@williambeto/ai-workflow 2.4.8 → 2.6.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (122) hide show
  1. package/bin/ai-workflow.d.ts +3 -0
  2. package/bin/ai-workflow.js +2669 -1
  3. package/bin/ai-workflow.js.map +1 -0
  4. package/chunk-2AOV2ATY.js +749 -0
  5. package/chunk-5WRI5ZAA.js +31 -0
  6. package/chunk-6EMG6FAO.js +734 -0
  7. package/chunk-UHLZX2EG.js +1827 -0
  8. package/core/index.d.ts +440 -0
  9. package/core/index.js +32 -0
  10. package/core/index.js.map +1 -0
  11. package/dist-assets/AGENTS.md +23 -6
  12. package/dist-assets/agents/atlas.md +8 -8
  13. package/dist-assets/agents/nexus.md +4 -4
  14. package/dist-assets/agents/orion.md +1 -1
  15. package/dist-assets/agents/phoenix.md +1 -1
  16. package/dist-assets/agents/sage.md +1 -1
  17. package/dist-assets/commands/implement.md +1 -1
  18. package/dist-assets/docs/QUICKSTART.md +8 -8
  19. package/dist-assets/docs/cli-reference.md +7 -7
  20. package/dist-assets/docs/compatibility/provider-usage.md +1 -9
  21. package/dist-assets/docs/compatibility/runtime-matrix.md +5 -6
  22. package/dist-assets/docs/consumer-onboarding.md +2 -2
  23. package/dist-assets/docs/design-patterns-policy.md +1 -1
  24. package/dist-assets/docs/full-documentation.md +0 -2
  25. package/dist-assets/docs/npm-consumer-quickstart.md +70 -109
  26. package/dist-assets/docs/policies/01-BRANCH_GATE.md +1 -1
  27. package/dist-assets/docs/policies/06-FINAL_EVIDENCE_CONTRACT.md +2 -2
  28. package/dist-assets/docs/policies/08-PRODUCT_TRUTHFULNESS_AND_PROJECT_DOCS.md +1 -1
  29. package/dist-assets/docs/policies/10-BEHAVIORAL_CONTRACT_HARDENING.md +1 -1
  30. package/dist-assets/docs/policies/ORCHESTRATION_PROTOCOL.md +8 -9
  31. package/dist-assets/docs/policies/PROCEDURE_DELIVERY_ARTIFACTS.md +4 -10
  32. package/dist-assets/docs/policies/SKILLS_COMMON_GOVERNANCE.md +1 -1
  33. package/dist-assets/docs/profiles/README.md +2 -2
  34. package/dist-assets/docs/specs/runtime-operational-contract.md +12 -12
  35. package/dist-assets/docs/troubleshooting-guide.md +2 -2
  36. package/dist-assets/docs/visual-validation-guide.md +65 -3
  37. package/dist-assets/prompts/01-create-requirement.md +2 -2
  38. package/dist-assets/prompts/02-create-spec.md +2 -2
  39. package/dist-assets/prompts/03-create-tech-plan.md +4 -4
  40. package/dist-assets/prompts/04-breakdown-prs.md +4 -4
  41. package/dist-assets/prompts/05-implement-pr.md +5 -5
  42. package/dist-assets/prompts/06-review-and-fix.md +3 -3
  43. package/dist-assets/prompts/07-apply-design.md +2 -2
  44. package/dist-assets/prompts/08-validate.md +5 -5
  45. package/dist-assets/prompts/09-deploy.md +5 -5
  46. package/dist-assets/prompts/commands/implement.md +1 -1
  47. package/dist-assets/prompts/commands/tech-plan.md +2 -2
  48. package/dist-assets/prompts/commands/validate.md +2 -2
  49. package/dist-assets/runbooks/deploy-checklist.md +5 -5
  50. package/dist-assets/runbooks/how-to-use-skills.md +10 -0
  51. package/dist-assets/runbooks/validation-checklist.md +5 -5
  52. package/dist-assets/schemas/evidence.schema.json +109 -0
  53. package/dist-assets/templates/ANTIGRAVITY.md.template +7 -5
  54. package/dist-assets/templates/CLAUDE.md.template +7 -5
  55. package/dist-assets/templates/CODEX.md.template +7 -5
  56. package/evidence-validator-76ZQQYDU.js +6661 -0
  57. package/package.json +7 -65
  58. package/{src/core/workspace/read-only-workspace.js → read-only-workspace-PZBE7KAX.js} +14 -31
  59. package/{src/commands/validate.js → validate-Q2NLLQ5G.js} +30 -22
  60. package/AGENTS.md +0 -34
  61. package/CHANGELOG.md +0 -237
  62. package/LICENSE +0 -21
  63. package/PUBLISH_MANIFEST.json +0 -34
  64. package/README.md +0 -129
  65. package/dist-assets/runbooks/use-linear-for-operational-planning.md +0 -45
  66. package/dist-assets/runbooks/use-napkin-project-memory.md +0 -33
  67. package/dist-assets/templates/.geminiignore.template +0 -8
  68. package/dist-assets/templates/GEMINI.md.template +0 -20
  69. package/docs/compatibility/provider-usage.md +0 -46
  70. package/docs/compatibility/runtime-matrix.md +0 -31
  71. package/docs/getting-started/DESKTOP_PROMPT.md +0 -52
  72. package/docs/getting-started/quickstart.md +0 -117
  73. package/docs/getting-started/troubleshooting.md +0 -123
  74. package/docs/getting-started/upgrading-to-v2.md +0 -62
  75. package/read_only_safety_verification.md +0 -48
  76. package/src/adapters/index.js +0 -4
  77. package/src/adapters/platforms/antigravity.js +0 -382
  78. package/src/adapters/platforms/claude.js +0 -126
  79. package/src/adapters/platforms/codex.js +0 -113
  80. package/src/adapters/platforms/gemini.js +0 -245
  81. package/src/cli.js +0 -155
  82. package/src/commands/clean.js +0 -106
  83. package/src/commands/collect-evidence.js +0 -25
  84. package/src/commands/doctor.js +0 -202
  85. package/src/commands/execute.js +0 -382
  86. package/src/commands/init.js +0 -359
  87. package/src/commands/run.js +0 -112
  88. package/src/core/backup.js +0 -65
  89. package/src/core/completion-contract.js +0 -35
  90. package/src/core/delegation-controller.js +0 -193
  91. package/src/core/evidence/evidence-ledger.js +0 -98
  92. package/src/core/execution-planner.js +0 -62
  93. package/src/core/filesystem.js +0 -141
  94. package/src/core/finalization/finalizer.js +0 -165
  95. package/src/core/finalization/workspace-snapshot.js +0 -110
  96. package/src/core/gates/branch-gate.js +0 -134
  97. package/src/core/gates/merge-gate.js +0 -74
  98. package/src/core/handoff/handoff-engine.js +0 -104
  99. package/src/core/healing/cli-remediation-executor.js +0 -153
  100. package/src/core/healing/healer-engine.js +0 -212
  101. package/src/core/healing/runtime-remediation-executor.js +0 -136
  102. package/src/core/identity.js +0 -43
  103. package/src/core/install-plan.js +0 -34
  104. package/src/core/opencode-merge.js +0 -150
  105. package/src/core/package-assets.js +0 -141
  106. package/src/core/request-classifier.js +0 -73
  107. package/src/core/request-router.js +0 -289
  108. package/src/core/runtime/opencode-adapter.js +0 -202
  109. package/src/core/sdd/validator.js +0 -67
  110. package/src/core/statuses.js +0 -29
  111. package/src/core/symlink-layout.js +0 -93
  112. package/src/core/templates.js +0 -229
  113. package/src/core/validation/artifact-fidelity-gate.js +0 -445
  114. package/src/core/validation/canonical-finalization.js +0 -43
  115. package/src/core/validation/delivery-decision-engine.js +0 -344
  116. package/src/core/validation/evidence-collector.js +0 -245
  117. package/src/core/validation/quality-guard.js +0 -251
  118. package/src/core/validation/stack-detector.js +0 -65
  119. package/src/core/validation/validation-planner.js +0 -134
  120. package/src/core/validation/visual-verifier.js +0 -175
  121. package/src/core/workflow-profiles.js +0 -107
  122. package/src/core/workflow-state-machine.js +0 -46
@@ -27,15 +27,15 @@ Do not use this prompt to implement code directly.
27
27
  Use this prompt with:
28
28
 
29
29
  ```txt
30
- .agents/skills/tech-lead/SKILL.md
30
+ .ai-workflow/opencode/skills/technical-leadership/SKILL.md
31
31
  ```
32
32
 
33
33
  Supporting skills:
34
34
 
35
35
  ```txt
36
- .agents/skills/tester/SKILL.md
37
- .agents/skills/build-and-validate/SKILL.md
38
- .agents/skills/pr-orchestrator/SKILL.md
36
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
37
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
38
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
39
39
  ```
40
40
 
41
41
  Use `tester` to check whether the plan is testable.
@@ -27,15 +27,15 @@ Do not use this prompt to implement the PR directly.
27
27
  Use this prompt with:
28
28
 
29
29
  ```txt
30
- .agents/skills/pr-orchestrator/SKILL.md
30
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
31
31
  ```
32
32
 
33
33
  Supporting skills:
34
34
 
35
35
  ```txt
36
- .agents/skills/tech-lead/SKILL.md
37
- .agents/skills/tester/SKILL.md
38
- .agents/skills/build-and-validate/SKILL.md
36
+ .ai-workflow/opencode/skills/technical-leadership/SKILL.md
37
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
38
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
39
39
  ```
40
40
 
41
41
  Use `tech-lead` to verify technical sequencing.
@@ -30,16 +30,16 @@ Common options:
30
30
  ```txt
31
31
  .agents/skills/frontend-implementer/SKILL.md
32
32
  .agents/skills/backend-implementer/SKILL.md
33
- .agents/skills/docs-writer/SKILL.md
34
- .agents/skills/build-and-validate/SKILL.md
35
- .agents/skills/deploy-engineer/SKILL.md
33
+ .ai-workflow/opencode/skills/documentation/SKILL.md
34
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
35
+ .ai-workflow/opencode/skills/deployment/SKILL.md
36
36
  ```
37
37
 
38
38
  Supporting skills:
39
39
 
40
40
  ```txt
41
- .agents/skills/pr-orchestrator/SKILL.md
42
- .agents/skills/tester/SKILL.md
41
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
42
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
43
43
  ```
44
44
 
45
45
  Use `pr-orchestrator` to keep the PR scoped.
@@ -27,14 +27,14 @@ Do not use this prompt to implement a new PR.
27
27
  Use this prompt with:
28
28
 
29
29
  ```txt
30
- .agents/skills/tester/SKILL.md
30
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
31
31
  ```
32
32
 
33
33
  Supporting skills:
34
34
 
35
35
  ```txt
36
- .agents/skills/build-and-validate/SKILL.md
37
- .agents/skills/pr-orchestrator/SKILL.md
36
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
37
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
38
38
  ```
39
39
 
40
40
  Use `tester` to verify correctness, regressions, edge cases, and acceptance criteria.
@@ -33,8 +33,8 @@ Use this prompt with:
33
33
  Supporting skills:
34
34
 
35
35
  ```txt
36
- .agents/skills/tester/SKILL.md
37
- .agents/skills/docs-writer/SKILL.md
36
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
37
+ .ai-workflow/opencode/skills/documentation/SKILL.md
38
38
  ```
39
39
 
40
40
  Use `tester` to check regressions, accessibility risks, and behavior preservation.
@@ -28,16 +28,16 @@ Do not use this prompt to implement new features or expand scope.
28
28
  Use this prompt with:
29
29
 
30
30
  ```txt
31
- .agents/skills/tester/SKILL.md
31
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
32
32
  ```
33
33
 
34
34
  Supporting skills:
35
35
 
36
36
  ```txt
37
- .agents/skills/build-and-validate/SKILL.md
38
- .agents/skills/pr-orchestrator/SKILL.md
39
- .agents/skills/docs-writer/SKILL.md
40
- .agents/skills/deploy-engineer/SKILL.md
37
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
38
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
39
+ .ai-workflow/opencode/skills/documentation/SKILL.md
40
+ .ai-workflow/opencode/skills/deployment/SKILL.md
41
41
  ```
42
42
 
43
43
  Use `build-and-validate` for command execution and failure analysis.
@@ -28,16 +28,16 @@ Do not use this prompt to implement features, refactor code, or bypass validatio
28
28
  Use this prompt with:
29
29
 
30
30
  ```txt
31
- .agents/skills/deploy-engineer/SKILL.md
31
+ .ai-workflow/opencode/skills/deployment/SKILL.md
32
32
  ```
33
33
 
34
34
  Supporting skills:
35
35
 
36
36
  ```txt
37
- .agents/skills/build-and-validate/SKILL.md
38
- .agents/skills/tester/SKILL.md
39
- .agents/skills/pr-orchestrator/SKILL.md
40
- .agents/skills/docs-writer/SKILL.md
37
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
38
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
39
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
40
+ .ai-workflow/opencode/skills/documentation/SKILL.md
41
41
  ```
42
42
 
43
43
  Use `build-and-validate` to verify build, tests, artifacts, and command results.
@@ -7,7 +7,7 @@ Implement one selected PR from a plan.
7
7
  ## Read first
8
8
 
9
9
  - `.agents/skills/frontend-implementer/SKILL.md` or `.agents/skills/backend-implementer/SKILL.md`
10
- - `.agents/skills/tester/SKILL.md`
10
+ - `.ai-workflow/opencode/skills/qa-workflow/SKILL.md`
11
11
  - `prompts/05-implement-pr.md`
12
12
 
13
13
  ## Input needed
@@ -6,8 +6,8 @@ Turn a specification into a technical approach.
6
6
 
7
7
  ## Read first
8
8
 
9
- - `.agents/skills/tech-lead/SKILL.md`
10
- - `.agents/skills/build-and-validate/SKILL.md`
9
+ - `.ai-workflow/opencode/skills/technical-leadership/SKILL.md`
10
+ - `.ai-workflow/opencode/skills/qa-workflow/SKILL.md`
11
11
  - `prompts/03-create-tech-plan.md`
12
12
 
13
13
  ## Input needed
@@ -6,8 +6,8 @@ Validate a PR before merge or moving to next step.
6
6
 
7
7
  ## Read first
8
8
 
9
- - `.agents/skills/tester/SKILL.md`
10
- - `.agents/skills/build-and-validate/SKILL.md`
9
+ - `.ai-workflow/opencode/skills/qa-workflow/SKILL.md`
10
+ - `.ai-workflow/opencode/skills/qa-workflow/SKILL.md`
11
11
  - `prompts/08-validate.md`
12
12
 
13
13
  ## Input needed
@@ -25,16 +25,16 @@ Use this checklist when:
25
25
  Primary skill:
26
26
 
27
27
  ```txt
28
- .agents/skills/deploy-engineer/SKILL.md
28
+ .ai-workflow/opencode/skills/deployment/SKILL.md
29
29
  ```
30
30
 
31
31
  Supporting skills:
32
32
 
33
33
  ```txt
34
- .agents/skills/build-and-validate/SKILL.md
35
- .agents/skills/tester/SKILL.md
36
- .agents/skills/pr-orchestrator/SKILL.md
37
- .agents/skills/docs-writer/SKILL.md
34
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
35
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
36
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
37
+ .ai-workflow/opencode/skills/documentation/SKILL.md
38
38
  ```
39
39
 
40
40
  ## Deployment readiness rule
@@ -25,6 +25,16 @@ Use this runbook to choose the right capability skill for each workflow step in
25
25
  | Prepare release/deploy | `deployment` | `qa-workflow` |
26
26
  | Preserve durable decisions | `project-memory` | `optimize-tokens` |
27
27
 
28
+ ## Specialized Domain Skills (v2.4.8+)
29
+
30
+ | Domain | Primary skill | Objective |
31
+ | --- | --- | --- |
32
+ | Security audits & privacy | `cyber-security` | Review codebase for vulnerabilities, credentials, and supply chain risks |
33
+ | Database & migrations | `database` | Schema design, index optimization, and data migrations |
34
+ | CI/CD & Infrastructure | `devops` | Workflow automation, containerization, and infrastructure scripts |
35
+ | Translations & i18n | `localization` | Multi-language setup, key verification, and cultural audits |
36
+ | System optimization | `performance` | Bundle sizes, latency profiling, and caching strategies |
37
+
28
38
  ## Agent-to-skill baseline
29
39
 
30
40
  | Agent owner | Primary skill set |
@@ -26,16 +26,16 @@ Use this checklist when validating:
26
26
  Primary skill:
27
27
 
28
28
  ```txt
29
- .agents/skills/tester/SKILL.md
29
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
30
30
  ```
31
31
 
32
32
  Supporting skills:
33
33
 
34
34
  ```txt
35
- .agents/skills/build-and-validate/SKILL.md
36
- .agents/skills/pr-orchestrator/SKILL.md
37
- .agents/skills/docs-writer/SKILL.md
38
- .agents/skills/deploy-engineer/SKILL.md
35
+ .ai-workflow/opencode/skills/qa-workflow/SKILL.md
36
+ .ai-workflow/opencode/skills/pr-workflow/SKILL.md
37
+ .ai-workflow/opencode/skills/documentation/SKILL.md
38
+ .ai-workflow/opencode/skills/deployment/SKILL.md
39
39
  ```
40
40
 
41
41
  ## Core validation rule
@@ -0,0 +1,109 @@
1
+ {
2
+ "$id": "https://github.com/williambeto/ai-workflow/schemas/evidence.schema.json",
3
+ "title": "Evidence Artifact",
4
+ "type": "object",
5
+ "additionalProperties": false,
6
+ "required": [
7
+ "timestamp",
8
+ "changedFiles",
9
+ "status",
10
+ "internalStatus",
11
+ "commands"
12
+ ],
13
+ "properties": {
14
+ "timestamp": {
15
+ "type": "string"
16
+ },
17
+ "taskSlug": {
18
+ "type": ["string", "null"]
19
+ },
20
+ "executionMode": {
21
+ "type": "string"
22
+ },
23
+ "workflowProfile": {
24
+ "type": "string"
25
+ },
26
+ "branchRecovery": {
27
+ "type": "string"
28
+ },
29
+ "branch": {
30
+ "type": "string"
31
+ },
32
+ "changedFiles": {
33
+ "type": "array",
34
+ "items": {
35
+ "type": "string"
36
+ }
37
+ },
38
+ "status": {
39
+ "enum": ["COMPLETED", "COMPLETED_WITH_NOTES", "BLOCKED"]
40
+ },
41
+ "internalStatus": {
42
+ "enum": ["PASS", "PASS_WITH_NOTES", "BLOCKED"]
43
+ },
44
+ "commands": {
45
+ "type": "array",
46
+ "items": {
47
+ "type": "object",
48
+ "additionalProperties": true,
49
+ "required": [
50
+ "name",
51
+ "command",
52
+ "kind",
53
+ "status"
54
+ ],
55
+ "properties": {
56
+ "name": {
57
+ "type": "string"
58
+ },
59
+ "command": {
60
+ "type": ["string", "object", "array"]
61
+ },
62
+ "kind": {
63
+ "type": "string"
64
+ },
65
+ "status": {
66
+ "type": "string"
67
+ },
68
+ "exitCode": {
69
+ "type": ["number", "null"]
70
+ },
71
+ "signal": {
72
+ "type": ["string", "null"]
73
+ },
74
+ "summary": {
75
+ "type": "string"
76
+ },
77
+ "output": {
78
+ "type": "string"
79
+ },
80
+ "commitHash": {
81
+ "type": "string"
82
+ }
83
+ }
84
+ }
85
+ },
86
+ "checks": {
87
+ "type": ["object", "null"],
88
+ "additionalProperties": true
89
+ },
90
+ "limitations": {
91
+ "type": "array",
92
+ "items": {
93
+ "type": "string"
94
+ }
95
+ },
96
+ "deliveryDecision": {
97
+ "type": ["object", "null"],
98
+ "additionalProperties": true
99
+ },
100
+ "artifactFidelityCheck": {
101
+ "type": ["object", "null"],
102
+ "additionalProperties": true
103
+ },
104
+ "visualEvidence": {
105
+ "type": ["object", "null"],
106
+ "additionalProperties": true
107
+ }
108
+ }
109
+ }
@@ -3,10 +3,12 @@
3
3
  Use AGENTS.md and the relevant contracts.
4
4
 
5
5
  ```txt
6
- readonlyInspectReportRecommendation
7
- quick → Branch recovery/check → Implement → Document if behavior or usage changed → Test/Validate → Evidence
8
- standard → Mini spec → Mini review → Mini plan → Scoped PR plan → Implement → Document → Test/Validate → Evidence
9
- full Spec draft Spec review → Technical plan → PR breakdown → Implementation → Documentation → Test/Validate Evidence report
6
+ RequestPlanningBranch Gate Delegation → Implementation → Validation → Evidence
7
+
8
+ Proportional policies:
9
+ - low risk / optional evidence / low remediationLimit
10
+ - medium risk / optional evidence / normal remediationLimit
11
+ - high risk / required evidence / specPolicy required / higher remediationLimit
10
12
  ```
11
13
 
12
14
  Use professional taxonomy: Primary Agents, Skill-backed Specialist Roles, Skills, Commands.
@@ -17,4 +19,4 @@ Use professional taxonomy: Primary Agents, Skill-backed Specialist Roles, Skills
17
19
  - Explicit requirements, clean code, generated specs, and inline comments do not replace documentation.
18
20
  - For user-facing UI, rendered or visual evidence is required when the runtime can inspect it; raw/default browser UI is `FAIL_QUALITY_GATE`.
19
21
  - High/Critical security findings must be classified in evidence.
20
- - Implementation work must create delivery artifacts proportional to mode: quick uses compact evidence, standard uses compact workflow artifacts, and full uses the complete 01..07 set.
22
+ - Implementation work must create delivery artifacts proportional to the active policies (evidencePolicy, riskLevel, specPolicy).
@@ -3,10 +3,12 @@
3
3
  Use AGENTS.md and the relevant contracts.
4
4
 
5
5
  ```txt
6
- readonlyInspectReportRecommendation
7
- quick → Branch recovery/check → Implement → Document if behavior or usage changed → Test/Validate → Evidence
8
- standard → Mini spec → Mini review → Mini plan → Scoped PR plan → Implement → Document → Test/Validate → Evidence
9
- full Spec draft Spec review → Technical plan → PR breakdown → Implementation → Documentation → Test/Validate Evidence report
6
+ RequestPlanningBranch Gate Delegation → Implementation → Validation → Evidence
7
+
8
+ Proportional policies:
9
+ - low risk / optional evidence / low remediationLimit
10
+ - medium risk / optional evidence / normal remediationLimit
11
+ - high risk / required evidence / specPolicy required / higher remediationLimit
10
12
  ```
11
13
 
12
14
  Provide evidence for completed work.
@@ -17,4 +19,4 @@ Provide evidence for completed work.
17
19
  - Explicit requirements, clean code, generated specs, and inline comments do not replace documentation.
18
20
  - For user-facing UI, rendered or visual evidence is required when the runtime can inspect it; raw/default browser UI is `FAIL_QUALITY_GATE`.
19
21
  - High/Critical security findings must be classified in evidence.
20
- - Implementation work must create delivery artifacts proportional to mode: quick uses compact evidence, standard uses compact workflow artifacts, and full uses the complete 01..07 set.
22
+ - Implementation work must create delivery artifacts proportional to the active policies (evidencePolicy, riskLevel, specPolicy).
@@ -3,10 +3,12 @@
3
3
  Use AGENTS.md and the relevant contracts.
4
4
 
5
5
  ```txt
6
- readonlyInspectReportRecommendation
7
- quick → Branch recovery/check → Implement → Document if behavior or usage changed → Test/Validate → Evidence
8
- standard → Mini spec → Mini review → Mini plan → Scoped PR plan → Implement → Document → Test/Validate → Evidence
9
- full Spec draft Spec review → Technical plan → PR breakdown → Implementation → Documentation → Test/Validate Evidence report
6
+ RequestPlanningBranch Gate Delegation → Implementation → Validation → Evidence
7
+
8
+ Proportional policies:
9
+ - low risk / optional evidence / low remediationLimit
10
+ - medium risk / optional evidence / normal remediationLimit
11
+ - high risk / required evidence / specPolicy required / higher remediationLimit
10
12
  ```
11
13
 
12
14
  Never publish, tag, release, deploy, merge, push, force-push, or change package version without explicit approval.
@@ -17,4 +19,4 @@ Never publish, tag, release, deploy, merge, push, force-push, or change package
17
19
  - Explicit requirements, clean code, generated specs, and inline comments do not replace documentation.
18
20
  - For user-facing UI, rendered or visual evidence is required when the runtime can inspect it; raw/default browser UI is `FAIL_QUALITY_GATE`.
19
21
  - High/Critical security findings must be classified in evidence.
20
- - Implementation work must create delivery artifacts proportional to mode: quick uses compact evidence, standard uses compact workflow artifacts, and full uses the complete 01..07 set.
22
+ - Implementation work must create delivery artifacts proportional to the active policies (evidencePolicy, riskLevel, specPolicy).