Realize

Type Realization

Measure whether one named protocol skill's declared contract is realized during an actual run. The first argument is required; /realize inquire selects only the registered inquire cases and graders. An unknown or omitted target fails before setup.

Purpose

A protocol's formal blocks are runtime-normative: TYPES, PHASE TRANSITIONS, TOOL GROUNDING and the Rules type the prose and carry the operational contract. Static checks establish that a SKILL.md contains those blocks and enforce a bounded set of structural invariants. Nothing establishes that a run follows their transitions.

This skill supplies evidence for that gap. It drives Claude Code or Codex across a matrix of models and treatments, captures the JSONL trace, grades the deterministically observable subset, and names the transcript judgments still owed. A complete automatic cell can establish that collection occurred, the declared branch reached Stop, or the zero-uncertainty branch reached Proceed; semantic ordering and rendered type coverage remain manual until their specified judges are built.

Judgment boundary

The object of judgment is the formal transition trace:

X → context sufficiency → evidence collection as needed → residual deficit
  → formal branch → Stop | Proceed

Every score attaches to a node or edge in that trace. Once the selected branch is observable, judgment ends. A plan, implementation, analysis, or other downstream artifact is evidence that Proceed occurred; its quality, correctness, completeness, and usefulness are outside /realize. Likewise, an unchanged substrate is evidence of Stop only where the case granted the capability to proceed and the formal branch required stopping. references/grader-design.md carries the witness design and the separate oracle that artifact-quality evaluation would require.

When it applies

Reach for this after changing a protocol's phase structure, terminal conditions, gate definition, or answer types — the places where a contract can become unrealizable without any static check noticing. Reach for it also when adopting a new model, where the question is whether the contract still holds on it.

Do not reach for it to check that a file is well-formed. That is /verify, it is free, and it runs on every commit.

Workflow

cd .claude/skills/realize/scripts

./setup.sh inquire                           # default Claude runner
export CLAUDE_CODE_OAUTH_TOKEN="$(...)" && ./run.sh inquire

REALIZE_RUNNER=codex ./setup.sh inquire      # no credential consumed or stored
CODEX_API_KEY="$(...)" REALIZE_RUNNER=codex ./run.sh inquire
REALIZE_CODEX_AUTH=login REALIZE_RUNNER=codex ./run.sh inquire   # or: this machine's codex login
REALIZE_RUNNER=codex ./teardown.sh inquire

./teardown.sh inquire                        # Claude volatile state

For Claude, setup.sh prints the one interactive step — obtaining a token against the target-specific isolated config directory. For Codex, setup creates bare/protocol homes and installs the local protocol plugin only into the protocol home without reading or writing a credential. run.sh authenticates each codex exec child one of two ways, and codex login is never called by either:

• API key (default): CODEX_API_KEY from the run process, forwarded only to each codex exec child.
• Login (REALIZE_CODEX_AUTH=login): the codex login already on this machine, symlinked into the arm's disposable home only for the span of each codex exec — never copied, because a ChatGPT login rotates its refresh token and a copy would strand the real one. references/runbook.md carries why that keeps the homes isolated.

Read references/runbook.md before the first run. It records where runner isolation lives, where the budget floor sits, and what each column of the report asserts.

From CI

.github/workflows/type-realization.yml runs the Claude path on manual dispatch and comments the report on the PR. Codex remains local-only until the matrix can run behind the official action's credential proxy; repository-controlled harness code does not receive an OpenAI key in Actions.

Configuration

harness.config.json carries shared runner settings and a target registry. Each target owns its plugin directory, skill id, invocation, and case set. REALIZE_RUNNER=codex selects the committed Luna xhigh profile. Results are keyed by target, runner, and a hash of the actual protocol/style treatment, so one skill or ablation cannot reuse another's cache.

Prefer a capable model for the primary measurement. The weakest available one exercises the safeguards but not the protocol, so a failure there cannot separate a defect in the contract from a limit of the model.

Arms

Claude has four arms crossing the protocol against the Epistemic Ink output style, and one that removes the protocol's formal blocks. The style ships in the cc-plugin marketplace's ink-figure plugin; styleSource in harness.config.json names the file the style arms read, so those arms need that marketplace installed:

protocol-prose runs only when named in REALIZE_ARMS. It loads a copy of the plugin rebuilt at each run with the Lean blocks removed from its SKILL.md files, and refuses to run when the copy lost none. Read against protocol: a transition realized in both arms is realized without the formal blocks, and one realized only under protocol points to what they add.

The sham arm is not a construction. Published work on rule files for coding agents found random rules helping as much as curated ones, which makes "a long structured instruction is present" a live alternative explanation for any positive result. The output style is that alternative made available as a control: it fixes gate shape and observer markers while fixing none of a protocol's own obligations.

Codex has bare and protocol arms. Codex has no equivalent of Claude's shipped output-style treatment, so requesting style or protocol+style fails rather than simulating a different deployment condition; protocol-prose is likewise Claude-only. The Codex protocol treatment is present only when codex plugin list reports that plugin installed and enabled in the isolated protocol home while the bare home reports it absent. Codex JSONL currently exposes no separate skill-invocation event, so its skill report cell states that limitation rather than inferring invocation from the model's prose.