[caelaxie]

Closes #17
Closes #18

Are two more droids too much?

No. tools: read-only is what actually enforces the upstream readonly: true guarantee. A sentence in the brief does not. explorer cannot pin a seat model, so it is only the auto / inherit-parent path. The two twins keep the model panel: poteto-agent-readonly (grok-4.7) and poteto-judgment-readonly (claude-opus-5-5).

/how, /interrogate, and the arena judge spawn those droids. Arena candidates still use the full-tool seats, because they write. /setup-pstack writes or deletes the read-only twin whenever it writes or deletes the seat, so a personal model pin applies to both.

poteto-judgment is the code-seat droid's description again, with the judgment-seat role, the judgment model, and "on the judgment seat" in the body. The spawn, resume, and worker substitution sentences are back.

Validate plugin compared droid filenames (still ending in .md) with ids (the .md stripped). - sorts before ., so poteto-agent-readonly.md came out ahead of poteto-agent.md, while the id poteto-agent comes ahead of poteto-agent-readonly. The checker now sorts both sides as ids. That is the only workflow change.

  

[caelaxie]

verdict: changes requested (comment review, same account as author).

content matches #17 and #18's smallest fixes: read-only twins with tools: read-only, how/interrogate/arena pointed at them, the "say so in the brief" sentences gone, explorer only for auto/inherit-parent, and poteto-judgment's spawn/resume/worker sentences restored. the setup-pstack twin-pinning line is a needed follow-on, fine.

blocking:

1. ci is red on a339165. Validate plugin fails ~13s in (log line 228, exit 1). every other open droid pr is green at the same base 3a60c35, so this diff broke it. my guess (unverified) is the install/loaded-droids check or droid rejecting the new tools: read-only frontmatter. fix and get ci green at the final head.
2. harness proof. this adds droids and a new frontmatter key, so ci alone isn't enough. post in the pr: droid plugin marketplace add pstack-ports/droid-pstack#<branch> + droid plugin install pstack@<name> + droid plugin list at the final head sha, the installed droids/ listing showing both -readonly twins, and proof droid honors tools: read-only (e.g. a spawn of poteto-agent-readonly whose tool list has no edit/execute tools, or droid's own droid listing showing its tools). if a live model turn is blocked only by cli auth, say so and show the installed copy.

non-blocking nit inline.

[caelaxie]

nit: "Read-only delegate subagent for code-writing and helper tasks" contradicts itself; the parent reads this to pick a seat. consider "Read-only delegate subagent for exploration, review, and helper tasks" or just "Read-only delegate subagent for helper tasks". not blocking.

[cursor]

Harness proof for d09b04a. Command output is unedited.

HOME=/tmp/droid-proof-readonly2
which=/tmp/droid-proof-readonly2/.local/bin/droid
0.245.0
===== droid plugin marketplace add =====
Successfully added marketplace: droid-pstack@cursor-readonly-seat-droids-9106
marketplace_add_exit=0
===== droid plugin install =====
Successfully installed pstack@droid-pstack@cursor-readonly-seat-droids-9106 (d09b04a)
install_exit=0
===== droid plugin list =====
Installed plugins:
Active:
  pstack@droid-pstack@cursor-readonly-seat-droids-9106  [user]  d09b04a
list_exit=0
$ git -C /tmp/droid-proof-readonly2/.factory/plugins/cache/droid-pstack@cursor-readonly-seat-droids-9106-0b00786518ab/pstack-7171b73fae68/d09b04aa218a rev-parse HEAD
d09b04aa218ad6e48b7d41e472d14b2bc6df2d5a
(exit 0)
$ echo expected
d09b04aa218ad6e48b7d41e472d14b2bc6df2d5a
$ git -C /workspace diff --name-status 3a60c3580a01bba100804e6efe3395d9f5dd924e HEAD
M	.github/workflows/ci.yml
A	droids/poteto-agent-readonly.md
A	droids/poteto-judgment-readonly.md
M	droids/poteto-judgment.md
M	skills/arena/SKILL.md
M	skills/how/SKILL.md
M	skills/interrogate/SKILL.md
M	skills/setup-pstack/SKILL.md
(exit 0)
MATCH .github/workflows/ci.yml
MATCH droids/poteto-agent-readonly.md
MATCH droids/poteto-judgment-readonly.md
MATCH droids/poteto-judgment.md
MATCH skills/arena/SKILL.md
MATCH skills/how/SKILL.md
MATCH skills/interrogate/SKILL.md
MATCH skills/setup-pstack/SKILL.md
===== droid exec =====
Skill "how" activated
Error during droid execution: Authentication failed. Please log in using /login or set a valid FACTORY_API_KEY environment variable.
exec_exit=1

[caelaxie]

verdict: pass at d09b04a, merging.

• ci is green now. the ci.yml change is one .sort() so droid ids compare as ids; needed for the new -readonly filenames, nothing else touched.
• matches #17 and #18's smallest fixes. the twins differ from their seats only in name, a Read-only prefix, and tools: read-only; poteto-judgment differs from poteto-agent only in name, model, seat role, and "on the judgment seat".
• droid facts check out against custom droids: tools: read-only category, built-in explorer is read-only, task has no readonly field.
• no cursor files. Closes #17 / Closes #18, not a draft.

non-blocking: the twins' descriptions still say "code-writing" and "hardest changes" while the droid can't write. every spawn site names them explicitly, so it's fine for now.