man trains. It lets human users step back into an observer role while local agent runtimes coordinate autonomous multi-agent workflows, task execution, and artifacts.
Is Cross Validation safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Cross Validation access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (f0c3ec2eb827), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.