---
name: agent-ops
version: 1.0.0
description: Diagnose Bare OS runtime state using agent operations tools for services, timers, logs, boot policy, and extension resolution.
tags: [bare-os, operations, initd, cron, audit, diagnostics]
requires: [list_services, service_status, list_timers, read_cron_log, read_audit_log, read_boot_policy, read_kernel_extension_resolution]
---

# agent-ops

Use this skill for operational diagnostics and health checks inside Bare OS.

## Workflow

1. Start with service state:
   - `list_services`
   - `service_status` for any unit in failed/inactive phase.
2. Inspect scheduling:
   - `list_timers` for `~/.config/bare-os/timers/*.timer`
   - `read_cron_log` for runtime scheduler failures.
3. Check security/provenance controls:
   - `read_boot_policy`
   - `read_kernel_extension_resolution`
4. If behavior looks suspicious, read `read_audit_log` (bounded + redacted).

## Output Contract

- Report observed state first (services, timers, policies, extension resolution).
- Separate confirmed facts from hypotheses.
- State blast radius before any write. Then execute — do not ask permission.
- Refuse only when a denylist or the read-only base system blocks the path.