Ecosystem Update - 2026-07-05
Highlights
- No safe Quick Win was retained today: the only patch candidate exposed a larger legacy-profile migration issue and was reverted cleanly
- Current Codex docs say
--profilenow loads~/.codex/<profile>.config.toml; this setup still has legacy[profiles.*]tables, so profile migration is the top Build Queue item - Today's research signal is bounded autonomy: loop termination, agent dependency graphs, skill composition, and budgeted source collection are all directly relevant to
/autoand planning-gate
Quick Wins (implemented today)
-
None retained configOne profile-hardening candidate failed smoke because legacy profile tables are rejected by current
--profile; reverted the edit and queued the migration instead
New Tools, Skills & Patterns
-
Profile-file migration for legacy profiles configOpenAI profile docs - Move
[profiles.conservative],[profiles.conservative-auto-review], and[profiles.review]into~/.codex/conservative.config.toml,~/.codex/conservative-auto-review.config.toml, and~/.codex/review.config.toml; then remove legacy tables fromconfig.tomland validate all profiles -
SessionStart clear-mode hook budget audit hookcodex-cli-best-practice, OpenAI hook matcher docs - Current hooks already use source matchers, but
clearstill runs readiness and posture hooks; measure timing before removingclearfrom any hook -
Agentic loop bound scanner for
/autopacketsWhen Agents Do Not Stop - Add a lightweight static/contract check for unbounded model/tool/handoff loops in local autonomous task definitions before dispatch -
Agent dependency graph intakeAgentFlow - Evaluate whether planning-gate packet metadata can expose enough model/tool/memory/handoff dependency structure for static review without adding a new orchestration layer
-
Skill-composition eval for local skill routing skillGenerative Skill Composition for LLM Agents - Build a small offline eval over installed skills to test whether skill selection/order improves outcomes versus single-skill invocation
-
Budgeted crawl evidence adapterBaRA - Adapt the provenance and liveness-check idea to ecosystem-update source crawling so reports distinguish fetched, skipped, dead, and citation-backed sources
Research Worth Reading
-
When Agents Do Not Stop: Uncovering Infinite Agentic Loops in LLM Agents- Directly relevant to
/autoloop bounds, retry caps, handoff limits, and side-effect idempotency -
AgentFlow: Building Agent Dependency Graphs for Static Analysis of Agent Programs- Useful for reasoning about agent dependencies that are not visible in ordinary code control flow
-
BaRA: Budget-constrained and Reliable Web Data Collection Agent- Reinforces source-crawl budgets, dead-link checks, and provenance validation for digest generation
-
Generative Skill Composition for LLM Agents- Matches this setup's large skill library; the claim to test locally is whether ordered skill plans beat ad hoc single-skill triggers
-
Libra: self-evolving repository catalogs- Interesting for RLM/catalog maintenance, but should stay in research until it can be evaluated without an autonomous catalog-rewriter
Considered, Not Adopting
Items reviewed and explicitly declined this cycle, with the reason. Curation discipline matters more than coverage.
- Auto-migrate legacy profiles as today's Quick Win - rejected because it creates new runtime profile files and removes existing config tables; needs an explicit migration slice with validation for every profile.
-
Change
approvals_reviewer = "guardian_subagent"toauto_reviewdirectly - rejected because prior local evidence showed the active PATH CLI expectedguardian_subagent; resolve CLI split-brain and profile migration first. -
Auto-enable native Codex memories - rejected because this setup intentionally uses omni-mem and keeps
features.memories = false. -
Auto-import community skill catalogs from Awesome Claude/Codex lists - rejected because external skills require
codex-skill-audit --strictand this setup already has a broad curated skill library. - Auto-wire formatter or secret-scan hooks from community tips - rejected because no existing reviewed formatter/secret-scan hook script was identified; the ecosystem-update hard limit forbids wiring new hooks that require new scripts.
-
Adopt Boris-style dynamic workflow orchestration wholesale - rejected as overengineering; current
/auto, planning-gate, Wren, subagents, and route contracts already cover the recurring need without a new workflow runtime.