magus v0.4.3 is out. See what's new
¶ View markdown source · ✎ Suggest an edit
3 min read

Corrective competence

The skill this section protects is narrow: your ability to fix the thing yourself when the agent is wrong, or gone. Not speed, and not thinking in general.

Two studies set the target. Bastani et al. measured nearly a thousand high school students with a tutor that handed over answers: 48% better on practice while it was available and 17% worse on the exam once it was taken away, against 127% better and no measurable residual harm for a version prompted to give hints instead.1 Sankaranarayanan found that 77% of novice programmers given unrestricted AI failed a 30-minute maintenance task once the assistant was withdrawn, against 39% of a group whose tool made them explain generated code's causal logic before it would integrate it. The two groups produced equally functional work; the explaining group took about a third longer to do it.2

This repository is built with agents at scale: 113,430 agent-run shell commands in twenty-one days. Our own oversight lapsed too. In 22 of 203 recent sessions the guard was not running, and those sessions carried 17% of all commands. The only reason that number exists is that we went looking for it.3 Whether the agent integration earns its cost is measured the same way rather than asserted: Benchmarks publishes every run beside the environment that produced it, controls first.

Enforced by

  • Notes are human-authored by construction.
  • --ack refuses without a terminal, agent hosts are denied it outright, and the count is shown to nobody but the reader.
  • The guard denies with a remedy the caller can run, since advice that only prints is routed around (ADR 0013).
  • magus never calls a model, which is what makes a Friday without an agent an option rather than a slogan.

Good

The tool hands back the toolchain call it made, so the person can run and read it without magus:

magus query output <ref>

Bad

Fixed 3 failing tests. All checks pass.

The person learns that something was fixed and nothing about what broke, so the next time the agent is wrong or gone, they start from zero.

See also


  1. Hamsa Bastani, Osbert Bastani, Alp Sungu, Haosen Ge, Ozge Kabakci, Rei Mariman, "Generative AI without guardrails can harm learning: Evidence from high school mathematics", PNAS 122(26), e2422633122, 2025, https://doi.org/10.1073/pnas.2422633122. Figures are from the abstract: GPT Base and GPT Tutor practice gains of 48% and 127% over control, a 17% exam reduction for GPT Base, and an effect the authors describe as essentially eradicated for GPT Tutor. Checked 2026-09-10. ↩︎

  2. Sreecharan Sankaranarayanan, "Mitigating Epistemic Debt in Generative AI-Scaffolded Novice Programming using Metacognitive Scripts", arXiv 2602.20206 (preprint, v2 2026-03-31), https://arxiv.org/abs/2602.20206. N=78 novices (CS undergraduates and recent bootcamp graduates), Cursor with Claude 3.5 Sonnet. Failure rates on the AI-blackout maintenance task were 77% unrestricted and 39% with the Explanation Gate; functional utility did not differ (p=.64); the gated group was slower (about 64.6 versus 48.2 minutes, d=1.52). Checked 2026-09-10. ↩︎

  3. Measured in this repository on 2026-09-09 over the Claude Code, Codex and OpenCode transcripts on one machine, using the session-load recipes in the agents guide: 113,430 Bash tool calls in the 21 days to that date; 22 of 203 sessions carried the guard-not-running notice and accounted for 17% of those calls. Reproducible with magus session load over the same transcripts. ↩︎

designjudgmentagentslearning
Last updated (2df714e8)
Glossary

Target

A named operation (build, test, ...) you invoke with magus run <target>; it may compose a spell's tool-native operations and depend on other targets. Target in full.

Op

A single tool-native command a target composes (long form: operation); the middle of the work hierarchy (Spell to Op to Target). Op in full.

CI

An ordinary target you compose yourself with ctx.needs; magus does not hardcode its stages. It is the anchor magus affected ci keys off, and ci strips the rw charm. CI in full.

Agent

A model working through an agent host such as Claude Code, Codex, Cursor or OpenCode. magus treats an agent as one more caller of its CLI, MCP tools and console, held to the same checks as a person. Agent in full.

Tool

An action a model can call through its host: a name, a description, a typed input and a result. magus serves its tools over MCP, each a read of the workspace model or a run of the CLI it already has. Tool in full.

Skill

A packaged set of instructions an agent host loads when a task matches its description: a directory holding a SKILL.md. magus ships its magus-* skills in the binary and writes them with magus agent install. Skill in full.

Session

An agent host's conversation, by the id the host delivers to its hooks. magus never mints one: a record with no session is unattributed, and the OS user it carries says whose account ran it. Session in full.

Run

One target executing under one magus invocation, such as magus run test web or magus affected ci. A run keeps its captured output behind an output reference. Every magus run is a run whether or not any job asked for it; see Job for how the two relate. Run in full.

Conventions

This page uses none of the site's convention markers. The full set is on the conventions page.