What your agent reads.

Tell your agent:

Set up Assure. Follow https://github.com/Symbolia-Assurance/assure-action/blob/v0/skills/assure/SKILL.md

• The Assure skill

  Assure checks the software your code runs on. From your own GitHub Actions workflow it reads your PostgreSQL server or your site's HTTP responses and tells you, obligation by obligation, what holds, what is disproven, an

• Route 1: a connection to a PostgreSQL server

  On Supabase, the postgres role cannot grant pgreadallsettings or pgreadallstats. It can grant pgmonitor, and the collector this Action ships refuses pgmonitor as broader than it needs (section 2). So this Action version

• Route 2: collected PostgreSQL files

  On Supabase, the postgres role cannot grant pgreadallsettings or pgreadallstats. It can grant pgmonitor, and the collector this Action ships refuses pgmonitor as broader than it needs (section 2). So this Action version

• Route 3: HTTP endpoints

  http-observed-baseline checks one HEAD response per endpoint you select against the HTTP obligations Assure holds (response framing, transport policy, cookies and similar). Live collection against real endpoints is not i

• Route 4: a MySQL submission

  mysql-declared-model checks a MySQL server against a mysql:// connection and your declaration file, or against an artefacts directory holding raw/submission.json.

• Route 5: a Python (Flask) repository

  python-auth-declared-model checks how a Flask app signs people in and guards its routes. It reads your code as text and never runs it. The check is free and contacts no server of yours.

• Deliberate feedback

  Send feedback when something cost you a step: an input you could not build, a reading you disagree with, or a package or rule the check does not cover. Send what you saw and what you expected, within the customer's permi