Run trust-gated multi-agent orchestration with distributed denial-of-service (DOS) hooks and MCP tools: verify, arbitrate, and block unverified agent claims. Automates parallel goal dispatch, plan portfolio gardening, fleet lifecycle management, and root-cause analysis of stalled runs โ all gated on external witness instead of agent self-reporting.
Matches all tools
Hooks run on every tool call, not just specific ones
Executes bash commands
Hook triggers when Bash tool is used
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Confirm the DOS plugin is wired: check the `dos-kernel[mcp]` package import, run `dos doctor`, show the bundled hooks/MCP/skills, and point to the next skill. Use after install or when plugin MCP/hooks fail.
Refresh a plan portfolio from evidence: close shipped queue items, update cooldown state, and surface the few decisions an operator must make. Use after dispatch bursts, drained backlogs, or recurring findings.
Run the DOS self-improvement loop: propose a candidate, verify it in an isolated worktree, measure suite/truth/metric gates, and keep only confirmed gains. Use for recursive improvement; use `dos-enforce-tune` for policy knobs.
Run one DOS plan-class lifecycle tick from the workspace `[lifecycle]` table: evaluate declared transitions, have a judge approve/defer them, write gated plan-meta edits, and log the cycle. Use when gardening plan lifecycle classes automatically.
Run recurring `dos-dispatch` cycles, switching to `dos-replan` when the backlog drains and stopping on the kernel's loop verdict. Use for unattended dispatch->replan->dispatch work across disjoint lanes.
Executables (bin/) โ files in this plugin's bin/directory are added to the Bash tool's PATH while the plugin is enabled.
Catch your AI agents when they lie about what they shipped.
๐ See it run on real repos: the scoreboard scores 15 popular AI-built repos (roborev, open-interpreter, crewAI, autogen, โฆ) โ how much agents wrote, which ones, and whether each commit's claim is backed by its own diff. Score yours:
dos commit-audit --sweep --workspace . BASE..HEAD.
The whole pitch in one recording: the agent claims two features shipped; git backs one.
dos verify answers from the commits, the lie exits 1, and a gate on that
exit code refuses the false "done". Every line is the real CLI's verbatim output โ
scripts/build_caught_lie_cast.py re-records it whenever the output changes.
Run a fleet of agents on one repo. The left loop just feels like progress; the right one you can steer.
The only difference is a verdict DOS reads from the real world โ here, git โ never the agent's word.
An AI agent will tell you it finished. DOS checks the real world instead of
taking its word โ and the nearest piece of the real world is your git history.
An agent says it shipped the login endpoint; did it? Run one command,
dos verify, and it answers from the artifacts the work left behind, not from
what the agent typed: a commit backs the claim โ SHIPPED, exit 0; nothing
landed โ NOT_SHIPPED, exit 1. The agent's story never enters into it. (Git
is just the first witness DOS reads; the file tree, the clock, a CI status, a
test environment's own state are others โ anything the agent didn't author.)
dos verify AUTH AUTH1 # โ SHIPPED AUTH AUTH1 e62f74d (exit 0)
dos verify AUTH AUTH2 # โ NOT_SHIPPED AUTH AUTH2 (exit 1)
That's the smallest version. It scales up, too: point a dozen agents at one
repo โ in CI, in a fleet, racing on the same files โ and DOS also tells you
which ones are stepping on each other, which one is spinning in circles, and
which claim of "done" is real. Every answer comes from the artifacts (git, the
file tree, the clock), never the narration. It works on a plain git repo with
zero config and gets smarter the more you tell it, and the only thing you ever
install is one small Python package.
npx claudepluginhub anthony-chaudhary/dos-kernel --plugin dos-kernelAdjudicate every tool call like a syscall. fak's MCP server exposes capability-gated adjudication verbs so Claude Code can screen a proposed tool call, run one through the kernel, or quarantine a tool result before it enters context.
Multi-agent coordination with agent-swarm MCP
Agent configuration utilities - project assimilation, config auditing, teammate definitions, MCP management, and hooks configuration
Task distribution, agent coordination, progress monitoring - executes plans via subagents. Requires AI Maestro for inter-agent messaging.
AGT governance hooks and MCP tools for Claude Code sessions
Multi-agent orchestration via li o flow and li o fanout
Repowire mesh usage skills for AI coding agents: cross-agent review and planning, delegate, usage patterns, and install/update. Backend-agnostic and parameterised on the agent you choose.