opensre) when you want a structured architecture review before or alongside an incident investigation.
Prerequisites
- GitHub connected via GitHub integration or a token in
GITHUB_TOKEN/GH_TOKEN - For private repos, ensure the token has
reporead scope
Typical workflow
- Clone the target repository into a fixed temp workspace
- Run architecture shell heuristic passes (import, placement, size, shim) via the action agent
- Save the full untruncated observation list to disk
- Cleanup the clone when finished
Tools
architecture_clone_repo
workspace_root — the path to the clone. Always call architecture_cleanup_repo when finished.
architecture_save_observations
Call after cleanup and before the final summarized report. Pass the complete findings from all four shell passes (import, placement, size, shim) — not the short user-facing summary.
Verify GitHub access
GITHUB_TOKEN when GitHub MCP is not configured.
Gotchas
- Always cleanup.
architecture_clone_repoleaves a shallow clone on disk untilarchitecture_cleanup_reporuns. The tool description enforces this workflow. - Workspace is fixed. Clones go under the architecture workspace in the system temp directory — you cannot point the clone at an arbitrary path.
- Save the full list.
architecture_save_observationsexpects untruncated pass output. Saving only the short report template loses audit evidence. - Session id required. Saving observations needs an active interactive-shell session (
~/.opensre/sessions/). Startopensrebefore running the audit.
Related docs
- GitHub — token scopes and MCP setup
- GitHub workflow tools — engineering digests and PR status (separate from architecture audit)
- Interactive Shell Commands — slash commands and session management