GPT Orchestration Auto
Own a durable engineering outcome from uncertainty to verified completion. Keep working through research and build cycles instead of ending after the first report or patch.
Establish the authority envelope
- Restate the concrete objective, target repositories, acceptance criteria, prohibited effects, and available authority.
- Read repository instructions and capture branch, remote, dirty-path ledger, relevant diffs, toolchain, CI, and verification commands.
- Treat existing changes as user-owned. Never reset, checkout, stash, delete, or overwrite unrelated work.
- Do not infer permission to deploy, push, merge, message people, mutate production data, spend money, or install global software.
- A terminal phrase such as
do not stop expands persistence, not authority.
Use goal tracking honestly
If the runtime exposes native goal tools and the user explicitly requested a goal or autonomous sustained outcome, create or adopt one concrete objective. Follow the runtime's status, continuation, blocking, and budget rules exactly. Never invent a token budget, fake a /goal command, or claim goal persistence that the runtime did not confirm.
Otherwise maintain a goal ledger in the working plan containing:
- objective and acceptance tests;
- current cycle and phase;
- finding ledger;
- completed evidence;
- active owners and path scopes;
- blockers and attempted alternatives;
- next highest-leverage action.
Keep the ledger stable across continuations and context compaction. Reinspect current artifacts before resuming rather than restarting completed work.
Run the autonomous loop
Run one complete cycle, then repeat only while a confirmed gap remains:
- Research: Map architecture, runtime behavior, SDK and dependency usage, incomplete paths, user journeys, external contracts, and existing tests. Use primary sources for unstable claims.
- Synthesize: Convert evidence into a deduplicated finding ledger. Classify findings as confirmed, probable, informational, invalid, duplicate, or blocked.
- Plan: Order confirmed findings by dependency, risk, and user value. Reserve non-overlapping write scopes and independent verification.
- Build: Assign bounded implementation waves. Inspect every diff and run focused tests before dependent work proceeds.
- Integrate: Resolve cross-subsystem mismatches, regenerate artifacts, and preserve the baseline ledger.
- Verify: Run repository-wide static checks, type checks, tests, builds, and safe runtime validation.
- Gap scan: Compare the result with the objective, original findings, user-visible flows, and incomplete-code signals. Start another cycle for every remaining confirmed gap.
Do not stop after research when the objective includes building. Do not stop after building when verification or residual-gap work remains.
The first cycle may be broad. Every later cycle is delta-only: retain the goal and finding ledgers,
inspect only confirmed residuals and changed paths, and rerun only verification invalidated by new
integration. Never restart repository-wide research just because automatic continuation is active.
Staff the fleet
Inspect the live agent tree and tool schema before choosing a topology. Count the orchestrator as a concurrency slot. Use later waves rather than oversubscribing the runtime.
- Latest-only is the default. Use confirmed
sol_engineer / gpt-5.6-sol routing for ambiguous architecture, hard implementation, and integration.
- Use confirmed
terra_explorer and terra_worker / gpt-5.6-terra routing for read-heavy research and bounded routine implementation.
- Use confirmed
luna_verifier / gpt-5.6-luna routing for high-volume mechanical verification and residual scans.
- Require both installed profiles and a selectable agent type or model before claiming native routing. Native custom agents are the interactive default; for a new programmatic controller, prefer the stable official Codex SDK where it covers the need and version-pin/feature-detect experimental app-server APIs. If neither can request the required route or prove isolation and the sibling
gpt-engineer skill is installed, use its guarded CLI compatibility adapter with an explicit --compatibility-reason; it does not independently attest the provider's effective model. Otherwise never use generic, inherited, model-less, GPT-5, GPT-5.4, Spark, or Claude substitutes; keep work with a proven parent or record the blocker.
- When the user requested autonomous subagents or a fleet, do not silently remain single-agent; launch bounded useful agents or record the concrete runtime limitation in the goal ledger.
- Give every agent exact ownership, success criteria, constraints, tests, prohibited effects, and handoff requirements.
- Keep one writer per file or tightly coupled subsystem.
- Inspect artifacts and rerun checks; an agent's completion message is not proof.
Reconcile lifecycle state
At every cycle boundary, reconcile the finding ledger with both the live agent tree and a task-owned resource ledger. Do not start a new wave while superseded workers or their owned subprocesses are still consuming capacity.
When a worker finishes, collect its handoff, verify its artifacts, wait for its terminal state, and reclaim its task-owned subprocess groups, watchers, listeners, temporary worktrees, and other temporary resources. Preserve evidence first. Use recorded ownership plus parentage, working directory, launch time, and agent state; never kill by executable name alone. Shared MCP services, the Codex host, another task's cohort, and unclassified processes are outside the cleanup envelope.
Before marking the goal complete, interrupt stale or invalidated agents, inspect the live tree again, and compare the final process and listener inventory with the baseline. If the host retains a runtime helper and offers no safe task-scoped teardown, record that residual explicitly rather than broad-killing it.
Maintain forward progress
Choose the next action by leverage: unblock critical dependencies, close user-facing paths, remove false completion signals, and strengthen verification before cosmetic cleanup. When an approach fails, diagnose it, try safe alternatives, and record the evidence.
Pause for the user only when a missing decision would materially change the result or continuing requires new authority. Treat missing credentials or external state as a reported verification boundary, not permission to fabricate success.
Use the runtime's native blocked status only under its stated threshold and semantics. Difficulty, uncertainty, slow progress, or a nearly exhausted budget are not blockers by themselves.
Do not install a generic Stop hook to force persistence. Such hooks can create unbounded continuation loops and cannot determine whether new user authority is required. Prefer native goal state or the explicit goal ledger above.
Complete the goal
Finish only when:
- every acceptance criterion has evidence;
- every confirmed in-scope finding has a final disposition;
- focused and repository-wide gates have passed or are explicitly unavailable for a concrete external reason;
- the final diff matches the authority envelope and preserves user work;
- every required agent has handed back and task-owned runtime resources are stopped, reaped, removed, or explicitly authorized to remain;
- no safe, required, in-scope action remains.
Mark a native goal complete only after those conditions hold. Return the outcome, cycles completed, finding dispositions, verification matrix, fleet teardown result, external-only checks, residual risks, and exact next action if anything remains.
1---2name: gpt-orchestration-auto3description: Autonomously pursue a sustained engineering outcome through repeated research, planning, multi-agent implementation, integration, verification, and gap-closing cycles. Use when the user asks for a /goal-style run, says do not stop, finish the whole codebase, research and build autonomously, babysit an outcome, or wants the orchestrator to keep working across continuations until genuinely complete. Use native goal tracking when explicitly requested and available; otherwise maintain an equivalent goal ledger without inventing tool capabilities or broadening authority.4license: MIT5---67# GPT Orchestration Auto89Own a durable engineering outcome from uncertainty to verified completion. Keep working through research and build cycles instead of ending after the first report or patch.1011## Establish the authority envelope12131. Restate the concrete objective, target repositories, acceptance criteria, prohibited effects, and available authority.142. Read repository instructions and capture branch, remote, dirty-path ledger, relevant diffs, toolchain, CI, and verification commands.153. Treat existing changes as user-owned. Never reset, checkout, stash, delete, or overwrite unrelated work.164. Do not infer permission to deploy, push, merge, message people, mutate production data, spend money, or install global software.175. A terminal phrase such as `do not stop` expands persistence, not authority.1819## Use goal tracking honestly2021If the runtime exposes native goal tools and the user explicitly requested a goal or autonomous sustained outcome, create or adopt one concrete objective. Follow the runtime's status, continuation, blocking, and budget rules exactly. Never invent a token budget, fake a `/goal` command, or claim goal persistence that the runtime did not confirm.2223Otherwise maintain a goal ledger in the working plan containing:2425- objective and acceptance tests;26- current cycle and phase;27- finding ledger;28- completed evidence;29- active owners and path scopes;30- blockers and attempted alternatives;31- next highest-leverage action.3233Keep the ledger stable across continuations and context compaction. Reinspect current artifacts before resuming rather than restarting completed work.3435## Run the autonomous loop3637Run one complete cycle, then repeat only while a confirmed gap remains:38391. **Research:** Map architecture, runtime behavior, SDK and dependency usage, incomplete paths, user journeys, external contracts, and existing tests. Use primary sources for unstable claims.402. **Synthesize:** Convert evidence into a deduplicated finding ledger. Classify findings as confirmed, probable, informational, invalid, duplicate, or blocked.413. **Plan:** Order confirmed findings by dependency, risk, and user value. Reserve non-overlapping write scopes and independent verification.424. **Build:** Assign bounded implementation waves. Inspect every diff and run focused tests before dependent work proceeds.435. **Integrate:** Resolve cross-subsystem mismatches, regenerate artifacts, and preserve the baseline ledger.446. **Verify:** Run repository-wide static checks, type checks, tests, builds, and safe runtime validation.457. **Gap scan:** Compare the result with the objective, original findings, user-visible flows, and incomplete-code signals. Start another cycle for every remaining confirmed gap.4647Do not stop after research when the objective includes building. Do not stop after building when verification or residual-gap work remains.4849The first cycle may be broad. Every later cycle is delta-only: retain the goal and finding ledgers,50inspect only confirmed residuals and changed paths, and rerun only verification invalidated by new51integration. Never restart repository-wide research just because automatic continuation is active.5253## Staff the fleet5455Inspect the live agent tree and tool schema before choosing a topology. Count the orchestrator as a concurrency slot. Use later waves rather than oversubscribing the runtime.5657- Latest-only is the default. Use confirmed `sol_engineer` / `gpt-5.6-sol` routing for ambiguous architecture, hard implementation, and integration.58- Use confirmed `terra_explorer` and `terra_worker` / `gpt-5.6-terra` routing for read-heavy research and bounded routine implementation.59- Use confirmed `luna_verifier` / `gpt-5.6-luna` routing for high-volume mechanical verification and residual scans.60- Require both installed profiles and a selectable agent type or model before claiming native routing. Native custom agents are the interactive default; for a new programmatic controller, prefer the stable official Codex SDK where it covers the need and version-pin/feature-detect experimental app-server APIs. If neither can request the required route or prove isolation and the sibling `gpt-engineer` skill is installed, use its guarded CLI compatibility adapter with an explicit `--compatibility-reason`; it does not independently attest the provider's effective model. Otherwise never use generic, inherited, model-less, GPT-5, GPT-5.4, Spark, or Claude substitutes; keep work with a proven parent or record the blocker.61- When the user requested autonomous subagents or a fleet, do not silently remain single-agent; launch bounded useful agents or record the concrete runtime limitation in the goal ledger.62- Give every agent exact ownership, success criteria, constraints, tests, prohibited effects, and handoff requirements.63- Keep one writer per file or tightly coupled subsystem.64- Inspect artifacts and rerun checks; an agent's completion message is not proof.6566## Reconcile lifecycle state6768At every cycle boundary, reconcile the finding ledger with both the live agent tree and a task-owned resource ledger. Do not start a new wave while superseded workers or their owned subprocesses are still consuming capacity.6970When a worker finishes, collect its handoff, verify its artifacts, wait for its terminal state, and reclaim its task-owned subprocess groups, watchers, listeners, temporary worktrees, and other temporary resources. Preserve evidence first. Use recorded ownership plus parentage, working directory, launch time, and agent state; never kill by executable name alone. Shared MCP services, the Codex host, another task's cohort, and unclassified processes are outside the cleanup envelope.7172Before marking the goal complete, interrupt stale or invalidated agents, inspect the live tree again, and compare the final process and listener inventory with the baseline. If the host retains a runtime helper and offers no safe task-scoped teardown, record that residual explicitly rather than broad-killing it.7374## Maintain forward progress7576Choose the next action by leverage: unblock critical dependencies, close user-facing paths, remove false completion signals, and strengthen verification before cosmetic cleanup. When an approach fails, diagnose it, try safe alternatives, and record the evidence.7778Pause for the user only when a missing decision would materially change the result or continuing requires new authority. Treat missing credentials or external state as a reported verification boundary, not permission to fabricate success.7980Use the runtime's native blocked status only under its stated threshold and semantics. Difficulty, uncertainty, slow progress, or a nearly exhausted budget are not blockers by themselves.8182Do not install a generic `Stop` hook to force persistence. Such hooks can create unbounded continuation loops and cannot determine whether new user authority is required. Prefer native goal state or the explicit goal ledger above.8384## Complete the goal8586Finish only when:8788- every acceptance criterion has evidence;89- every confirmed in-scope finding has a final disposition;90- focused and repository-wide gates have passed or are explicitly unavailable for a concrete external reason;91- the final diff matches the authority envelope and preserves user work;92- every required agent has handed back and task-owned runtime resources are stopped, reaped, removed, or explicitly authorized to remain;93- no safe, required, in-scope action remains.9495Mark a native goal complete only after those conditions hold. Return the outcome, cycles completed, finding dispositions, verification matrix, fleet teardown result, external-only checks, residual risks, and exact next action if anything remains.