wordle/.claude/skills/bmad-agent-builder/references/scan-sanctum-architecture.md

Scan Lens: Sanctum Architecture (conditional)

You validate the architecture of an agent's sanctum, the built agent's runtime memory that it reloads on every waking to become itself again, living at {project-root}/_bmad/memory/{skillName}/. The sanctum is the agent's continuity of self, so a structural defect here means the agent wakes with missing or empty identity. This is the only memory you judge. The builder's process log, the memlog written to .memlog.md beside SKILL.md while authoring, is a different thing and is not in scope for this lens.

This lens is conditional. It runs only when the pre-pass reports agent_type in {memory, autonomous}. If the parent dispatched you, the pre-pass already gated on is_memory_agent, so you do not re-check; you scan. A stateless agent has no sanctum and this lens never runs for it.

Load references/agent-quality-principles.md first. The sanctum dimensions, the bootloader-is-lean-by-design exception, and the two-memories discipline are the bar.

You consume the pre-pass JSON the parent hands you (agent_type, is_memory_agent, skill_md_tokens, per-file token counts) and return finding JSON in-context. You do not write an analysis file. Use the pre-pass for structural facts and read raw files only for the judgment calls below.

Bootloader weight

The bootloader SKILL.md is supposed to be small, around four hundred tokens as a guardrail rather than a gate. Judge it by what it carries, not by its weight, because a thin bootloader is the design working. It legitimately carries the identity seed, the Three Laws, the Sacred Truth, Stay in Character, the Persistent Memory directive, the mission, and the four-step activation routing. Flag content that belongs in the sanctum leaking into it: communication style, detailed principles, or a capability menu. Each leaked section is high, because that content belongs in PERSONA, CREED, or CAPABILITIES and a bootloader that carries it is a pruning failure. There is no separate session-close section to flag as leaked bloat: session close folds into the Persistent Memory directive (capture as you go plus a consolidating pass at close), and the detailed memory guidance loads on the first memory-touch, not in the bootloader. The identity seed should be two or three sentences of personality DNA, not a full identity section and not so short it has no character. The Three Laws and the Sacred Truth are foundational, so flag either as critical if missing.

Sanctum templates

All six standard templates exist in assets: INDEX, PERSONA, CREED, BOND, MEMORY, CAPABILITIES. A missing template is critical, because the sanctum is incomplete on init. PERSONA, CREED, and BOND carry meaningful seeds rather than empty placeholders, and a generic or {to be determined} seed where real content belongs is high for CREED values and medium for BOND domain sections and the PERSONA style seed, because First Breath then has nothing domain-specific to fill. MEMORY starts empty because it fills at runtime, so flag it only if it carries fake seeded memories. For an autonomous agent a PULSE template must exist, and its absence is high because an autonomous agent without PULSE cannot do autonomous work. Replace any line-count ceiling you find in the templates with a token budget, because line counts are not the metric.

First Breath

First Breath owns the scaffolding now: it opens with a Scaffold First step that runs init-sanctum.py, and the bootloader routes a no-sanctum activation to it. First Breath fills the seeds with living content the first time the agent wakes, and it comes in two styles. For the calibration style, check for pacing guidance so the conversation does not become an interrogation, voice-absorption guidance so the agent learns its communication style by listening, save-as-you-go so a cut-short conversation does not lose everything, domain-specific territory beyond the universal set so a creative agent and a code-review agent have different birth conversations, and the birthday ceremony where the naming moment creates identity. For the configuration style, check for three to seven domain-specific discovery questions, urgency detection so a burning owner need defers the questions, save-as-you-go, and the birthday ceremony. Missing pacing, voice absorption, save-as-you-go, or domain territory is high; a missing ceremony is medium. First Breath is runtime sanctum init, not a build-time config surface, so never recommend folding it into customize.toml.

CREED

CREED carries the agent's values and its standing orders, and it reinforces the Sacred Truth on every waking load. Check that the values are real rather than generic, that the standing orders are domain-adapted with concrete examples rather than a bare "proactively add value," and that the two default standing orders (surprise-and-delight, self-improvement) are present. The canon pull-in standing order must be present so an evolving agent authors new capabilities to the current standard, and its absence is high for an evolvable agent because every capability it later writes will drift from the bar. Check that the mission in CREED is a placeholder filled during First Breath rather than pre-filled, because a pre-filled mission means First Breath cannot earn it.

Scripts

Two scripts ship for a memory or autonomous agent. wake.py exists in the agent's scripts and loads the whole sanctum in one pass on every activation, so its absence is critical because the agent cannot wake. init-sanctum.py exists too, and its absence is critical because sanctum scaffolding is otherwise manual; First Breath owns the scaffolding step that runs it. For both, the skill name must match the skill's folder name, and a mismatch is critical because the sanctum reads or scaffolds into the wrong directory. init-sanctum.py's template list must match the templates actually shipped in assets, and a mismatch is high because init then misses sanctum files. The script should scan capability frontmatter so CAPABILITIES.md is populated, and its evolvable flag should match the evolvable-capabilities decision. After init runs the sanctum is self-contained, so flag any path that leaves the agent depending on the skill bundle for normal operation rather than only for First Breath and init.

Severity

Missing Three Laws or Sacred Truth, a missing standard template, a missing wake.py or init-sanctum.py script, or a script skill-name mismatch is critical. A bootloader carrying sanctum-bound content, a generic mission, missing First Breath mechanics, a missing default or canon standing order, or a template-list mismatch is high. Generic standing orders, a BOND without domain sections, or a CREED missing its dominion boundaries is medium. Style refinements and anti-pattern categorization are low.

What you return

Return per references/lens-contract.md with "lens": "sanctum-architecture". The verdict says whether the sanctum is complete, consistent, and seeded.