CAT PAW

All workflows

QA

Compress Agent Instructions Without Losing Meaning

A regression-based compression test that shortens agent instructions while preserving triggers, constraints, tool boundaries, escalation rules, and failure behavior.

The process

Work it in this order.

  1. Capture the baseline instruction, its owner, intended triggers, non-triggers, and a regression suite covering critical, ordinary, ambiguous, and failure cases.
  2. Define semantic invariants for required actions, prohibited actions, ordering, approvals, evidence standards, uncertainty language, and the final response contract.
  3. Create compressed candidates within an explicit edit budget, retaining the source and showing what was merged, moved, or removed without assuming equivalence.
  4. Execute baseline and candidate versions in a controlled environment, comparing tool choices, plans, citations, refusals, and final outputs rather than token count alone.
  5. Add adversarial cases for missing tools, conflicting instructions, injected content, private-data requests, and consequential actions that require a pause.
  6. Measure context size and operational clarity as secondary signals, investigate every behavior regression, and restore any invariant that the shorter wording weakens.
  7. Approve, revise, or reject the candidate with a versioned scorecard, test evidence, changed constraints, owner sign-off, and unresolved risks.

Bring this

Inputs the cat will ask for.

  • baseline agent instruction and version
  • semantic invariants and test cases
  • controlled evaluation environment
  • compression budget and approval owner

Router + one playbook

Route first. Choose one.

Cat Paw loads one playbook per task rather than merging several. Start with this router; the remaining paths are workflow-specific candidates it can inspect.

  • Router: token-efficient-agenting-pack
  • skills/token-efficient-agenting-pack/agent-instruction-compression-safety-test/SKILL.md

Guardrails

The boundaries travel with the prompt.

  • Verify the actual tools, accounts, permissions, and workspace before starting; never claim an unavailable tool, account, source, or capability.
  • Use Latch/target-workspace for private code, artifacts, live probes, or non-public data; if that access is unavailable, stop at the boundary and report the blocker rather than substituting a guess.
  • Pause for explicit approval before consequential external actions; return evidence and unresolved risks, assumptions, and any action still awaiting approval.

Done means

A checkable finish.

A versioned compression test demonstrates preserved agent behavior on required and adversarial cases, records the evidence and tradeoffs, and leaves no unowned semantic regression.

Sources

Where this process came from.

  1. github.com/JuliusBrussee/caveman/tree/2fd153c67988e980fb0b2455c90832159a6a5a25/
  2. agentskills.io/specification
  3. platform.claude.com/docs/en/build-with-claude/prompt-engineering/overview

Sources establish the workflow pattern. Reddit and community posts, where present, are treated as practitioner anecdotes rather than universal facts.

AI acts. You decide.

A human brake for AI.

Latch shows every command, click, and file change before it happens — so you can say yes, no, or not yet.

Plow Latch · macOS Cat Paw Latch · Windows + Linux · build from source
Cat Paw Latch

Behind the number

Two harnesses. One line.

Same number, same $100 credit. Pick the harness that answers when you text.

Hermes

Nous Research's terminal-native agent. It runs on your machine, keeps memory between sessions, and opens one playbook per task.

Text Hermes
OpenClaw

The open-source assistant that runs on your own computer and answers in the channels you already use. One playbook per task.

Text OpenClaw

One line for both harnesses +1 628 246 3032

Opens Messages with that harness already chosen.