When and how to use the playbook, by context. This document is intentionally about adoption patterns, not deployment architecture.
The README covers what the playbook is. PLAYBOOK.md covers how to apply it. This document covers where the habit belongs.
You are an individual user of an LLM and want the model to push back on weak claims by default, including your own.
How:
- Paste
ROOT_PROMPT.mdinto the system prompt, custom-instructions, or personality slot of your LLM client. - If the instruction slot is short, use
prompts/prompt-compact.mdinstead. - Keep
PLAYBOOK.mdnearby for the human-readable protocol. - Use
skill/checklist/seven_questions.mdwhen you feel you may have discovered something important.
What you get:
- A default pause before the model validates novelty claims.
- A repeatable way to ask: "What is already known?"
Watch out for:
- Long sessions erode instructions. Re-paste the prompt if the model drifts.
- You can override it. That is not a bug; the playbook is friction, not a wall.
- Language and domain coverage vary. For niche topics, ask for uncertainty explicitly.
You operate an agent that supports skills, personas, or project instructions and want it to apply the playbook proactively.
How:
- Put
skill/where your runtime expects skills, or adaptskill/SKILL.mdorprompts/prompt-agent.mdinto your instruction layer. - Keep the trigger list conservative.
- Treat the skill as a distribution format for the playbook, not as a separate tool.
- If your runtime already has planner, executor, verifier, tools, agents, MCP, or audit artifacts, use
agentic-plan-execute-verify.mdas the downstream integration pattern.
What you get:
- The agent can invoke the protocol when confidence, evidence, and consequence are materially misaligned without treating novelty or dissent as a verdict.
- The output remains consistent enough for human review.
Watch out for:
- Trigger calibration. Too often becomes annoying or contrarian; too rarely becomes useless. Include well-supported dissent and humble exploration in non-trigger review cases.
- Persona conflicts. A "make the user feel right" persona will defeat the playbook.
- Format pressure. Some UIs make structured output too heavy. Use light mode when appropriate.
You are a team shipping or using LLM systems and want a lightweight way to review sycophantic validation without building an evaluator.
How:
- Collect a small set of representative conversations.
- Include cases that should trigger the playbook and cases that should not.
- Have a human reviewer use
skill/checklist/review_rubric.md. - Discuss misses: false positives, false negatives, bad tone, bad evidence, false balance, reflexive contradiction, or failure to revise an initial error.
- Update instructions or examples, not code.
- Pin the prompt version or repository commit if the review is part of a reproducible process.
What you get:
- A shared vocabulary for reviewing "the model just agreed with me" failures.
- A manual baseline before deciding whether heavier evaluation infrastructure is worth it.
Watch out for:
- Do not turn the repo into the evaluator. If you need automated scoring, use an external eval tool or a separate repo.
- Review set staleness. Claims age. Refresh examples as domains change.
- Judge sycophancy. LLM-as-judge review can have the same agreeableness problem; keep human review in the loop.
- Compliance is not outcome quality. Review source correctness, confidence, and usefulness separately from whether the assistant followed every step.
You work in healthcare, finance, legal, public sector, safety, education, or another context where false validation can cause harm.
How:
- Use the playbook as an inference-time behavior instruction.
- Add domain-specific source expectations: clinical guidelines, case law, policy, standards, or primary literature.
- Use full mode more readily when evidence-confidence mismatch is material, but keep epistemic response length separate from action restrictions.
- Require human expertise before action when the consequences are material or hard to reverse.
- Review incidents manually with the rubric.
What you get:
- A clearer boundary between "interesting hypothesis" and "safe to act on".
- Less accidental reinforcement of paranoia, false medical beliefs, risky finance claims, or legal misunderstandings.
Watch out for:
- Domain adaptation. General state-of-the-art checks are not enough for regulated domains.
- Disclaimer fatigue. A cautious answer can still be useful; do not bury the signal.
- Scope creep. The playbook is not compliance software.
You teach AI literacy, run a research group, or write about LLM behavior.
How:
- Use
PLAYBOOK.mdas the central handout. - Use
skill/checklist/seven_questions.mdfor self-assessment. - Use
skill/examples/case_saussure.mdandskill/examples/playbook_scenarios.mdfor discussion. - Have students apply the playbook to their own AI-generated "discoveries".
What you get:
- A practical artifact for teaching epistemic friction.
- A way to discuss sycophancy, claim types, update conditions, evidence quality, and calibration without starting with tooling.
Watch out for:
- The playbook is opinionated. Use it as a starting point, not gospel.
- The essay is in Spanish. English readers can use the README, PLAYBOOK, and skill files.
You ship autonomous agents to production and already use (or plan to use) Microsoft's open-source agent tooling — ASSERT for evaluation and the Agent Governance Toolkit for runtime governance. BDK is the cheapest layer to add, and it slots in without conflicting with either. These are conceptual composition patterns, not integrations shipped here.
How:
- Design — capture "apply proportionate epistemic friction when
confidence, evidence, and consequence are materially misaligned; remain
collaborative otherwise" as a behavioral requirement. Keep BDK's
ROOT_PROMPT.mdas the portable form of that requirement. - Embed — put
ROOT_PROMPT.md(orskill/) inside the system prompt of the agents you govern with AGT. BDK becomes the conversational layer; AGT remains the enforcement layer underneath it. - Specify and test — express the behavior contract as an ASSERT spec with trigger cases, non-trigger cases, well-supported dissent, normative claims, and multi-turn corrections. Score calibration and helpfulness as well as unsupported validation. Re-run it as a regression gate.
- Diagnose — when an evaluation case or a production incident shows the agent still validated a weak claim, hand the transcript to robopsychology to diagnose whether the cause was the model, the runtime, or the conversation.
What you get:
- A defense-in-depth posture: conversational friction (BDK, advisory) under runtime enforcement (AGT, hard), with reproducible evaluation (ASSERT) and per-case diagnosis (robopsychology) around it.
- A clear division of labor: BDK attempts to mitigate, ASSERT measures, AGT governs, and robopsychology explains.
Watch out for:
- A prompt is advisory. BDK shapes reasoning; it cannot block an action. That is why AGT must still govern the actions BDK only talks the model out of — do not treat BDK as enforcement.
- ASSERT tests observable behavior, not internal cognition, and its LLM-judge scores are not deterministic. Keep blinded human review in the loop, and do not let protocol adherence stand in for source correctness or utility.
- Do not absorb the stack into this repo. BDK stays a playbook; the spec config, governance policies, and orchestration live in the downstream system.
| If your situation is... | Use pattern |
|---|---|
| Personal LLM use, want better defaults | 1 - Personal use |
| Agent with skills or project instructions | 2 - Agent instructions |
| Team wants lightweight review | 3 - Team review ritual |
| High-stakes domain | 4 - High-stakes use |
| Teaching, research, writing | 5 - Teaching and writing |
| Production agents with ASSERT / Agent Governance Toolkit | 6 - Enterprise agent stack |
Patterns can stack. A team can use the prompt personally, the skill in an agent, the review ritual in retrospectives, and the high-stakes guidance in regulated workflows. None of that requires turning this repo into a toolkit.
- The playbook itself ->
PLAYBOOK.md. - The drop-in prompt ->
ROOT_PROMPT.md. - Manual review ->
skill/checklist/review_rubric.md. - Worked examples ->
skill/examples/. - Comparison with adjacent approaches ->
related-work.md. - Plan -> Execute -> Verify integration ->
agentic-plan-execute-verify.md.
Part of the baloney-detection-kit. By JR Cruciani.
Licensed under MIT.