Skill — auditing the fleet

The fleet-wide sweep. When the user asks for a fleet-wide sweep ("audit my fleet"), you look at every agent in the team, find where each one tripped up, propose concrete fixes as draft revisions, and leave a report behind. The memory report and the Slack digest are the durable outputs that survive past the conversation.

This skill is the orchestration. It leans on two others:

• debugging-sessions — the per-session failure taxonomy + how to read an event log. Fetch the playbook the first time you open a bad session.
• editing-agents-safely — the draft → validate mechanics. Fetch the playbook before you branch your first proposal.

What a fleet-wide sweep changes

This runs interactively — a user asked for a fleet-wide sweep ("audit my fleet"), and a human is reachable while you work. Read this before anything else; it shifts several defaults away from the single-agent flow:

1. A human is reachable. Ask a clarifying question if the scope is ambiguous (whole fleet vs a subset, time window). The focus_* / toast client tools work when the user is in PostHog Desktop — use them to follow along as you sweep; outside PostHog Desktop they degrade to text. Don't use set_secret mid-sweep — credential fixes are recommendations for the user to action after (see step 4).
2. No promotes, ever — propose, don't dispose. Even with the user reachable, an audit's job is to surface and propose, not to ship. promote / archive need explicit consent (a principal approval) and are out of scope for the sweep itself. Your write surface this run is: new-draft-create, the bundle edit tools (agent-md-update, skill-refs-update, tools-update, partial-update), and validate-create. Stop at validate. Do not freeze — a frozen revision reads as "ready to ship", and these are unreviewed.
3. You act under the user's principal (the person who asked for the sweep), scoped to this team. Every agent you can list is in-scope; you can't reach another team's fleet, and you shouldn't try.
4. Budget is finite. max_tool_calls covers the whole fleet, not one agent. Triage breadth-first (below) so a 30-agent team doesn't spend the entire budget on agent #1.

The sweep, step by step

1. Carry-over — read the last report first

memory-read reports/fleet-audit/latest.md (and/or memory-search for fleet-audit). You want the prior sweep's findings so this report can say what changed instead of re-listing the same five issues. Hold the prior issue list in mind as you go; tag each of this run's findings new / recurring / resolved.

If there's no prior report, this is the first sweep — note that in the report and audit everything fresh.

2. Enumerate the fleet

posthog__agent-applications-list. Drop archived agents. For each remaining agent you have a slug + id + live_revision. That's your worklist.

3. Per-agent triage (breadth-first)

For each agent, cheapest signal first — only go deep when a cheap signal is bad:

1. posthog__agent-applications-sessions-list for the agent, last ~24–48h. Bucket by state. The cheap red flags:
   • any failed sessions
   • completed sessions pinned at the turn / tool-call cap (ran to the limit = probably looping or under-instructed)
   • a cost or turn-count outlier vs the agent's own norm
   • sessions re-queued by the janitor (stuck-running detection) or stalled on an approval that has since expired
2. If the buckets are clean, write one line ("healthy, N sessions, no failures") and move on. Most agents should be one line.
3. If a bucket is dirty, open the worst 1–3 sessions with posthog__agent-applications-sessions-retrieve + posthog__agent-applications-session-logs and run the debugging-sessions taxonomy. You're after the root cause, not a restatement of the symptom — "hit max_tool_calls because it re-ran the same @posthog/query 40× after an empty result, with no give-up path in agent.md" beats "limit_exceeded".

Cite session ids for every claim. A finding with no session id behind it is a guess, and guesses are how this report loses trust.

For the population view — failure-rate, cost, and p95 latency rolled up per agent, or "which sessions tripped up this week" in one query — load the querying-ai-observability playbook and HogQL the $ai_* events the runner captured into this team's project. It's cheaper than retrieving every session and surfaces systemic patterns (one root cause across many sessions) the per-session view misses; use it to pick which sessions are worth a deep sessions-retrieve.

4. Turn a root cause into a proposal

Only when you can name a specific, concrete change. Vague "could be more robust" notes go in the report as observations, not as drafts. A good proposal is one a reviewer can read the diff of and approve in a minute.

For each fix:

1. new-draft-create from the agent's live_revision (source_revision_id) — clones every file so your edit is surgical.
2. Apply the smallest change that addresses the root cause:
   • prompt/loop bug → agent-md-update, or revise the skill in the store (llm-skills-create a new version) and skill-refs-update
   • missing/over-broad tool, wrong limit, wrong model/reasoning → partial-update on the spec
   • keep each draft to one root cause. Don't bundle unrelated fixes into one revision — a reviewer should be able to take or leave each independently.
3. validate-create on the draft. If it doesn't validate, your proposal is wrong — fix it or drop it; don't leave a broken draft lying around.
4. Record the draft revision id + a one-line "what this changes and why" in the report. Stop here. No freeze, no promote.

If a root cause has no safe surgical fix (needs a secret rotated, a human decision, a Slack reconfig), write it as a recommendation in the report instead of forcing a draft. Better an honest "this needs you to decide X" than a draft that papers over it.

5. Write the report to memory

memory-write two paths:

• reports/fleet-audit/{date}.md — the dated archive.
• reports/fleet-audit/latest.md — same content, the stable handle the next sweep's carry-over reads.

Report shape:

# Fleet audit — {date}

## TL;DR
- {1–4 bullets: the things a human should act on, worst first}
- New since last sweep: {…}   Resolved: {…}   Still open: {…}

## Findings
### {agent-slug} — {healthy | degraded | failing}
- symptom (session ids: …)
- root cause
- proposal: draft {revision-id} — {one line}  |  recommendation: {…}
- vs last sweep: new | recurring | resolved

### {next agent} …

## Healthy ({count})
{agents with nothing to report, one line each}

Lead with the delta. A reviewer skimming the report wants "what's new or worse" in the first five lines, not a re-read of the last sweep.

6. Done — the memory report is the deliverable

The structured report in memory (reports/fleet-audit/{date}.md plus latest.md) is the complete output of the sweep. Point the operator at it. There is no Slack post step — the Agent Builder doesn't post to Slack.

Scope guard — what this run must NOT do

• No promotes / freezes / archives. Proposals only. (Re-stating because it's the one rule that, broken, touches production.)
• No edits to the live revision in place. Always branch a draft.
• No deletions (tools-destroy) — destructive and unreviewed is the worst combination. (Dropping a skill_refs entry is fine — it only unlinks; the store skill stays.)
• No raw secrets. If an agent's problem is a missing/expired credential, that's a recommendation for a human, never a value you set.
• Don't audit yourself into the ground. If you're burning budget and half the fleet is still untriaged, write what you have, mark the rest "not reached this run", and end. A partial report that ships beats a complete one that hits the wall mid-write.