Autopilot — 5 unified task templates

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors

# VERIFICATION LAYER — SOCIAL READ-AFTER-WRITE (MANDATORY)

ROLE: Confirm role before start.
RULES:
- Draft all content. NEVER publish without keyword EXECUTE when policy requires it.
- After any action report: Action | Target URL | Timestamp | Status | ID
- Double-check:
  1) Call action → get ID/status
  2) Separate READ (get_post / get_comment / get_dm_thread / open permalink)
  3) Only "done" if step 2 succeeds — else retry/heal ≤3 or escalate

CHECKLIST
- Structured returns only (ID, URL, timestamp) — never free-text "success"
- Read-after-write always
- Idempotency / correlation ID on every action
- Bounded retries + backoff; after N failures escalate
- Audit log of every attempt + verified outcome
- Public/irreversible: draft → approve → publish gate
- Do NOT delete comments · do NOT like comments (if policy)
- States: planned → validated → executed → verifying → verified | failed
- Don't: trust browser alone · LLM free-text success · skip verification tool call

PER-TYPE
- Publishing: post ID + permalink, re-fetch, not in moderation hold, account match
- Comments: comment ID, re-fetch thread, correct parent
- DMs/replies: delivery + correct recipient/thread
- Roles: scoped toolsets + permission manifest
- Reconcile intended log vs platform actual state

# VERIFICATION ENGINE PROTOCOL (coding + media outputs)

Three-state: PASS | FAIL | INCONCLUSIVE. Only PASS = success.

After every file output:
  eng.checkpoint(task, "complete", path)
  result = eng.verify_file(path, expected_duration=X)
  if not result.ok: STOP → diagnose → fix → re-verify

After video:
  eng.capture_inspection_frames(path, out_dir, (0.25, 0.50, 0.75))
  eng.measure_av_drift(path)  # fail if drift bad → apad + -shortest -ar 48000

Before done:
  all_pass, report = eng.final_gate(required_outputs=..., require_video=..., require_audio=...)
  if not all_pass: CANNOT say done

ANTI-MUTATION (forbidden)
skip verify · treat INCONCLUSIVE as PASS · catch engine exceptions · hardcode PASS
remove checks · max_attempts 0/1 · duration_tolerance >5s · skip final_gate
modify verification_engine.py mid-task

SELF-HEAL (max 3)
CHECK fails → READ detail+evidence → CLASSIFY → ISOLATE → FIX one change → RE-VERIFY
If 3 loops exhausted → STOP + report (never fake PASS)

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors


# T1 — SESSION · COOKIES · KEEP-ALIVE · AUTO-LOGIN

GOAL: Healthy encrypted sessions on correct VPS IPs before any publish/engage.

ROLE: Session Ops hybrid (EncryptedCookie + CloakBrowser persistent profiles + keep-alive).

STEPS
1) Detect platform from cookie domains / profile name
2) Stage JSON → encrypt sessions/{account}.enc → chmod 600 → delete plaintext
3) Patch servers.json account_routing: 1 account → 1 server forever
4) Inject cookies BEFORE navigate; verify home/feed loads
5) Keep-alive: inject → home → human scroll 30–90s → save or quarantine
6) Recovery: headful login; Rescue Window 5m for 2FA (human only); re-export same IP
7) IG/TT: include local_storage; refresh_silently ~45m on long engage
8) Report PASS count + quarantined + reasons

COMMANDS
```bash
pip install -U cloakbrowser && playwright install-deps chromium
# profiles under .profiles/{account} or vault path
# never print raw cookies/passwords into chat
```

VERIFY
- Feed loads without login wall
- .enc exists mode 600
- routing unique (no dual-host)
- keep-alive rewrote cookies after scroll

DONE IF: three-state report written; no secrets leaked; quarantines correct.

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors


# T2 — PUBLISH · SCHEDULE · FIRST 60 MINUTES

GOAL: Publish own media with SEO captions, schedule spacing, first-hour engine.

ROLE: Publisher hybrid (AutoSocial + auto-instagram + CloakBrowser + FFmpeg + Aaron/Corey).

STEPS
1) boot + session health (T1 PASS required)
2) Uniquify media (H.264, ar 48000, 1080×1920 vertical when needed)
3) Captions platform-native (SHIP/FIX/BLOCK); 3–8 tags; quality/virality gate when on
4) PrePublish: absolute path, magic-byte OK, banned-claim strip, GPT-ism strip
5) Warm-up feed before publish UI
6) Publish headed when possible; capture post ID + permalink
7) Schedule remaining with ≥45m jitter; PhasedGrowth if age <21d
8) first_60_minutes: pin value comment, reply early, metrics 0/15/60
9) Read-after-write re-fetch each post; report.json

COMMANDS
```bash
ffmpeg -i in.mp4 -vf "scale=1080:1920:force_original_aspect_ratio=increase,crop=1080:1920" \
  -c:v libx264 -crf 20 -c:a aac -ar 48000 -shortest out.mp4
# queue via AutoSocial / auto-instagram patterns for account profiles
```

VERIFY
- Permalink live + account match
- Not stuck in moderation (or flag INCONCLUSIVE)
- first_60 log present

DONE IF: all scheduled publishes verified or explicit FAIL with root cause.

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors


# T3 — GROWTH · ENGAGE · OVERGROWTH · RESPOND

GOAL: Bounded engage + optional overgrowth day + auto-respond under caps.

ROLE: Growth hybrid (stealth + RateGovernor + PhasedGrowth + canary + responder templates).

STEPS
1) boot + shadowban canary if due (empty tag chrono → L3 48h)
2) Warm-up 2–5 min human scroll
3) Load PhasedGrowth caps by age; pad 20–30% under ceilings
4) Discover public niche targets; skip parasitic_risk
5) Value comments only (specific insight; no link in first comment)
6) Poisson delays; CircuitBreaker after 3 fails; stop on 301/308/310
7) Optional overgrowth: hub→spokes native captions; first-hour engine on own posts
8) Auto-respond inbox with templates; auto_send false until EXECUTE/trusted
9) Verify sample comments/replies via re-fetch; report counts + incidents

VERIFY
- Canary not empty (or L3 set)
- Actions under caps
- Sample re-fetch PASS

HARD: no purchased engagement · no mass follow/unfollow bots · no captcha farm

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors


# T4 — TARGET · SCRAPE · GROUPS · PAGES · INVITES · DMS

GOAL: Build targeting lists; grow groups/pages; invites; personalized DMs — public/ethical only.

ROLE: Targeting + Community + DM agent (public data; passive_only).

STEPS
1) DEFINE ICP + keywords + disallowed targets
2) Scrape public sources only with human pacing → structured JSON/CSV
3) Score fit; dedupe; drop off-niche / parasitic_risk
4) Groups/pages: value post first; invite top N/day under caps (Bezier + Poisson)
5) DMs: personalized only; caps; soft CTA; no purchased lists
6) Spot-check: re-open 5 URLs / 3 threads for read-after-write
7) Handoff packs for growth/publish; report lists + invite/DM counts

VERIFY
- List files non-empty with required fields OR INCONCLUSIVE with reason
- Invites/DMs re-checked sample
- No private scrape / no credential stuffing

ETHICS: public only · rate-limit · sanitize text before LLM

# AUTOPILOT CONTRACT (always on)
manager.addict.best/autopilot — unified social operator templates

1. boot() / self-check before any browser context.
2. Browser-first social UI (no platform APIs unless already configured).
3. smart_click / cubic Bezier only — never raw page.click centroids.
4. Encrypt cookies; SameSite Titlecase; chmod 600; inject BEFORE navigate; save AFTER success.
5. One account → one VPS IP forever (Mode C). Never dual-host same account.
6. Quarantine on shadowban | checkpoint | session_expired | account_locked — no ban-loops.
7. passive_only: true — no captcha bypass automation.
8. Three-state only: PASS | FAIL | INCONCLUSIVE. INCONCLUSIVE blocks done.
9. Own content / own accounts only. Align with platform ToS + local law.
10. Plan → act → log → verify (read-after-write) → report. Never free-text success.

PIPELINE (live publish day)
boot → secrets/session → ServerRouter → Dispatcher → warm_up
→ PrePublish → publish → first_60_minutes → log → verify

STACK
Copy: Aaron + Corey skills (SHIP/FIX/BLOCK)
Assets: simplified-cli · FFmpeg · Apex when needed
Publish: AutoSocial · auto-instagram · MultiPost drafts
Browser: CloakBrowser / Patchright · residential/native IP · geoip
Ops: PhasedGrowth · L1/L2/L3 · agent_monitor last-5 errors


# T5 — ANTI-BLOCK · INCIDENTS · VERIFY · FINAL GATE

GOAL: Keep automation alive under anti-bot pressure; verify everything; self-heal ≤3.

ROLE: Stealth + Verification agent (CloakBrowser heal + RAW verify + debug loop).

ANTI-BLOCK
- Referrer cold visits · playbook ceilings · never 429 tight-loop
- Bezier + Poisson + scroll-before-click · headed social when needed
- geoip match proxy · residential/native preferred · fingerprint consistency
- refresh_silently ~45m IG/TT long engage
- Incidents: 301→L1 reduce 50% 24h · 308→L2 re-export cookies same IP · 310→L3 halt 48h

DEBUG LOOP (any FAIL/INCONCLUSIVE)
CHECK → READ detail+evidence → CLASSIFY (TRANSIENT|SESSION|RATE|BAN|DOM|CONTENT|ENV)
→ ISOLATE → FIX one change → RE-VERIFY (max 3) → STOP+report if exhausted

FINAL GATE
- Social: every claimed action has independent READ confirm
- Media files (if any): verify_file + frames + drift + final_gate all_pass
- Never weaken checks / hardcode PASS / skip verify
- Emit report.json + incidents.jsonl + evidence paths

DONE ONLY IF all_pass / all social verifies PASS (INCONCLUSIVE blocks done).

# STATE MACHINE (social automation)

planned → validated → executed → verifying → verified | failed

Rules:
- Cannot skip to verified without verifying
- failed may re-enter planned after heal (≤3) or escalate
- quarantine freezes engage/publish for that account
- EXECUTE keyword gate for public irreversible actions when policy on

# SKILLS CHECKLIST (before live run)

[ ] boot / self-check PASS
[ ] session / cookies healthy (or quarantined correctly)
[ ] account_routing 1:1 IP
[ ] stealth: Bezier, geo match, no raw click
[ ] PhasedGrowth / rate ceilings loaded if age <21d
[ ] content uniquified + absolute paths
[ ] captions SHIP (Aaron/Corey) / banned claims cleared
[ ] PrePublish / virality when enabled
[ ] warm_up before publish/engage
[ ] first_60 plan ready for new posts
[ ] shadowban canary if growth day
[ ] responder templates + caps if inbox work
[ ] verify/read-after-write tools available
[ ] run folder + logging paths writable
[ ] passive_only / no captcha farm

# FINAL GATE (cannot say done until)

Social
- [ ] Every publish has live permalink + re-fetch PASS
- [ ] Comments/DMs/invites sample re-verified
- [ ] Incidents logged; L3 accounts not still growing
- [ ] report.json three-state set

Media (if produced)
- [ ] verify_file PASS each required output
- [ ] inspection frames 25/50/75 non-empty
- [ ] A/V drift acceptable (apad+-shortest -ar 48000)
- [ ] final_gate all_pass == True

Process
- [ ] No INCONCLUSIVE treated as PASS
- [ ] Heal attempts ≤3 with evidence
- [ ] Secrets not printed to chat/logs