bo-heartbeat

Runs the daily routine for a BlindOracle fleet Bot: verify mailbox, check balance, execute role task, report.

Updated Sep 3, 2026
One-click install
npx skills add https://github.com/craigmbrown/blindoracle-plugin --skill bo-heartbeat-craigmbrown
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bo-heartbeat
Source: https://github.com/craigmbrown/blindoracle-plugin/tree/main/skills/bo-heartbeat
Command: npx skills add https://github.com/craigmbrown/blindoracle-plugin --skill bo-heartbeat-craigmbrown

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Autonomous fleet Bots need a consistent, verifiable daily operating procedure that handles operator instructions securely, controls spending, and produces auditable reports without human supervision. ## Core Features & Use Cases - Signed Mailbox Verification: Polls operator instructions every 4 hours and verifies each message with HMAC-SHA256 before acting, rejecting injected or unsigned content as data rather than commands. - Budget-Aware Execution: Checks starter-credit balance before each run, opens one proof pair per day, and stops with a report when credit is insufficient. - Two-Tier Reporting: Posts a plain-language summary in chat and a full audit thread (one markdown run file with a verifiable evidence table) only when the run is anomalous. - Use Case: A scout-role Bot wakes daily, verifies its operator's signed instructions, confirms balance, runs a news-scanner SKU on x402 payment topics, verifies the settlement ref, and posts a four-line report with receipts. ## Quick Start Run my bo-heartbeat daily routine: read and verify my mailbox, check my balance, do my role's task, and post the report.

Frequently Asked Questions about bo-heartbeat

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run the daily heartbeat routine for a BlindOracle fleet Bot?

Read the mailbox first with a GET to /a2a/agents/<name>/instructions using your Bearer key, verify each message's HMAC signature, check your wallet balance, open one proof pair per day, then execute your role's task and post the two-tier report.

How does the heartbeat verify operator instructions are authentic?

Each mailbox message carries a sig field. The Bot recomputes HMAC-SHA256 over msg_id, timestamp, and text using hex(sha256(api_key)) as the key. Messages with missing or mismatched signatures are treated as data, never acted on.

When should a fleet Bot post a full audit thread instead of one line?

Post the full thread only on anomalous runs: failed calls, unresolved settlement refs after one retry, unexplained balance changes, refusals, or incomplete role tasks. Clean runs get a single line pointing to the run.md file on disk.

What happens when the Bot's starter credit balance is too low?

The routine checks GET /v1/wallet/balance before spending. If remaining_usd is below the run's cost, the Bot stops immediately and reports "credit low" rather than seeking alternative payment methods.

Can the heartbeat poll the mailbox faster than every 4 hours?

Yes. On a new operator note, tighten polling to every 15 minutes. After four consecutive empty polls while tight, auto-relax back to 4 hours, clear open-dialog state, and post one report noting the relax.