The read-only infra-delivery STATIC-VALIDATION step (step 6) — statically validate an infra change BEFORE the test/plan/merge steps. A PROCEDURE skill the generic agent runs inside a CTX session: resolve the active stack profile, run the directly-allowlisted read-role tofu validate + tofu fmt verbs (the IaC is well-formed + canonically formatted) plus the active profile''s EXISTING read-only infrabinding.policy slot (the render + conftest/OPA evaluation), all read-only through the CTX command-policy guard, SURFACE violations, and record the validation observation as a .foundry/id-validate-report STEP-REPORT NOTE. Read-only/never-fix: it NEVER applies, edits the IaC, runs tofu fmt -write, or waves a violation through. ADVISORY craft — it does NOT gate, approve, or merge; the merge floor (the adopter''s branch protection + CI checks, see docs/merge-floor.md) is the merge authority. Static validation runs no tofu plan (no planresults), so it records a STEP-REPORT NOTE — the bespoke emitinfrawalkevidence plan recorder this note used to be contrasted against was retired and does not exist in scripts/. Names no infrabinding.test slot (it does not exist) and no tofu test (not allowlisted), and never invokes ctx-posture (mutation-only).
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategoryEngineeringStars0
About this skill
The read-only infra-delivery STATIC-VALIDATION step (step 6) — statically validate an infra change BEFORE the test/plan/merge steps. A PROCEDURE skill the generic agent runs inside a CTX session: resolve the active stack profile, run the directly-allowlisted read-role tofu validate + tofu fmt verbs (the IaC is well-formed + canonically formatted) plus the active profile''s EXISTING read-only infrabinding.policy slot (the render + conftest/OPA evaluation), all read-only through the CTX command-policy guard, SURFACE violations, and record the validation observation as a .foundry/id-validate-report STEP-REPORT NOTE. Read-only/never-fix: it NEVER applies, edits the IaC, runs tofu fmt -write, or waves a violation through. ADVISORY craft — it does NOT gate, approve, or merge; the merge floor (the adopter''s branch protection + CI checks, see docs/merge-floor.md) is the merge authority. Static validation runs no tofu plan (no planresults), so it records a STEP-REPORT NOTE — the bespoke emitinfrawalkevidence plan recorder this note used to be contrasted against was retired and does not exist in scripts/. Names no infrabinding.test slot (it does not exist) and no tofu test (not allowlisted), and never invokes ctx-posture (mutation-only).
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
The read-only infra-delivery STATIC-VALIDATION step (step 6) — statically validate an infra change BEFORE the test/plan/merge steps. A PROCEDURE skill the generic agent runs inside a CTX session: resolve the active stack profile, run the directly-allowlisted read-role `tofu validate` + `tofu fmt` verbs (the IaC is well-formed + canonically formatted) plus the active profile''s EXISTING read-only `infra_binding.policy` slot (the render + conftest/OPA evaluation), all read-only through the CTX command-policy guard, SURFACE violations, and record the validation observation as a `.foundry/id-validate-report` STEP-REPORT NOTE. Read-only/never-fix: it NEVER applies, edits the IaC, runs `tofu fmt -write`, or waves a violation through. ADVISORY craft — it does NOT gate, approve, or merge; the merge floor (the adopter''s branch protection + CI checks, see docs/merge-floor.md) is the merge authority. Static validation runs no `tofu plan` (no `plan_results`), so it records a STEP-REPORT NOTE — the bespoke `emit_infra_walk_evidence` plan recorder this note used to be contrasted against was retired and does not exist in scripts/. Names no `infra_binding.test` slot (it does not exist) and no `tofu test` (not allowlisted), and never invokes `ctx-posture` (mutation-only).
About this listing
Category
Engineering
Reported license
MIT
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI