CocometerSAFE

CocoPlus is an Agentic Operating System for Snowflake Coco. It brings structured, multi-agent workflows to data engineering projects — covering everything from project initialization through spec, plan, build, test, review, and ship phases.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: "archetype-classifier"
description: "V2-native deterministic contract for the owning CocoPlus feature. Executes the behavior formerly delegated to archetype-classifier skill without registered runtime scripts."
version: "2.0.0"
author: "CocoPlus"
tags:
  - cocoplus
  - v2
---

Your objective is to perform this V2-native feature behavior using Coco-native capabilities: Read, Write, Edit, Bash when explicitly needed by the host, Snowflake tools when the feature requires data access, and subagents when the feature requires independent review.

## Required Contract

- Preserve the artifact paths, schemas, and user-visible outputs documented by the owning feature skill.
- Do not call legacy scripts as the implementation path.
- Prefer deterministic file parsing and structured artifacts over free-form prose when producing machine-readable state.
- If an external side effect would occur, apply the same gate and confirmation semantics as the owning feature.

## Exit Criteria

- [ ] The owning feature's documented artifact is produced or updated.
- [ ] The output schema remains compatible with existing readers.
- [ ] No registered runtime script invocation is required.

## Anti-Rationalization

| Shortcut / Temptation | Why It Fails |
|-----------------------|--------------|
| Treat the skill as complete because the file exists | Skill contracts must describe observable behavior and verification, not just command names. |
| Skip artifact and safety checks for a small command | Small commands still mutate state or guide execution; preserve the same gates. |

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

none-observed

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.