@geraldmaron/construct 1.0.4 → 1.0.5

package/skills/roles/reviewer.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/reviewer.md — Anti-pattern guidance for the Reviewer role.
+skills/roles/reviewer.md. Anti-pattern guidance for the Reviewer role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the reviewer domain and counter-moves to avoid them.
@@ -9,17 +9,19 @@ Applies to: cx-reviewer, cx-devil-advocate, cx-evaluator, cx-trace-reviewer.
 role: reviewer
 applies_to: [cx-reviewer, cx-devil-advocate, cx-evaluator, cx-trace-reviewer]
 inherits: null
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
-# Reviewer — Role guidance
+# Reviewer. Role guidance
 
-Load this before drafting. These are the failure modes that separate strong role output from weak role output — check your draft against each.
+Load this before drafting. These are the failure modes that separate strong role output from weak role output. check your draft against each.
 
 
 ### 1. Nit-picking over structure
-**Symptom**: the review focuses on variable names and formatting while leaving the structural problem — wrong abstraction, missing tests, unsafe concurrency — unflagged.
+**Symptom**: the review focuses on variable names and formatting while leaving the structural problem. wrong abstraction, missing tests, unsafe concurrency. unflagged.
 **Why it fails**: the author fixes the surface and ships the real bug. The reviewer signals thoroughness while providing no real coverage.
-**Counter-move**: audit structure first — correctness, blast radius, invariants, test coverage — before any style feedback.
+**Counter-move**: audit structure first. correctness, blast radius, invariants, test coverage. before any style feedback.
 
 ### 2. LGTM without running the code
 **Symptom**: approval given based on reading the diff, with no build, no test run, no exploration of the change in situ.
@@ -32,7 +34,7 @@ Load this before drafting. These are the failure modes that separate strong role
 **Counter-move**: grep for callers of anything changed. Check whether the change is backwards-compatible for each.
 
 ### 4. No severity
-**Symptom**: all feedback presented at the same weight — a typo and a security vulnerability get equal prominence.
+**Symptom**: all feedback presented at the same weight. a typo and a security vulnerability get equal prominence.
 **Why it fails**: the author cannot tell what blocks merge versus what is optional. Real issues get lost.
 **Counter-move**: label each finding CRITICAL / HIGH / MEDIUM / LOW. State what the author must address before merge.
 
@@ -71,11 +73,11 @@ Load this before drafting. These are the failure modes that separate strong role
 
 A review that approves while these gates would fail in CI is a failed review. Run or confirm the author ran:
 
-- [ ] `npm test` — 0 failed
-- [ ] `node bin/construct lint:comments` — 0 errors AND 0 warnings (treat warnings as blocking)
-- [ ] `node bin/construct docs:verify` — all checks passed, no warnings
-- [ ] `node bin/construct docs:update --check` — AUTO regions up to date
-- [ ] `npm run lint:templates` — commit subjects + PR body match the canonical templates
+- [ ] `npm test`. 0 failed
+- [ ] `node bin/construct lint:comments`. 0 errors AND 0 warnings (treat warnings as blocking)
+- [ ] `node bin/construct docs:verify`. all checks passed, no warnings
+- [ ] `node bin/construct docs:update --check`. AUTO regions up to date
+- [ ] `npm run lint:templates`. commit subjects + PR body match the canonical templates
 
 See `rules/common/release-gates.md`. Block approval until evidence is in the PR body.
 

package/skills/roles/reviewer.trace.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/reviewer.trace.md — Anti-pattern guidance for the Reviewer.trace (trace) role.
+skills/roles/reviewer.trace.md. Anti-pattern guidance for the Reviewer.trace (trace) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the reviewer.trace (trace) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-trace-reviewer.
 role: reviewer.trace
 applies_to: [cx-trace-reviewer]
 inherits: reviewer
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # Trace Reviewer Overlay
 

package/skills/roles/security.ai.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.ai.md — Anti-pattern guidance for the Security.ai (ai) role.
+skills/roles/security.ai.md. Anti-pattern guidance for the Security.ai (ai) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.ai (ai) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-security, cx-ai-engineer.
 role: security.ai
 applies_to: [cx-security, cx-ai-engineer]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # AI Security Overlay
 

package/skills/roles/security.appsec.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.appsec.md — Anti-pattern guidance for the Security.appsec (appsec) role.
+skills/roles/security.appsec.md. Anti-pattern guidance for the Security.appsec (appsec) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.appsec (appsec) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-security.
 role: security.appsec
 applies_to: [cx-security]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # AppSec Overlay
 

package/skills/roles/security.cloud.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.cloud.md — Anti-pattern guidance for the Security.cloud (cloud) role.
+skills/roles/security.cloud.md. Anti-pattern guidance for the Security.cloud (cloud) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.cloud (cloud) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-security.
 role: security.cloud
 applies_to: [cx-security]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # Cloud Security Overlay
 

package/skills/roles/security.legal-compliance.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.legal-compliance.md — Anti-pattern guidance for the Security.legal-compliance (legal compliance) role.
+skills/roles/security.legal-compliance.md. Anti-pattern guidance for the Security.legal-compliance (legal compliance) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.legal-compliance (legal compliance) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-legal-compliance.
 role: security.legal-compliance
 applies_to: [cx-legal-compliance]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # Legal & Compliance Overlay
 

package/skills/roles/security.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.md — Anti-pattern guidance for the Security role.
+skills/roles/security.md. Anti-pattern guidance for the Security role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security domain and counter-moves to avoid them.
@@ -9,15 +9,17 @@ Applies to: cx-security, cx-legal-compliance.
 role: security
 applies_to: [cx-security, cx-legal-compliance]
 inherits: null
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
-# Security — Role guidance
+# Security. Role guidance
 
-Load this before drafting. These are the failure modes that separate strong role output from weak role output — check your draft against each.
+Load this before drafting. These are the failure modes that separate strong role output from weak role output. check your draft against each.
 
 
 ### 1. Defense in absence
-**Symptom**: protection depends on a single layer — a firewall, a middleware, a validation step — with no defense if that layer is bypassed.
+**Symptom**: protection depends on a single layer. a firewall, a middleware, a validation step. with no defense if that layer is bypassed.
 **Why it fails**: one misconfiguration or bug eliminates all protection at once.
 **Counter-move**: assume any single control can fail. Layer controls at the network, application, and data boundaries.
 

package/skills/roles/security.privacy.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.privacy.md — Anti-pattern guidance for the Security.privacy (privacy) role.
+skills/roles/security.privacy.md. Anti-pattern guidance for the Security.privacy (privacy) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.privacy (privacy) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-security, cx-legal-compliance.
 role: security.privacy
 applies_to: [cx-security, cx-legal-compliance]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # Privacy Security Overlay
 

package/skills/roles/security.supply-chain.md

@@ -1,5 +1,5 @@
 <!--
-skills/roles/security.supply-chain.md — Anti-pattern guidance for the Security.supply-chain (supply chain) role.
+skills/roles/security.supply-chain.md. Anti-pattern guidance for the Security.supply-chain (supply chain) role.
 
 Loaded at sync time to inline role-specific failure modes into specialist agent prompts.
 Covers common failure modes for the security.supply-chain (supply chain) domain and counter-moves to avoid them.
@@ -9,7 +9,9 @@ Applies to: cx-security, cx-platform-engineer.
 role: security.supply-chain
 applies_to: [cx-security, cx-platform-engineer]
 inherits: security
-version: 1
+version: 2
+profiles: [rnd]
+cap: 1
 ---
 # Supply Chain Security Overlay
 

package/templates/docs/persona-artifact.md

@@ -0,0 +1,36 @@
+# <Role display name>
+
+> Anchor doc for the <role-id> persona. Methodology: `docs/concepts/persona-research.md`. This file is generated by `construct profile create` and is part of the discover + frame phases. The persona is not promotable until every section below is filled from evidence, not opinion.
+
+## Goals
+
+- <What does success look like for this role? Not the org's goals; theirs.>
+- <Goal 2>
+
+## Frustrations
+
+- <What slows them down, what they get blamed for.>
+
+## Decision rights
+
+- Decides: <list>
+- Escalates: <list>
+
+## Handoffs
+
+- Hands off to: <role> when <condition>
+- Receives from: <role> when <condition>
+
+## Output contract
+
+- Format: <markdown structure, code diff, JSON, etc.>
+- Depth: <short bullet list, two-page doc, one-screen summary, etc.>
+- Citations: <required | encouraged | none>
+
+## Failure modes
+
+- <Common ways this persona goes wrong; what to watch for.>
+
+## Evidence
+
+- <Interview, doc, postmortem, public job spec. At least two primary sources.>

package/templates/docs/research-finding.md

@@ -0,0 +1,26 @@
+---
+kind: research-finding
+topic: "<short topic line>"
+confidence: inferred
+sources: []
+created: <ISO timestamp set by construct knowledge add>
+expiresAt: <ISO timestamp, default created + 90d>
+profile: <active profile id>
+---
+
+## FINDINGS
+
+- <Finding 1 with citation>
+- <Finding 2 with citation>
+
+## INFERENCES
+
+- <Inference labeled as such>
+
+## GAPS
+
+- <What we could not confirm>
+
+## RECOMMENDATION
+
+- <Next action based on the evidence available>

package/templates/docs/skill-artifact.md

@@ -0,0 +1,27 @@
+---
+name: <verb-led-id>
+scope: <one paragraph: what it covers, what it does not>
+observable_outcome: <how someone outside the role tells this skill happened>
+provenance:
+  - <citation: post-mortem, public framework, competency model>
+roles:
+  - <role-id that uses this skill>
+---
+
+# <Skill display name>
+
+## What this skill produces
+
+<Concrete output. Bloom-style: not "knows X" but "produces Y".>
+
+## When to invoke it
+
+<Triggers. What the operator or the upstream persona is doing when this skill is the right call.>
+
+## How it composes
+
+<Other skills typically chained before or after.>
+
+## Anti-patterns
+
+<Ways this skill gets misapplied; what looks similar but is not this.>