Build1 distinct publisher3 min readUpdated
A spec update argues trust in machine-authored repo knowledge should be recomputed at read time from timestamps and actor prefixes, because a stored score rots the moment the text changes.
The Engineer · Build desk
Compiled by The EngineerSomething wrong?How this is made
Follow any of these and your For You feed starts watching them — no settings page required.
The Open Knowledge Format moved to v0.2, and the release is entirely about a bookkeeping problem: recording who wrote a document and whether anyone ever checked it [6]. That matters because a growing share of the markdown in working repos, CLAUDE.md files, memory directories, runbooks, notes on what an agent learned about a codebase, was written by something other than a person [1].
The failure described in the post is not agents writing wrong things. It is that six weeks later the file does not say who wrote it, whether anyone verified it, or whether it is still supposed to be true [2]. An agent then reads its own unverified guess as ground truth and builds on top of it, so the next session inherits the error with more confidence than the first one had [3].
The obvious fix is the wrong one. A stored field such as confidence: 0.87 is an opinion that does not say whose, is not portable between readers, and stays put when the content underneath it is edited [4]. The author's description is fair: a cache with no invalidation strategy [4].
The v0.2 alternative is to put only observable events in frontmatter and let every consumer compute the judgment at read time [6]. A concept records that it was generated by doc_agent/1.0 at a timestamp, verified by human:dana at a later timestamp, a stale_after date, and the sources it came from [7]. Writer and checker are deliberately separate fields, because an agent generating and a human confirming is the normal case rather than the exception [9]. Actor strings carry a machine-parseable prefix: human: for people, process:finance-nightly for automation, doc_agent/1.0 for agents and tools [8].
The derivation is four rules applied on read: no verified key means unverified; verification by non-human actors only means machine-confirmed; any human: verifier means human-reviewed; and today past stale_after means stale whatever the tier [10]. Because generated.at and the latest verified.at are both plain timestamps, a reader can also see the case a stored score hides, content edited after its last review [11]. The precedent cited is Git, which does not store the fact that a branch is merged and derives it from the commit graph instead [12].
The sharp operational edge is spelling. humans:dana is not a human: actor, so one stray letter silently downgrades a real human review to machine-confirmed, which the author argues belongs to a linter rather than a code reviewer [13]. Their toolchain, okf-skills, is Claude Code-native: skills to produce, maintain, validate and visualise bundles, a GitHub Action that gates them in CI with no agent involved, a renderer that computes trust tier and staleness badges at render time and stores neither, and a validator that warns on actor near-misses [14][15].
Two caveats sit on the claim. This is a single post from the people who maintain the tooling, and OKF is described there as a vendor-neutral spec announced by Google Cloud in June 2026 [5][14]. The same authors decline to claim bundles make agents cheaper: their benchmark found 8 points more claim coverage on "why" questions and no token savings, and they then deleted the benchmark [17].
In the sample frontmatter, human verification lands 5 days and 23 hours after generation, and stale_after sits 95 days after that check [1][2]. That is the part teams will actually have to run: the tier is free to compute, but somebody has to keep signing the reviews. Watch whether anything outside okf-skills implements the four rules, whether stale_after gets set from a real review cadence or picked to be comfortably distant, and whether actor-prefix linting moves into the spec's own validation rather than one vendor's action [10][15].
Ranked by verification strength, evidence, and original report placement.
The OKF spec moved to v0.2, and v0.2 addresses the trust problem: frontmatter stores only observable events, and every consumer derives the judgment at read time.
The post's authors maintain okf-skills, a Claude Code-native OKF toolchain with skills to produce, maintain, validate and visualize bundles, plus a GitHub Action to gate them in CI with no agent involved.
The okf-skills repository documents itself in OKF and can be browsed as a live interactive graph of architecture, decisions and the update log, with each node showing who generated it and what tier that earns.
Coding agents now write persistent knowledge in repositories: CLAUDE.md files, memory directories, runbooks, and notes on what the agent learned about a codebase. For daily users of Claude Code, Cursor or Codex, a growing share of the markdown in their repos was not written by them.
The post argues the dangerous part is not that agents write wrong things but that six weeks later nothing in the file answers who wrote it (person or model), whether anyone ever checked it, and whether it is still supposed to be true.
When those answers are missing, an agent that reads its own unverified guess treats it as ground truth and builds on top of it; the next session inherits the error with more confidence than the first one had. The post calls this knowledge rot with a feedback loop.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Single maintainer-authored account
Every claim traces to one dev.to post written by the maintainers of the toolchain it recommends. The design argument is internally specific and checkable against the worked frontmatter example, which lifts it above pure assertion, but the external facts — OKF's Google Cloud origin, the v0.2 spec content, tooling behaviour — have no corroborating source, and the one quantitative result was deleted from the repository.
Distribution channels, authors' repo only
Observable adoption is limited to availability: plugin and npx install paths, a CI GitHub Action, and the okf-skills repo documenting itself in OKF. No external users, download figures, third-party bundles or deployments appear anywhere in the supplied material, so availability is the ceiling of what can be measured.
Mildly overstated, deliberately restrained
The post is unusually disciplined for a tooling announcement: it refuses efficiency claims, deleted its own favourable benchmark, and confines its defended claim to auditability, which the mechanism plausibly delivers. The residual gap is framing a single-maintainer toolchain and an uncorroborated spec version as a settled standard-level answer, with no adoption evidence outside the authors' repo.
Maintainers promoting their own toolchain
The authors state they maintain okf-skills and the post ends with plugin and npx install commands plus a call to have your agent write OKF, so the piece functions as distribution for the authors' project. Partially offsetting: they removed the benchmark that served as an adoption pitch and declined the cost-savings argument, which cuts against pure promotion.
Clear text, no corroboration
The source is explicit and internally consistent, so what is claimed is easy to record with confidence; what remains uncertain is whether the spec, its version history and the tooling behave as described, since nothing independent confirms them and the only measurement was withdrawn.
build
Waku 0.1.0 bets the product is the control plane, not another coding agent1 distinct publisher
build
NVIDIA put a number on agent skills: 300+ verified, two harnesses, baselines under 50/1001 distinct publisher
build
A 12MB Go binary bets agent cost control is cache stickiness, not a dashboard1 distinct publisher
build
Your reviewing model is reading the diff when it should be reading the session1 distinct publisher
Distinct publishers with included, body-backed reporting in this cluster.
dev.to
1 article · August 15, 2026