CocofleetSAFE

CocoPlus is an Agentic Operating System for Snowflake Coco. It brings structured, multi-agent workflows to data engineering projects — covering everything from project initialization through spec, plan, build, test, review, and ship phases.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: "fleet-comms"
description: "Show the CocoFleet dispatch and heartbeat event feed. Usage: $fleet comms [fleet-id]."
version: "2.0.0"
author: "CocoPlus"
tags:
  - cocoplus
  - cocofleet
---

Your objective is to display the read-only CocoFleet communications feed.

Before proceeding, verify that `.cocoplus/` exists.
If not: output "CocoPlus not initialized in this directory. Run `$pod init` to begin." Then stop.

Parse argument: `$fleet comms [fleet-id]`

If no fleet-id is supplied, select the most recently modified fleet directory under `.cocoplus/fleet/` that contains `comms.log`. If none exists, output "No CocoFleet comms log found." Then stop.

Read `.cocoplus/fleet/[fleet-id]/comms.log`.

Output:

```text
# Fleet Comms: [fleet-id]

| Time | Role | Instance | Event | Summary |
|------|------|----------|-------|---------|
[last 50 events, oldest to newest]
```

Support optional filters when present in the user request:

- `--role planner|producer|critic`
- `--event dispatch|heartbeat|completion|blocker|signoff`
- `--tail N`

## Safety Rules

- Do not write to `state.json` or `comms.log`.
- Do not approve, resume, pause, or stop a fleet from this skill.
- Treat malformed lines as skipped input and report the skipped count.

## Exit Criteria

- [ ] The selected fleet id is shown.
- [ ] The feed is read from `.cocoplus/fleet/[fleet-id]/comms.log`.
- [ ] Role, event, and tail filters are applied when requested.
- [ ] No project state is mutated.

## Anti-Rationalization

| Shortcut / Temptation | Why It Fails |
|-----------------------|--------------|
| Treat the skill as complete because the file exists | Skill contracts must describe observable behavior and verification, not just command names. |
| Skip artifact and safety checks for a small command | Small commands still mutate state or guide execution; preserve the same gates. |

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

none-observed

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.