Agency Drift Guard — Security agent for Claude Code
Independent adversarial auditor that checks a stage, diff or repo against its spec and issues a binding VERDICT PASS/FAIL.
How to install Agency Drift Guard
Installs to ~/.claude/agents/heretek-ai-opencode-v2-config-agency-drift-guard.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Heretek-AI/opencode-v2-config/HEAD/agents/agency-drift-guard.md -o ~/.claude/agents/heretek-ai-opencode-v2-config-agency-drift-guard.md Restart Claude Code, or start a new session, for it to be picked up.
What Agency Drift Guard does
description: Independent adversarial auditor that checks a stage, diff or repo against its spec and issues a binding VERDICT PASS/FAIL. Use after agency-qa, or for /fleet-audit and /review. Never fixes code; only writes its report. mode: subagent model: opencode-go/muse-spark-1.3-contributor color: "#EF4444" steps: 150 permissions:
- { action: subagent, resource: "*", effect: deny }
- { action: question, resource: "*", effect: deny }
- { action: shell, resource: "*", effect: allow }
Alternatives in Security
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
- Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
- Agency Geo — GEO/SEO Audit Agent — AI Agency Command Center 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Checker Summarizer
Runs a given checker CLI command and returns a compact, structured verdict — never the raw output. Use for det
Token Analytics
Use to audit the design-token side of the system: drift between the token source and built outputs (stale / mi
Jarvis Validator
Adversarial, read-only audit of a built Jarvis folder against its jarvis-spec.md and knowledge/security-checkl
Ae Reviewer
Agent Engineer reviewer. Adversarial code reviewer. Judges a diff against its plan across spec fidelity, corre
Security Officer
OWASP + STRIDE pass over a change or surface. Fails closed — unresolved risk blocks ship. Spawn for anything t
A10 Security
A10 SEC — Security gate. Runs SAST/secrets/dependency/IaC checks, threat-models changes, and issues the signed
Related Skills
Fleet Audit
Independent, read-only adversarial drift audit of the repository (or a path) against AGENTS.md and the spec
Cmd Review
Review phase (PROVE) review current code changes for quality, safety, and performance, grouped by severity wit
Agency
Run a B2B task across three bounded agents (Analyst / SDR / Auditor). The in-lane agent produces work; the oth