Why this exists
Agentic coding sessions start cold: hundreds of skills and agents, multi-project memory, optional MCP backends, and no deterministic opening move. Teams invent counts, miss dark plugins, trust docs that never shipped, and declare “done” while undecidable gaps hide under green.
intrikata-stack is the portable, open-source answer: two skills that bootstrap the session honestly, then audit the bootstrap itself — with a public site that shows scrubbed live state and a proven self-audit cycle with receipts.
1.6.1 mirror-sync release
The patch release adds traps 27–28, keeps the three direct harness mirrors aligned, and replaces the numeric seed predicate with the count-free full-roll-call contract. Runtime convergence evidence remains bound to the 1.6.0 snapshot rather than being relabeled.
Historical 1.6.0 convergence certificate · target d7d96f62…d887 · 281 skills · 0 enabled unclassified
What you get
megapraxis
Session bootstrap: 7 modes, dark-plugin detection, truth-on-disk briefing. Filesystem-fallback is first-class.
metamegapraxis
Meta-auditor: 26 trap probes, compositional phases, bridge integrity, propose/apply, optional multi-lens SwarmInvocation.
Tarski honesty
Residuals named (decidable / semi-decidable / undecidable). Never silently absorbed into “complete”.
Bridge flywheel
Recurring reasoning compiles to short-circuits. Novel work still pays full price — residual load-bearing.
Multi-harness
Claude Code, OpenAI Codex, Grok Build, plus AGENTS.md / Cursor / Gemini adapters.
Local realize
Self-realizing cross-OS deploy of the white-paper architecture — skill + realize.py + optional Tier-1 stub.
Live transparency
Public D1 snapshots API + Proven Cycle demo with browser-side PASS/FAIL checks.
Self-realize locally (cross-agent · cross-OS)
Materialize megapraxis + metamegapraxis on this machine for Claude, Codex, and Grok — Windows, macOS, or Linux — without inventing success:
# Windows iwr https://docs.intrikata.com/scripts/realize.py -OutFile realize.py py -3 realize.py --harness all --tier 0 --force # macOS / Linux curl -sL https://docs.intrikata.com/scripts/realize.py -o realize.py python3 realize.py --harness all --tier 0 --force
Skill: praxis-local-realize · optional Tier 1: --tier 1 --backend-dir ./praxis-backend · package 1.6.1
Get started in 60 seconds
Pick your harness. Proof of install is the running registry / a real briefing — not “files exist on disk.”
codex plugin marketplace add https://docs.intrikata.com/git/intrikata-stack.git codex plugin add praxis@intrikata-stack
Relaunch Codex once, start a new task, invoke $praxis:megapraxis. Plugin = two instruction skills only (no MCP/hooks/auth).
curl -sL https://docs.intrikata.com/pkg/intrikata-stack-skills.zip -o praxis.zip # unzip, then copy praxis/skills/* → ~/.claude/skills/ # or: python3 install.py --target ~/.claude/skills
Skills hot-reload next turn. Marketplace/plugin installs still need app restart (trap #2).
# Windows iwr https://docs.intrikata.com/pkg/intrikata-stack-skills.zip -OutFile praxis.zip # Expand-Archive; py install.py --target "%USERPROFILE%\.grok\skills" # Then say: /megapraxis (expect _via: filesystem_)
Verdict: converged-modulo-harness. Missing Pharosiraptor MCP is expected. Do not auto-run a 150K-token self-audit swarm on onboard.
git clone https://docs.intrikata.com/git/intrikata-stack.git # or: https://docs.intrikata.com/pkg/intrikata-stack-skills.zip python3 install.py --harness codex # or --target ~/.claude/skills | ~/.grok/skills
Documentation map
Technical white paper
Architecture, traps, SwarmInvocation, bridges, M/G/S/MGS, API, residuals.
Install guide
Per-OS commands, backend optional path, uninstall notes.
Harness map
How to run the skills outside Claude Code.
Backend contract
Optional graph HTTP contract — stub to full KG server.
llms.txt
Agent-optimized discovery index for this site.
Proven cycle JSON
One real self-audit loop with evidence tiers.
Open source & community
Community kit
- MIT License — free to use, modify, distribute
- CONTRIBUTING.md — MetaMethodology loop, norms, checklist
- Code of Conduct — Contributor Covenant–based
- Security policy — private reporting, safe harbor, residuals
- community.json — machine-readable OSS surface cert
How to contribute
- Clone or unpack the package; install skills locally
- Run
/megapraxisthen/metamegapraxis - Propose patches as artifacts / PRs with content-anchored evidence
- Never invent counts; name Tarski residuals on “complete” claims
- Rebuild package + validate before publishing distribution surfaces
Canonical distribution is this site (zip + dumb-HTTP git). Keep package version + SwarmInvocation provenance in forks.
Project principles
| Principle | Meaning |
|---|---|
| Truth-on-disk | Unverified claims are dropped, never emitted |
| Content anchors | Evidence by symbol / grep-stable phrase — not line pins |
| Trap roll-call | 26 silent-failure classes with disk/runtime probes |
| Tarski honesty | Undecidables named every audit; no silent defaults |
| Apply is explicit | Meta-audit is read-only until operator says apply |
| Short-circuit ≠ skip residual | Novelty still pays full price |
Who is this for?
- Operators of multi-project agent harnesses who want a warm, honest session open
- Teams shipping agent skills who need silent-failure taxonomy and self-audit
- Researchers and builders studying MetaMethodology / SwarmInvocation provenance
- Anyone who refuses “all green” when the classifier was blind
Named residual (distribution)
There may not be a single public GitHub “stars” upstream for every fork. The zip + site-served git tree are the canonical portable surfaces. Community discovery residual is mitigated by llms.txt, onboard certs, and this homepage — not claimed solved forever.
What this is
Claude Code (and peer harness) sessions start cold: hundreds of installed skills, agents, and MCP servers; memory spanning every project on a machine; no deterministic opening move. The intrikata stack is a pair of skills that fixes this — and then audits itself.
megapraxis — the session bootstrap
megapraxis runs at session start. It detects one of seven modes from the working directory's shape and history, inventories skills/agents/MCP servers, flags silently-broken ("dark") plugins, reads project memory and git state, and emits a short dashboard briefing. Its contract: every line corresponds to a truth on disk — unverified claims are dropped, never emitted; counts that weren't computed render as count-skipped, never as guesses.
| Mode | Fires when |
|---|---|
| hook-auto | SessionStart hook; 3-line kernel briefing, no questions |
| active-project | cwd is a real project (git repo / manifest / memory) |
| container | cwd holds multiple project subdirs |
| picker | 2+ sub-projects recently active — asks which one |
| machine-dashboard | "show all projects" — machine-wide scan |
| cold | no prior context; minimal catalog |
| resume | "pick up where we left off" — replays the last unresolved thread |
metamegapraxis — the meta-auditor
Where megapraxis briefs the session, metamegapraxis briefs megapraxis. It rolls through 28 documented operational traps (each with a disk-verifiable probe), checks the bridge manifest's referential integrity, computes coverage deltas, and — when single-lens auditing isn't enough — dispatches a four-agent audit swarm whose verdicts persist to a knowledge graph. Focus and phase selectors compose in the fixed order audit → diff → swarm → propose → apply; applying changes never implicitly authorizes an expensive swarm dispatch.
The 28 operational traps
Silent-failure classes learned in production. Live roll-call is on the Live State tab. Full probe semantics: white paper §7.
| # | Trap | One-line signal |
|---|---|---|
| 1 | plugin-manifest-misplaced | manifest at plugin root instead of .claude-plugin/ — plugin silently absent while settings say ON |
| 2 | session-vs-app-restart | new session ≠ new process; plugin configs load only at app launch |
| 3 | user-belief-vs-harness | "it should be registered now" is a hypothesis until the harness confirms it |
| 4 | stdio-works-cc-never-launched | server responds when run manually, but the host never spawned it |
| 5 | http-up-not-stdio-up | HTTP health check green while the stdio MCP sibling is down — separate processes |
| 6 | windows-python-store-stub | bare python resolves to a Store alias that prints an install nag and exits 1 |
| 7 | stale-pyc-shadowing | bytecode mtime ties can shadow a fresh source edit |
| 8 | fabricated-count | a number derived from a truncated listing instead of a real count |
| 9 | heuristic-classification | client-side guesswork silently replacing an auditable server-side contract |
| 10 | fix-violates-feedback | a proposed action contradicting a saved user correction |
| 11 | ghost-warm-slug | directory looks recently active because a memory file was touched, not a session |
| 12 | stale-graph-cache | graph snapshot lagging fresh disk state |
| 13 | new-agent-needs-restart | agent files written mid-session are invisible until app relaunch |
| 14 | marketplace-root-claude-plugin | a marketplace manifest dir misread as a stray plugin — deleting it darkens everything it publishes |
| 15 | mcp-disconnect-mid-session | tool roster shrinks mid-session while the HTTP backend stays up |
| 16 | tmp-on-windows | /tmp/ writes that the next shell can't read back |
| 17 | shell-escape-json-winpath | backslash paths mangled across shell/curl escape layers |
| 18 | claude-md-aspirational-route | docs describe an endpoint the code never shipped — the handler is the truth |
| 19 | bulk-finalize-no-contribution-check | blanket-failing pending work destroys provenance of runs that succeeded |
| 20 | userpromptsubmit-empty-payloads | audit rows persisted before their fields were populated leak forever-pending |
| 21 | settings-dark-harness-resolves | settings say a plugin is off; the runtime dispatches it anyway — the harness wins |
| 22 | malformed-settings-json | one trailing comma silently disables every plugin and hook |
| 23 | while-read-subshell-hang | per-iteration subshells on MSYS stretch a 300ms scan to minutes |
| 24 | stale-head-clean-worktree-deploy | a remembered commit is deployed after another session advanced HEAD |
| 25 | intrikata-local-bridge-session-mismatch | the browser and local bridge use different session ids while both appear healthy |
| 26 | seed-simg-non-converge-without-op-contribution | a non-converged seed emits advice but no persisted assistant contribution |
| 27 | chat-paste-linewrap | a wrapped user-run command executes a secret or flag fragment as a second command |
| 28 | localhost-ipv6-first | Windows resolves localhost over an unbound IPv6 path before the healthy IPv4 listener |
Verdicts and Tarski honesty
Audit cycles terminate with an explicit verdict — converged, converged-modulo-restart, extend, extend-stable, degrade, cycle-complete-extend-deferred, or INCOMPLETE (with reason). What can't be decided is named, never absorbed: five canonical undecidables (unknown-unknowns, true-lens-independence, fixed-point-vs-plateau, state-validity-horizon, converged-vs-correct) plus observation-class buckets appear in every audit rather than being quietly folded into "all done".
Swarms and the bridge flywheel
When one lens isn't enough — self-audit above all — the stack composes an agent swarm: four reviewers in a pipeline, a coordinator synthesizing a verdict, every contribution persisted to a graph. Recurring reasoning compiles into bridges. The 1.6.0 fingerprint covers canonical skill membership, enabled state, layer assignments, orphan state, and completeness; an unchanged re-audit re-asserts the prior verdict without creating a new invocation. Novelty still pays full price.
Assistant runtime boundary
The optional graph backend can route work through ClaudeCode, CodexCode, or GrokBuild. CodexCode keeps codex exec on the Codex installation's subscription authentication. Only its unavailable-CLI fallback uses the official OpenAI CLI with a child-scoped API key; that fallback does not reconfigure the desktop app, and no secret is included in this package or site.
Onboarding short-circuits
- Codex · cert
- Grok Build · cert — Tier 0 filesystem-fallback; traps #4/#5 N/A unless graph requested
- Technical white paper — full specification
One real cycle, end to end — with receipts
This is not a mock-up. On 2026-07-17 the stack ran its full loop against itself — /megapraxis boot → /metamegapraxis audit → four-agent self-audit swarm → coordinator verdict → fixes applied → this site republished — and every stage left records. This tab replays that cycle and labels each claim by how far you can verify it from here:
- live — your browser re-checks it against this site's own artifacts, right now, below;
- graph — read from the audit knowledge graph at build time, scrubbed (ids become short hashes);
- origin — attested by grepping the origin machine's code at build time; honestly marked as not client-checkable.
The punchline is the loop eating its own cooking: the swarm's CRITICAL finding this cycle was that a fix recorded as "done, pending restart" by the previous cycle had landed in dead code — found because the dispatch tooling failed live during this very cycle's dispatch.