The Skill Stack
How to Build Software from Thinking Pieces
Start Reading TLDR — The Architecture in 5 MinutesIn July 2025, an AI agent deleted a production database — despite explicit instructions not to. This book explains why that happened, why it will happen again, and how to build compliant, reliable agent systems that pass SOC-2 audits.
The Cold Open
Part I — The Shift
01
→
02
→
03
→
The Staircase
Procedures → Objects → Services → Agents. Each driven by pain, not technology.
Composing Probabilities
85% reliable × 10 steps = 20% success. The math that changes everything.
The Building Block That Says No
Functions can't refuse. APIs can't improvise. Agents do both.
Part II — The Stack
04
→
05
→
06
→
Hands, Voice, Workplace
MCP gave agents hands. A2A gave agents voice. The harness gave agents a workplace.
The Real Unit
The agent is the runtime. The skill is the unit. 13,729 skills on ClawHub prove it.
The Operating System
Docker sold for $50M. Kubernetes delivered $34B. Value accrues to the orchestration layer.
Part III — The Six Truths
07
→
08
→
The Invisible Complexity Problem
You can't git diff emergent behavior. Knight Capital lost $440M in 45 minutes to prove it.
Two Jobs, One Title
Teaching (shaping behavior) vs Plumbing (connecting capabilities). The 0.1% does both.
Part IV — The Seven Patterns
09
→
10
→
11
→
The Specialist Ensemble
The Gang of Four named OOP patterns. This chapter names agent patterns.
The Verification Loop
Same-biased verifiers agree 97% of the time. Adversarial framing doubles catch rates.
Five More Patterns
Skill Mesh, Escalation Chain, Context Funnel, Consensus Protocol, Trajectory Replay.
Part V — The AGENT Principles
Part VI — The Playbook
Part VII — The Horizon
Part VIII — The Harness
15
→
16
→
17
→
18
→
The Gap
SOC-2 requires deterministic guarantees. Agents are probabilistic. Seven structural problems stand between demo and audit.
The Deterministic Envelope
Aviation doesn't make pilots perfect. It wraps them in checklists and flight data recorders. Agent systems need the same.
Four Walls
Gate says "can't." Ledger says "recorded." Governor says "bounded." Witness says "verified."
The Standard
Every SOC-2 control mapped. Every SLA number decomposed. The blueprint for compliant agent systems.
The Skill Stack by Anup Neupane
18 chapters · 7 patterns · 5 principles · 4 harness subsystems · 47+ research citations