agileflow 2.81.0 → 2.82.0

package/README.md

@@ -3,7 +3,7 @@
 </p>
 
 [![npm version](https://img.shields.io/npm/v/agileflow?color=brightgreen)](https://www.npmjs.com/package/agileflow)
-[![Commands](https://img.shields.io/badge/commands-68-blue)](docs/04-architecture/commands.md)
+[![Commands](https://img.shields.io/badge/commands-71-blue)](docs/04-architecture/commands.md)
 [![Agents/Experts](https://img.shields.io/badge/agents%2Fexperts-29-orange)](docs/04-architecture/subagents.md)
 [![Skills](https://img.shields.io/badge/skills-dynamic-purple)](docs/04-architecture/skills.md)
 
@@ -65,7 +65,7 @@ AgileFlow combines three proven methodologies:
 
 | Component | Count | Description |
 |-----------|-------|-------------|
-| [Commands](docs/04-architecture/commands.md) | 68 | Slash commands for agile workflows |
+| [Commands](docs/04-architecture/commands.md) | 71 | Slash commands for agile workflows |
 | [Agents/Experts](docs/04-architecture/subagents.md) | 29 | Specialized agents with self-improving knowledge bases |
 | [Skills](docs/04-architecture/skills.md) | Dynamic | Generated on-demand with `/agileflow:skill:create` |
 
@@ -76,7 +76,7 @@ AgileFlow combines three proven methodologies:
 Full documentation lives in [`docs/04-architecture/`](docs/04-architecture/):
 
 ### Reference
-- [Commands](docs/04-architecture/commands.md) - All 68 slash commands
+- [Commands](docs/04-architecture/commands.md) - All 71 slash commands
 - [Agents/Experts](docs/04-architecture/subagents.md) - 29 specialized agents with self-improving knowledge
 - [Skills](docs/04-architecture/skills.md) - Dynamic skill generator with MCP integration
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agileflow",
-  "version": "2.81.0",
+  "version": "2.82.0",
   "description": "AI-driven agile development system for Claude Code, Cursor, Windsurf, and more",
   "keywords": [
     "agile",

package/scripts/ralph-loop.js

@@ -129,6 +129,190 @@ function getCoverageReportPath(rootDir) {
   return 'coverage/coverage-summary.json';
 }
 
+// ===== DISCRETION MARKERS =====
+// Semantic conditions wrapped in **...**
+// These are evaluated by the loop to determine completion
+
+/**
+ * Built-in discretion conditions that can be evaluated programmatically
+ * Format: condition key -> evaluation function
+ */
+const DISCRETION_CONDITIONS = {
+  // Test-related conditions
+  'all tests passing': (rootDir, _ctx) => {
+    const testCommand = getTestCommand(rootDir);
+    const result = runTests(rootDir, testCommand);
+    return {
+      passed: result.passed,
+      message: result.passed
+        ? 'All tests passing'
+        : `Tests failing: ${result.output.split('\n').slice(-3).join(' ').substring(0, 100)}`,
+    };
+  },
+
+  'tests pass': (rootDir, _ctx) => {
+    const testCommand = getTestCommand(rootDir);
+    const result = runTests(rootDir, testCommand);
+    return {
+      passed: result.passed,
+      message: result.passed ? 'Tests pass' : 'Tests failing',
+    };
+  },
+
+  // Coverage conditions (requires threshold in context)
+  'coverage above threshold': (rootDir, ctx) => {
+    const threshold = ctx.coverageThreshold || 80;
+    const result = verifyCoverage(rootDir, threshold);
+    return {
+      passed: result.passed,
+      message: `Coverage: ${result.coverage?.toFixed(1) || 0}% (threshold: ${threshold}%)`,
+    };
+  },
+
+  // Lint conditions
+  'no linting errors': (rootDir, _ctx) => {
+    try {
+      execSync('npm run lint', {
+        cwd: rootDir,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 120000,
+      });
+      return { passed: true, message: 'No linting errors' };
+    } catch (e) {
+      return { passed: false, message: 'Linting errors found' };
+    }
+  },
+
+  // Type checking conditions
+  'no type errors': (rootDir, _ctx) => {
+    try {
+      execSync('npx tsc --noEmit', {
+        cwd: rootDir,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 120000,
+      });
+      return { passed: true, message: 'No type errors' };
+    } catch (e) {
+      return { passed: false, message: 'Type errors found' };
+    }
+  },
+
+  // Build conditions
+  'build succeeds': (rootDir, _ctx) => {
+    try {
+      execSync('npm run build', {
+        cwd: rootDir,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 300000,
+      });
+      return { passed: true, message: 'Build succeeds' };
+    } catch (e) {
+      return { passed: false, message: 'Build failed' };
+    }
+  },
+
+  // Screenshot/visual conditions
+  'all screenshots verified': (rootDir, _ctx) => {
+    const result = verifyScreenshots(rootDir);
+    return {
+      passed: result.passed,
+      message: result.passed
+        ? 'All screenshots verified'
+        : `${result.unverified?.length || 0} unverified screenshots`,
+    };
+  },
+
+  // AC conditions (checks story acceptance criteria in status.json)
+  'all acceptance criteria verified': (rootDir, ctx) => {
+    const storyId = ctx.currentStoryId;
+    if (!storyId) {
+      return { passed: false, message: 'No story ID in context' };
+    }
+    const status = getStatus(rootDir);
+    const story = status.stories?.[storyId];
+    if (!story) {
+      return { passed: false, message: `Story ${storyId} not found` };
+    }
+    // Check if story has AC and if they're marked complete
+    const ac = story.acceptance_criteria || story.ac || [];
+    if (!Array.isArray(ac) || ac.length === 0) {
+      return { passed: true, message: 'No AC defined (assuming complete)' };
+    }
+    // Check for ac_status field or assume AC are verified if tests pass
+    const acStatus = story.ac_status || {};
+    const allVerified = ac.every((_, i) => acStatus[i] === 'verified' || acStatus[i] === true);
+    return {
+      passed: allVerified,
+      message: allVerified
+        ? 'All AC verified'
+        : `${Object.values(acStatus).filter(v => v === 'verified' || v === true).length}/${ac.length} AC verified`,
+    };
+  },
+};
+
+/**
+ * Parse discretion condition from string
+ * @param {string} condition - e.g., "**all tests passing**" or "**coverage above 80%**"
+ * @returns {object} { key, threshold? }
+ */
+function parseDiscretionCondition(condition) {
+  // Remove ** markers
+  const cleaned = condition.replace(/\*\*/g, '').trim().toLowerCase();
+
+  // Check for threshold patterns like "coverage above 80%"
+  const coverageMatch = cleaned.match(/coverage (?:above|>=?) (\d+)%?/);
+  if (coverageMatch) {
+    return { key: 'coverage above threshold', threshold: parseInt(coverageMatch[1]) };
+  }
+
+  return { key: cleaned };
+}
+
+/**
+ * Evaluate a discretion condition
+ * @param {string} condition - The condition string (with or without ** markers)
+ * @param {string} rootDir - Project root
+ * @param {object} ctx - Context (currentStoryId, coverageThreshold, etc.)
+ * @returns {object} { passed: boolean, message: string }
+ */
+function evaluateDiscretionCondition(condition, rootDir, ctx = {}) {
+  const parsed = parseDiscretionCondition(condition);
+
+  // Set threshold in context if parsed from condition
+  if (parsed.threshold) {
+    ctx.coverageThreshold = parsed.threshold;
+  }
+
+  const evaluator = DISCRETION_CONDITIONS[parsed.key];
+  if (!evaluator) {
+    return {
+      passed: false,
+      message: `Unknown condition: "${parsed.key}". Available: ${Object.keys(DISCRETION_CONDITIONS).join(', ')}`,
+    };
+  }
+
+  return evaluator(rootDir, ctx);
+}
+
+/**
+ * Get discretion conditions from metadata
+ * @param {string} rootDir
+ * @returns {string[]} Array of condition strings
+ */
+function getDiscretionConditions(rootDir) {
+  const metadataPath = path.join(rootDir, 'docs/00-meta/agileflow-metadata.json');
+  const result = safeReadJSON(metadataPath, { defaultValue: {} });
+
+  if (result.ok && result.data?.ralph_loop?.conditions) {
+    return result.data.ralph_loop.conditions;
+  }
+
+  return [];
+}
+
 // Parse coverage report (Jest/NYC format)
 function parseCoverageReport(rootDir) {
   const reportPath = getCoverageReportPath(rootDir);
@@ -351,8 +535,10 @@ function handleLoop(rootDir) {
   const visualMode = loop.visual_mode || false;
   const coverageMode = loop.coverage_mode || false;
   const coverageThreshold = loop.coverage_threshold || 80;
-  // Visual and Coverage modes require at least 2 iterations for confirmation
-  const minIterations = visualMode || coverageMode ? 2 : 1;
+  const discretionConditions = loop.conditions || getDiscretionConditions(rootDir);
+  // Visual, Coverage, and Discretion modes require at least 2 iterations for confirmation
+  const hasDiscretionConditions = discretionConditions.length > 0;
+  const minIterations = visualMode || coverageMode || hasDiscretionConditions ? 2 : 1;
 
   console.log('');
   console.log(
@@ -361,6 +547,7 @@ function handleLoop(rootDir) {
   let modeLabel = '';
   if (visualMode) modeLabel += ' [VISUAL]';
   if (coverageMode) modeLabel += ` [COVERAGE ≥${coverageThreshold}%]`;
+  if (hasDiscretionConditions) modeLabel += ` [${discretionConditions.length} CONDITIONS]`;
   console.log(
     `${c.brand}${c.bold}  RALPH LOOP - Iteration ${iteration}/${maxIterations}${modeLabel}${c.reset}`
   );
@@ -368,6 +555,8 @@ function handleLoop(rootDir) {
     `${c.brand}${c.bold}══════════════════════════════════════════════════════════${c.reset}`
   );
   console.log('');
+  // State Narration: Loop iteration marker
+  console.log(`🔄 Iteration ${iteration}/${maxIterations}`);
 
   // Check iteration limit
   if (iteration > maxIterations) {
@@ -392,9 +581,8 @@ function handleLoop(rootDir) {
     return;
   }
 
-  console.log(
-    `${c.cyan}Current Story:${c.reset} ${currentStoryId} - ${currentStory.title || 'Untitled'}`
-  );
+  // State Narration: Current position marker
+  console.log(`📍 Working on: ${currentStoryId} - ${currentStory.title || 'Untitled'}`);
   console.log('');
 
   // Run tests
@@ -475,11 +663,38 @@ function handleLoop(rootDir) {
       return;
     }
 
+    // Evaluate discretion conditions
+    let discretionResults = [];
+    if (hasDiscretionConditions) {
+      console.log('');
+      console.log(`${c.blue}Evaluating discretion conditions...${c.reset}`);
+      const ctx = { currentStoryId, coverageThreshold };
+
+      for (const condition of discretionConditions) {
+        const result = evaluateDiscretionCondition(condition, rootDir, ctx);
+        discretionResults.push({ condition, ...result });
+        const marker = result.passed ? `${c.green}✓` : `${c.yellow}⏳`;
+        console.log(`  ${marker} **${condition.replace(/\*\*/g, '')}**: ${result.message}${c.reset}`);
+      }
+
+      // Track which conditions have been verified
+      const allConditionsPassed = discretionResults.every(r => r.passed);
+      state.ralph_loop.conditions_verified = allConditionsPassed;
+      state.ralph_loop.condition_results = discretionResults.map(r => ({
+        condition: r.condition,
+        passed: r.passed,
+        message: r.message,
+      }));
+    }
+
     // Check if all verification modes passed
+    const allDiscretionPassed =
+      !hasDiscretionConditions || discretionResults.every(r => r.passed);
     const canComplete =
       testResult.passed &&
       (!visualMode || screenshotResult.passed) &&
-      (!coverageMode || coverageResult.passed);
+      (!coverageMode || coverageResult.passed) &&
+      allDiscretionPassed;
 
     if (!canComplete) {
       // Something not verified yet
@@ -499,12 +714,21 @@ function handleLoop(rootDir) {
         console.log(`${c.dim}  Target: ${coverageThreshold}%${c.reset}`);
         console.log(`${c.dim}  Write more tests to cover uncovered code paths.${c.reset}`);
       }
+      if (hasDiscretionConditions && !allDiscretionPassed) {
+        const failedConditions = discretionResults.filter(r => !r.passed);
+        console.log(`${c.cyan}▶ Fix failing conditions:${c.reset}`);
+        for (const fc of failedConditions) {
+          console.log(`${c.dim}  - ${fc.condition.replace(/\*\*/g, '')}: ${fc.message}${c.reset}`);
+        }
+      }
       return;
     }
     console.log('');
 
     // Mark story complete
     markStoryComplete(rootDir, currentStoryId);
+    // State Narration: Completion marker
+    console.log(`✅ Story complete: ${currentStoryId}`);
     console.log(`${c.green}✓ Marked ${currentStoryId} as completed${c.reset}`);
 
     // Get next story
@@ -558,6 +782,8 @@ function handleLoop(rootDir) {
     }
   } else {
     // Tests failed - feed back to Claude
+    // State Narration: Error marker
+    console.log(`⚠️ Error: Test failure - ${(testResult.duration / 1000).toFixed(1)}s`);
     console.log(`${c.red}✗ Tests failed${c.reset} (${(testResult.duration / 1000).toFixed(1)}s)`);
     console.log('');
 
@@ -597,6 +823,8 @@ function handleCLI() {
       if (loop.visual_mode) modeLabel += ` ${c.cyan}[VISUAL]${c.reset}`;
       if (loop.coverage_mode)
         modeLabel += ` ${c.magenta}[COVERAGE ≥${loop.coverage_threshold}%]${c.reset}`;
+      if (loop.conditions?.length > 0)
+        modeLabel += ` ${c.blue}[${loop.conditions.length} CONDITIONS]${c.reset}`;
       console.log(`${c.green}Ralph Loop: active${c.reset}${modeLabel}`);
       console.log(`  Epic: ${loop.epic}`);
       console.log(`  Current Story: ${loop.current_story}`);
@@ -616,6 +844,16 @@ function handleCLI() {
         );
         console.log(`  Baseline: ${(loop.coverage_baseline || 0).toFixed(1)}%`);
       }
+      if (loop.conditions?.length > 0) {
+        const verified = loop.conditions_verified
+          ? `${c.green}yes${c.reset}`
+          : `${c.yellow}no${c.reset}`;
+        console.log(`  Discretion Conditions: ${loop.conditions.length} (All Verified: ${verified})`);
+        for (const result of loop.condition_results || []) {
+          const mark = result.passed ? `${c.green}✓${c.reset}` : `${c.yellow}⏳${c.reset}`;
+          console.log(`    ${mark} ${result.condition.replace(/\*\*/g, '')}`);
+        }
+      }
     }
     return true;
   }
@@ -647,6 +885,9 @@ function handleCLI() {
     const maxArg = args.find(a => a.startsWith('--max='));
     const visualArg = args.includes('--visual') || args.includes('-v');
     const coverageArg = args.find(a => a.startsWith('--coverage='));
+    // Parse conditions (--condition="**all tests passing**" or -c "...")
+    const conditionArgs = args.filter(a => a.startsWith('--condition=') || a.startsWith('-c='));
+    const conditions = conditionArgs.map(a => a.split('=').slice(1).join('=').replace(/"/g, ''));
 
     if (!epicArg) {
       console.log(`${c.red}Error: --epic=EP-XXXX is required${c.reset}`);
@@ -711,6 +952,10 @@ function handleCLI() {
       }
     }
 
+    // Get conditions from metadata if not provided via CLI
+    const allConditions =
+      conditions.length > 0 ? conditions : getDiscretionConditions(rootDir);
+
     // Initialize loop state
     const state = getSessionState(rootDir);
     state.ralph_loop = {
@@ -726,6 +971,9 @@ function handleCLI() {
       coverage_baseline: coverageBaseline,
       coverage_current: coverageBaseline,
       coverage_verified: false,
+      conditions: allConditions,
+      conditions_verified: false,
+      condition_results: [],
       started_at: new Date().toISOString(),
     };
     saveSessionState(rootDir, state);
@@ -750,7 +998,13 @@ function handleCLI() {
       );
       console.log(`  Baseline: ${coverageBaseline.toFixed(1)}%`);
     }
-    if (visualMode || coverageMode) {
+    if (allConditions.length > 0) {
+      console.log(`  Conditions: ${c.blue}${allConditions.length} discretion conditions${c.reset}`);
+      for (const cond of allConditions) {
+        console.log(`    - **${cond.replace(/\*\*/g, '')}**`);
+      }
+    }
+    if (visualMode || coverageMode || allConditions.length > 0) {
       console.log(`  Min Iterations: 2 (for confirmation)`);
     }
     console.log(`${c.dim}${'─'.repeat(40)}${c.reset}`);
@@ -783,15 +1037,17 @@ ${c.bold}Usage:${c.reset}
   node scripts/ralph-loop.js --init --epic=EP-XXX             Initialize loop for epic
   node scripts/ralph-loop.js --init --epic=EP-XXX --visual    Initialize with Visual Mode
   node scripts/ralph-loop.js --init --epic=EP-XXX --coverage=80  Initialize with Coverage Mode
+  node scripts/ralph-loop.js --init --epic=EP-XXX --condition="**all tests passing**"
   node scripts/ralph-loop.js --status                         Check loop status
   node scripts/ralph-loop.js --stop                           Stop the loop
   node scripts/ralph-loop.js --reset                          Reset loop state
 
 ${c.bold}Options:${c.reset}
-  --epic=EP-XXXX    Epic ID to process (required for --init)
-  --max=N           Max iterations (default: 20)
-  --visual, -v      Enable Visual Mode (screenshot verification)
-  --coverage=N      Enable Coverage Mode (iterate until N% coverage)
+  --epic=EP-XXXX      Epic ID to process (required for --init)
+  --max=N             Max iterations (default: 20)
+  --visual, -v        Enable Visual Mode (screenshot verification)
+  --coverage=N        Enable Coverage Mode (iterate until N% coverage)
+  --condition="..."   Add discretion condition (can use multiple times)
 
 ${c.bold}Visual Mode:${c.reset}
   When --visual is enabled, the loop also verifies that all screenshots
@@ -814,6 +1070,30 @@ ${c.bold}Coverage Mode:${c.reset}
     3. Minimum 2 iterations → confirms coverage is stable
     4. Only then → story marked complete
 
+${c.bold}Discretion Conditions:${c.reset}
+  Semantic conditions that must pass before story completion.
+  Use --condition multiple times for multiple conditions.
+
+  Built-in conditions:
+    **all tests passing**            Tests must pass
+    **tests pass**                   Tests must pass (alias)
+    **coverage above 80%**           Coverage must meet threshold
+    **no linting errors**            npm run lint must pass
+    **no type errors**               npx tsc --noEmit must pass
+    **build succeeds**               npm run build must pass
+    **all screenshots verified**     Screenshots need verified- prefix
+    **all acceptance criteria verified**  AC marked complete in status.json
+
+  Configure in docs/00-meta/agileflow-metadata.json:
+    {
+      "ralph_loop": {
+        "conditions": [
+          "**all tests passing**",
+          "**no linting errors**"
+        ]
+      }
+    }
+
 ${c.bold}How it works:${c.reset}
   1. Start loop with /agileflow:babysit EPIC=EP-XXX MODE=loop COVERAGE=80
   2. Work on the current story

package/src/core/agents/orchestrator.md

@@ -48,6 +48,22 @@ RULE #3: DEPENDENCY DETECTION
 | Same domain, different experts | PARALLEL | Security + Performance analyzing same code |
 | Best-of-N comparison | PARALLEL | Expert1 vs Expert2 vs Expert3 approaches |
 
+RULE #3b: JOIN STRATEGIES (for parallel deployment)
+| Strategy | When | Behavior |
+|----------|------|----------|
+| `all` | Full implementation | Wait for all, fail if any fails |
+| `first` | Racing approaches | Take first completion |
+| `any` | Fallback patterns | Take first success |
+| `any-N` | Multiple perspectives | Take first N successes |
+| `majority` | High-stakes decisions | Take consensus (2+ agree) |
+
+RULE #3c: FAILURE POLICIES
+| Policy | When | Behavior |
+|--------|------|----------|
+| `fail-fast` | Critical work (default) | Stop on first failure |
+| `continue` | Analysis/review | Run all, report failures |
+| `ignore` | Optional enrichments | Skip failures silently |
+
 RULE #4: SYNTHESIS REQUIREMENTS
 - NEVER give final answer without all expert results
 - Flag conflicts explicitly: "Expert A recommends X (rationale: ...), Expert B recommends Y (rationale: ...)"
@@ -238,11 +254,114 @@ TaskOutput(task_id: "<ui_expert_id>", block: true)
 
 ---
 
+## JOIN STRATEGIES
+
+When spawning parallel experts, specify how to handle results:
+
+| Strategy | Behavior | Use Case |
+|----------|----------|----------|
+| `all` | Wait for all, fail if any fails | Full feature implementation |
+| `first` | Take first result, cancel others | Racing alternative approaches |
+| `any` | Take first success, ignore failures | Fallback patterns |
+| `any-N` | Take first N successes | Get multiple perspectives |
+| `majority` | Take consensus result | High-stakes decisions |
+
+### Failure Policies
+
+Combine with strategies to handle errors gracefully:
+
+| Policy | Behavior | Use Case |
+|--------|----------|----------|
+| `fail-fast` | Stop all on first failure (default) | Critical operations |
+| `continue` | Run all to completion, report failures | Comprehensive analysis |
+| `ignore` | Skip failed branches silently | Optional enrichments |
+
+**Usage:**
+```
+Deploy parallel (strategy: all, on-fail: continue):
+  - agileflow-security (may fail if no vulnerabilities)
+  - agileflow-performance (may fail if no issues)
+  - agileflow-testing
+
+Run all to completion. Report any failures at end.
+```
+
+**When to use each policy:**
+
+| Scenario | Recommended Policy |
+|----------|-------------------|
+| Implementation work | `fail-fast` (need all parts) |
+| Code review/analysis | `continue` (want all perspectives) |
+| Optional enrichments | `ignore` (nice-to-have) |
+
+### Strategy: all (Default)
+
+Wait for all experts to complete. Report all results in synthesis.
+
+```
+Deploy parallel (strategy: all):
+  - agileflow-api (endpoint)
+  - agileflow-ui (component)
+
+Collect ALL results before synthesizing.
+If ANY expert fails → report failure with details.
+```
+
+### Strategy: first
+
+Take the first expert that completes. Useful for racing approaches.
+
+```
+Deploy parallel (strategy: first):
+  - Expert A (approach: caching)
+  - Expert B (approach: pagination)
+  - Expert C (approach: batching)
+
+First to complete wins → use that approach.
+Cancel/ignore other results.
+
+Use case: Finding ANY working solution when multiple approaches are valid.
+```
+
+### Strategy: any
+
+Take first successful result. Ignore failures. Useful for fallbacks.
+
+```
+Deploy parallel (strategy: any):
+  - Expert A (primary approach)
+  - Expert B (fallback approach)
+
+First SUCCESS wins → use that result.
+If A fails but B succeeds → use B.
+If all fail → report all failures.
+
+Use case: Resilient operations where any working solution is acceptable.
+```
+
+### Strategy: majority
+
+Multiple experts analyze same thing. Take consensus.
+
+```
+Deploy parallel (strategy: majority):
+  - Security Expert 1
+  - Security Expert 2
+  - Security Expert 3
+
+If 2+ agree → use consensus recommendation.
+If no consensus → report conflict, request decision.
+
+Use case: High-stakes security reviews, architecture decisions.
+```
+
+---
+
 ## PARALLEL PATTERNS
 
 ### Full-Stack Feature
 ```
-Parallel:
+Parallel (strategy: all):
   - agileflow-api (endpoint)
   - agileflow-ui (component)
 Then:
@@ -251,22 +370,32 @@ Then:
 
 ### Code Review/Analysis
 ```
-Parallel (analyze same code):
+Parallel (strategy: all):
   - agileflow-security
   - agileflow-performance
   - agileflow-testing
 Then:
-  - Synthesize findings
+  - Synthesize all findings
 ```
 
-### Best-of-N
+### Best-of-N (Racing)
 ```
-Parallel (same task, different approaches):
+Parallel (strategy: first):
   - Expert A (approach 1)
   - Expert B (approach 2)
   - Expert C (approach 3)
 Then:
-  - Compare and select best
+  - Use first completion
+```
+
+### Consensus Decision
+```
+Parallel (strategy: majority):
+  - Security Expert 1
+  - Security Expert 2
+  - Security Expert 3
+Then:
+  - Take consensus recommendation
 ```
 
 ---