---
name: rudder-real-runtime-verifier-maintainer
description: "Use when verifying Rudder agent runtime behavior in a real local environment, especially MCP/native Rudder tools across Codex, Claude, OpenCode, Pi, or user-named runtimes. Trigger for requests like 真是/真实环境跑过吗, 排查所有 rudder tools, transcript/fallback verification, runtime MCP availability, provider matrix proof, or checking whether agents used Rudder tools instead of rudder CLI/Bash/curl fallback."
---

# Rudder Real Runtime Verifier Maintainer

Verify Rudder agent runtime behavior on the user's real local Rudder instance.
This is a black-box runtime acceptance workflow, not an implementation or code
review workflow.

Default to Chinese when the user asks in Chinese. Put the current truth first:
which runtimes passed, failed, or were blocked, and what transcript evidence
proves it.

## Role Boundary

Default to verification and diagnosis only:

- Run real local runtime probes and inspect run transcripts, logs, API state,
  issue state, comments, and run metadata.
- Create disposable orgs, agents, issues, and runs when needed for proof.
- Separate provider/model failure from Rudder adapter failure.
- Report exact blockers and smallest likely fixes.
- As an independent verifier, do not edit source, configs, Git state, or product
  docs. Return findings to the implementer. The parent retains any existing
  fix authority; verification does not require that authority to be repeated.

If the user asks to fix the issue, hand back to the lifecycle implementation
route or make the smallest explicit patch, then require this skill's real
runtime proof again before claiming done.

## When This Skill Wins

Use this skill when the core question is whether an agent runtime actually did
the work through Rudder-managed tools in a real local run.

Typical prompts:

- "你所有的 agent runtime 都本地测过跑过真实环境了吗?"
- "OpenCode and Pi agent 你也测了吗?"
- "看 transcript，别让它 fallback 用 rudder cli"
- "排查所有 rudder tools，都试一遍"
- "MCP tool 报 org id/auth 问题，正常 agent 调 tool 不该传 org"
- "Codex/Claude/OpenCode/Pi 真实环境跑一下"

If the user asks for general product acceptance that is not runtime/tool-call
specific, use `product-acceptance-verifier-maintainer` instead. If the user
provides only one failed run id and wants root cause, use
`debug-run-transcript-maintainer` first, then return here for rerun proof after
a fix.

## Runtime Matrix

Select the runtime matrix from the user's request and the changed integration.
Test one runtime for a runtime-specific claim. Use the full supported matrix for
an explicit all-runtime claim or a shared adapter/tool change that affects it:

- Codex
- Claude Code
- Hermes
- OpenCode
- Pi
- Cursor

Do not treat a Codex pass as proof for another runtime.

Read only the relevant reference files:

- `references/probe-workflow.md`: real local setup, disposable data, probe
  script expectations, and proof levels.
- `references/transcript-evidence.md`: how to prove tool use and reject CLI
  fallback from logs.
- `references/codex.md`: Codex MCP transcript shape and known traps.
- `references/claude.md`: Claude MCP transcript shape and strict config traps.
- `references/opencode.md`: OpenCode MCP transcript shape, provider/model
  caveats, JSONL parser expectations, and final-text pitfalls.
- `references/pi.md`: Pi native extension transcript shape, schema/error
  propagation traps, and 429/auth/provider separation.
- `references/reporting.md`: verdict format, mutation ledger, and pass/fail
  language.

## Acceptance Standard

A runtime passes only when all are true:

1. The local Rudder source of truth is identified, usually
   `GET /api/health` on `http://127.0.0.1:3100`.
2. A real local run was triggered for that runtime, or an existing real local
   run was inspected with enough raw transcript/log evidence.
3. The transcript shows the expected Rudder MCP/native tool calls.
4. There is no model-visible fallback to shell, Bash, curl, or `rudder` CLI for
   Rudder work.
5. Tool results are not internally failed (`isError`, structured error,
   `rudder_cli_command_failed`, missing required argument, auth/org failure).
6. The terminal product effect was read back: issue status, comments, run
   status, final text, API result, or another requested surface.
7. Provider/model blockers are separated from Rudder adapter/tool blockers.

If the user requires "all tools", do not only run a happy-path issue workflow.
Run or request a manifest-driven coverage plan: list every exposed tool, verify
schemas load, check runtime-managed identity is not model-provided, and execute
representative read/mutate/file/image/pagination/error cases. Mark unexecuted
tools as not covered.

## Default Probe Ladder

Use the smallest probe that answers the question, then escalate only as needed:

1. **Tool availability probe**: call `rudder_agent_me`, require final answer
   to say MCP/tool path and no fallback.
2. **Issue workflow probe**: seed an issue, then require
   `rudder_issue_context`, `rudder_issue_checkout`,
   `rudder_issue_comment`, and `rudder_issue_done`; read back final issue
   status and comments.
3. **Representative matrix probe**: add read/list/pagination/file/comment/image
   examples such as `rudder_runs_errors`, `rudder_library_file_ref`,
   inbox/context, review, chat, or automation.
4. **Full manifest audit**: prove every exposed Rudder tool has a stable name,
   schema, description, and handler classification; execute safe read-only
   tools and representative mutating tools in disposable data.

## Known Judgment Rules

- A successful final answer is not enough. Inspect raw or parsed transcript.
- A tool call name in prompt text is not evidence. Use structured tool-call
  events or parsed run-intelligence entries.
- A run can fail after completing the product effect. Report that separately:
  `tool/product effect passed; runtime finalization failed`.
- A provider 429/auth/model error before any tool call is not an MCP auth/org
  bug. Mark it `blocked_provider`.
- If a tool result contains `isError: true` but the runtime marks the tool call
  completed, treat the runtime as failed or at least suspect until fixed.
- Internal runtime-owned bridges may execute a server process. That is
  acceptable only if the model-visible action is a typed Rudder tool and
  runtime env owns identity. It is not acceptable if the model uses Bash/curl or
  runs `rudder ...` itself for Rudder work.

## Output

Use `references/reporting.md` for the full shape. At minimum include:

- overall verdict: `PASS`, `FAIL`, or `QUESTION` for the requested matrix;
  observed required behavior failure yields `FAIL`; otherwise missing required
  proof or provider access yields `QUESTION`; complete required proof yields `PASS`
- verdict per runtime: `PASS`, `FAIL`, `BLOCKED_PROVIDER`, `PARTIAL`, or
  `NOT_RUN`
- run IDs, issue IDs, org IDs when disposable data was created
- observed tool names
- whether CLI/Bash/curl fallback was observed
- internal tool errors
- terminal product effect
- skipped coverage and why
- mutation ledger

Do not say "all green" if any runtime is blocked, substituted, partial, or only
covered by simple `agent_me`.