code-ai-installer 1.2.0 → 1.3.0

package/locales/en/.agents/release_gate/SKILL.md

@@ -1,77 +1,213 @@
 ---
 name: release_gate
-description: Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan.
+description: Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan.
 ---
 
 #Skill: Release Gate
 
-## Goal
-Make a release decision (GO/NO-GO) based on DoD, review/testing reports and CI/CD status.
-
-## Required condition
-Before starting the release gate, the conductor must generate a checklist via: $release_gate_checklist_template
-
-## Inputs
-- Reviewer report (P0/P1/P2 + suggested fixes)
-- Tester report (PASS/FAIL/BLOCKED + bugs P0/P1/P2 + evidence)
-- CI results (unit/integration, lint/format, security/dependency checks if available)
-- Release notes / list of changes (what is being released)
-- General DoD
-- Release Gate Checklist (RG-01…RG-xx) with statuses
-
-## Release Criteria (strict)
-### NO-GO (release prohibited)
-- There is **P0** from Reviewer or Tester
-- Unit or Integration tests DO NOT pass
-- There is a risk of leaking secrets/PII in code/logs
-- No runbook instructions for changes
-- Critical UX flow is broken or blocked (BLOCKED without bypass)
-- API non-compliance with contracts, breaking the client (P0)
-
-### GO with conditions (only allowed if agreed upon in advance)
-- There are P1/P2, but:
-  - there are workaround/mitigation measures,
-  - there are established tasks with priority and owner,
-  - the risk is described and accepted.
-
-## DoD Checklist (required)
-- [ ] Unit tests pass
-- [ ] Integration tests pass
-- [ ] Secrets are not included in the code/logs
-- [ ] There are run/check instructions (local/CI)
-- [ ] Basic security: input validation, authorization, dependency hygiene
-
-## Process (steps)
-1) Make sure that the RG checklist ($release_gate_checklist_template) has been created and the statuses have been entered.
-2) Collect input artifacts: Reviewer report, Tester report, CI status.
-3) Combine Findings into a single list: P0/P1/P2, owner, task link, status.
-4) Run the DoD checklist and mark PASS/MISSING.
-5) Make a GO/NO-GO decision (or GO-with-conditions if used).
-6) Generate a Release Report and update RG-22 (Decision).
-
-## Output: Release Report (template)
-###Release Decision
-- Decision: GO / NO-GO / GO-with-conditions
-- Version/Tag: <if available>
-- Scope: <briefly what we are releasing>
-
-### Evidence
-- CI: PASS/FAIL (link/commit)
-- Reviewer: PASS/MISSING + P0/P1/P2 count
-- Tester: PASS/FAIL/BLOCKED + bugs P0/P1/P2 count
-
-###DoD Status
-- Checklist: PASS/MISSING (with missing list)
-
-### Blocking Issues (if NO-GO)
-- [ ] ID / Description / Owner / How to reproduce / Fix plan
-
-### Accepted Risks (if GO-with-conditions)
-- Risk → impact → mitigation → owner → deadline
-
-###Next Actions
-- RG-01...
-- RG-02...
+Final decision GO / NO-GO / GO-with-conditions.
+
+**Sections:**
+1. [Workflow](#1-workflow)
+2. [Inputs](#2-inputs)
+3. [Decision Matrix](#3-decision)
+4. [NO-GO Criteria](#4-nogo)
+5. [DoD Checklist](#5-dod)
+6. [Post-Release Verification](#6-post)
+7. [Example: Release Report](#7-example)
+8. [Output Template](#8-output)
+
+---
+
+## 1. Workflow
+
+```
+1. Prereq: Generate RG checklist ($release_gate_checklist_template)
+2. Collect inputs (section 2)
+3. Fill RG checklist statuses
+4. Run DoD checklist (section 5)
+5. Apply decision matrix (section 3)
+6. Generate Release Report (section 8)
+7. Submit to user for GO / NO-GO sign-off
+8. If GO → post-release verification (section 6)
+```
+
+---
+
+## 2. Inputs
+
+| Input | Source | Required |
+|-------|--------|:--------:|
+| Reviewer Report | REV gate | ✅ |
+| Tester Report | TEST gate | ✅ |
+| CI Results (tests, lint) | CI pipeline / terminal | ✅ |
+| RG Checklist (filled) | $release_gate_checklist_template | ✅ |
+| Release scope (what's shipping) | Board / backlog | ✅ |
+| Version / tag / commit | Git | ✅ |
+| Rollback plan | OPS gate | ✅ |
+
+---
+
+## 3. Decision Matrix
+
+| Condition | Decision |
+|-----------|----------|
+| All RG checks DONE + 0 P0 + 0 P1 | **✅ GO** |
+| All RG checks DONE + 0 P0 + P1 with tracked tasks | **⚠️ GO with conditions** |
+| Any P0 from Reviewer or Tester | **❌ NO-GO** |
+| CI tests fail | **❌ NO-GO** |
+| Secrets in code/logs | **❌ NO-GO** |
+| Critical UX flow broken | **❌ NO-GO** |
+| No runbook / deploy instructions | **❌ NO-GO** |
+| API contract violation (breaking) | **❌ NO-GO** |
+
+### GO with conditions rules
+
+```markdown
+Allowed ONLY when ALL of:
+1. Zero P0 issues
+2. P1 issues have:
+   - [ ] Workaround documented
+   - [ ] Fix task created with owner + deadline
+   - [ ] Risk accepted by user
+3. No security P1 (security P1 = treat as P0)
+```
+
+---
+
+## 4. NO-GO Criteria (hard stops)
+
+| # | Criterion | How to check |
+|---|----------|-------------|
+| NG-01 | P0 from Reviewer | Review report: P0 count > 0 |
+| NG-02 | P0 from Tester | Test report: P0 bugs open |
+| NG-03 | Unit/Integration tests fail | CI output |
+| NG-04 | Secrets in code | grep: password, apiKey, token in source |
+| NG-05 | Secrets in logs | grep: password, token in log output |
+| NG-06 | No runbook | Missing deploy/verify instructions |
+| NG-07 | Critical flow blocked | TEST: P0 test case BLOCKED |
+| NG-08 | Breaking API change | API contract compliance: P0 mismatch |
+
+---
+
+## 5. DoD Checklist
+
+| # | Check | Source | Status |
+|---|-------|--------|--------|
+| RG-DoD-01 | Unit tests PASS | CI | ☐ |
+| RG-DoD-02 | Integration tests PASS | CI | ☐ |
+| RG-DoD-03 | Lint/format PASS | CI | ☐ |
+| RG-DoD-04 | 0 P0 from Reviewer | REV report | ☐ |
+| RG-DoD-05 | 0 P0 from Tester | TEST report | ☐ |
+| RG-DoD-06 | No secrets in code/logs | Security scan | ☐ |
+| RG-DoD-07 | Runbook exists and is current | docs/ | ☐ |
+| RG-DoD-08 | API matches contracts | API compliance | ☐ |
+| RG-DoD-09 | Containers built + healthy | OPS report | ☐ |
+| RG-DoD-10 | RG checklist complete | RG-01..RG-22 | ☐ |
+
+---
+
+## 6. Post-Release Verification
+
+After GO decision and deploy:
+
+| # | Check | How | Status |
+|---|-------|-----|--------|
+| POST-01 | Service is running | Health endpoint returns 200 | ☐ |
+| POST-02 | P0 flows work end-to-end | Quick manual smoke | ☐ |
+| POST-03 | No error spike in logs | Check last 5min of logs | ☐ |
+| POST-04 | Response times normal | Check latency (< 500ms) | ☐ |
+| POST-05 | Rollback tested (if first deploy) | Know how to roll back | ☐ |
+
+---
+
+## 7. Example: Release Report
+
+```markdown
+# Release Report: Smart Cart Rescue v0.9
+
+## Decision: ⚠️ GO with conditions
+
+**Version:** v0.9.0
+**Commit:** abc1234
+**Date:** 2026-03-13
+**Scope:** Settings CRUD + Coupon CRUD + Glassmorphism Widget
+
+## Evidence
+| Source | Status | Details |
+|--------|:------:|---------|
+| CI: Unit tests | ✅ PASS | 42/42 pass |
+| CI: Integration | ✅ PASS | 8/8 pass |
+| CI: Lint | ✅ PASS | 0 errors |
+| Reviewer | ✅ PASS | 0 P0, 2 P1 |
+| Tester | ✅ PASS | 0 P0, 1 P1 |
+| Security scan | ✅ PASS | No secrets found |
+| API compliance | ✅ PASS | All endpoints match |
+
+## DoD: 10/10 PASS
+
+## P1 Accepted (conditions)
+| # | Finding | Owner | Fix by | Workaround |
+|---|---------|-------|--------|-----------|
+| 1 | Timer NaN for 0 sec | DEV | v0.9.1 | Set min=1 |
+| 2 | Font preview missing | DEV | v0.9.1 | — (cosmetic) |
+| 3 | Empty state no illustration | UX | v0.9.1 | Has text CTA |
+
+## Rollback Plan
+- `docker compose down && git checkout v0.8 && docker compose up -d --build`
+
+## Post-Release
+- [ ] Health check OK
+- [ ] Settings CRUD works
+- [ ] Widget renders
+```
+
+---
+
+## 8. Output Template
+
+```markdown
+# Release Report: <Project> <Version>
+
+## Decision: ✅ GO / ⚠️ GO with conditions / ❌ NO-GO
+
+**Version:** <tag/commit>
+**Date:** YYYY-MM-DD
+**Scope:** <what's shipping>
+
+## Evidence
+| Source | Status | Details |
+|--------|:------:|---------|
+| CI: Unit | ✅/❌ | X/Y pass |
+| CI: Integration | ✅/❌ | X/Y pass |
+| Reviewer | ✅/❌ | P0: X, P1: Y |
+| Tester | ✅/❌ | P0: X, P1: Y |
+| Security | ✅/❌ | ... |
+| API Compliance | ✅/❌ | ... |
+
+## DoD Status
+<section 5 checklist — X/10 PASS>
+
+## Blocking Issues (if NO-GO)
+| # | Issue | Owner | Fix plan |
+|---|-------|-------|---------|
+| 1 | ... | ... | ... |
+
+## Accepted Risks (if GO with conditions)
+| # | Risk | Owner | Fix by | Workaround |
+|---|------|-------|--------|-----------|
+| 1 | ... | ... | ... | ... |
+
+## Rollback Plan
+<commands to rollback>
+
+## Post-Release Verification
+<section 6 checklist>
+```
+
+---
 
 ## See also
-- Checklist template: $release_gate_checklist_template
+- `$release_gate_checklist_template` — RG checklist (generate before this)
+- `$gates` — gate definitions
+- `$board` — project board tracking

package/locales/en/.agents/release_gate/agents/claude.json

@@ -1,12 +1,13 @@
 {
   "name": "release_gate",
-  "display_name": "Final release gate",
-  "description": "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan.",
-  "default_prompt": "Use $release_gate when the task matches the \"Final release gate\" skill.",
+  "display_name": "Release Report: Smart Cart Rescue v0.9",
+  "description": "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan.",
+  "default_prompt": "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill.",
   "triggers": [
     "release_gate",
     "release gate",
-    "Final release gate"
+    "Release Report: Smart Cart Rescue v0.9",
+    "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan"
   ],
   "capabilities": [
     "release",

package/locales/en/.agents/release_gate/agents/copilot.json

@@ -1,12 +1,13 @@
 {
   "name": "release_gate",
-  "display_name": "Final release gate",
-  "description": "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan.",
-  "default_prompt": "Use $release_gate when the task matches the \"Final release gate\" skill.",
+  "display_name": "Release Report: Smart Cart Rescue v0.9",
+  "description": "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan.",
+  "default_prompt": "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill.",
   "triggers": [
     "release_gate",
     "release gate",
-    "Final release gate"
+    "Release Report: Smart Cart Rescue v0.9",
+    "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan"
   ],
   "capabilities": [
     "release",

package/locales/en/.agents/release_gate/agents/gemini.json

@@ -1,12 +1,13 @@
 {
   "name": "release_gate",
-  "display_name": "Final release gate",
-  "description": "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan.",
-  "default_prompt": "Use $release_gate when the task matches the \"Final release gate\" skill.",
+  "display_name": "Release Report: Smart Cart Rescue v0.9",
+  "description": "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan.",
+  "default_prompt": "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill.",
   "triggers": [
     "release_gate",
     "release gate",
-    "Final release gate"
+    "Release Report: Smart Cart Rescue v0.9",
+    "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan"
   ],
   "capabilities": [
     "release",

package/locales/en/.agents/release_gate/agents/openai.yaml

@@ -1,7 +1,7 @@
 interface:
-  display_name: "Final release gate"
-  short_description: "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO…"
-  default_prompt: "Use $release_gate when the task matches the \"Final release gate\" skill."
+  display_name: "Release Report: Smart Cart Rescue v0.9"
+  short_description: "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept deci…"
+  default_prompt: "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill."
 dependencies:
   tools: []
 policy:

package/locales/en/.agents/release_gate/agents/qwen.json

@@ -1,12 +1,13 @@
 {
   "name": "release_gate",
-  "display_name": "Final release gate",
-  "description": "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan.",
-  "default_prompt": "Use $release_gate when the task matches the \"Final release gate\" skill.",
+  "display_name": "Release Report: Smart Cart Rescue v0.9",
+  "description": "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan.",
+  "default_prompt": "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill.",
   "triggers": [
     "release_gate",
     "release gate",
-    "Final release gate"
+    "Release Report: Smart Cart Rescue v0.9",
+    "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan"
   ],
   "capabilities": [
     "release",

package/locales/en/.agents/release_gate/agents/skill.yaml

@@ -1,12 +1,13 @@
 version: 1
 name: "release_gate"
-display_name: "Final release gate"
-description: "Final release gate: collect Reviewer+Tester+CI reports, check DoD, classify risks, make a GO/NO-GO decision and form a closure plan."
-default_prompt: "Use $release_gate when the task matches the \"Final release gate\" skill."
+display_name: "Release Report: Smart Cart Rescue v0.9"
+description: "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan."
+default_prompt: "Use $release_gate when the task matches the \"Release Report: Smart Cart Rescue v0.9\" skill."
 triggers:
   - "release_gate"
   - "release gate"
-  - "Final release gate"
+  - "Release Report: Smart Cart Rescue v0.9"
+  - "Final release gate — collect reports Reviewer+Tester+CI, check DoD, classify risks, accept decision GO/NO-GO and form closure plan"
 capabilities:
   - "release"
   - "gate"

package/locales/en/.agents/release_gate_checklist_template/SKILL.md

@@ -5,64 +5,178 @@ description: Generates a visible checklist RG-01...RG-xx (Evidence/DoD/Security/
 
 # Skill: Release Gate Checklist Template (RG-01…RG-xx)
 
-## Goal
-Before each release, create an **identical** release checklist so that the conductor can:
-- collect evidence (reports/CI),
-- check DoD,
-- record risks,
-- perform post-deploy smoke,
-- provide a rollback plan.
-
-## When to use
-- Every time before the final decision on release (Release Gate).
-
-## Inputs
-- Release scope (what is releaseable)
-- Version/tag/commit (if any)
-- Links to environments (staging/prod) if available
-
-## Exit
-- Visible checklist **RG-01…RG-xx** with statuses:
-  - TODO / IN-PROGRESS / BLOCKED / DONE
-- Brief Evidence section (links/commits)
-- Mini-summary “What else needs to be closed before GO”
-
-## Template (create as is)
-### Release Gate Checklist
-- [ ] RG-01 (Evidence) Specify the release scope + version/tag/commit
-- [ ] RG-02 (Evidence) CI green: unit tests PASS
-- [ ] RG-03 (Evidence) CI green: integration tests PASS
-- [ ] RG-04 (Evidence) Lint/format PASS (if available in CI)
-- [ ] RG-05 (Evidence) Dependency/SCA audit PASS or risks are recorded
-- [ ] RG-06 (Evidence) Reviewer report received (P0=0) + link to the report
-- [ ] RG-07 (Evidence) Tester report received (P0=0) + PASS/FAIL/BLOCKED + link
-
-- [ ] RG-08 (DoD) Secrets were not included in the code/logs (checks/scan/manual verification)
-- [ ] RG-09 (DoD) There are startup/check instructions (runbook) that are up to date
-- [ ] RG-10 (DoD) Basic safety confirmed: input validation + authz + hygiene
-
-- [ ] RG-11 (Contracts) API conforms to contracts (error codes/formats/validation)
-- [ ] RG-12 (Data) Data migrations/changes: application plan + reversibility (if any)
-- [ ] RG-13 (Ops) Observability: request_id/trace_id and secure logs (no PII/secrets)
-- [ ] RG-14 (Ops) Rate limiting / WAF / security headers (if applicable and provided)
-
-- [ ] RG-15 (Release) Release notes/changes prepared
-- [ ] RG-16 (Release) Feature flags/rollout strategy (if used) defined
-- [ ] RG-17 (Rollback) Rollback plan is described and understandable
-- [ ] RG-18 (Rollback) Backup/restore requirements are met (if there is a database/critical data)
-
-- [ ] RG-19 (Post-deploy) Smoke test scenarios defined (minimum P0 flows)
-- [ ] RG-20 (Post-deploy) Smoke test performed on the target environment (PASS)
-- [ ] RG-21 (Post-deploy) Monitoring/alerts checked (errors/latency)
-
-- [ ] RG-22 (Decision) Final decision: GO / NO-GO (+ reasons and conditions)
-
-## Status rules
-- If any point RG-02/03/06/07/08/09/10 fails → set BLOCKED and release = NO-GO.
-- P0 from Reviewer or Tester → BLOCKED and release = NO-GO.
-- P1 are allowed only with an explicit “Accepted Risks” with owner+deadline.
-
-## Response format
-### Release Gate Checklist (RG-xx) - with statuses
-### Evidence Links
-### What's Missing to Go
+Standard release checklist. Create before each Release Gate.
+
+**Sections:**
+1. [Workflow](#1-workflow)
+2. [Checklist](#2-checklist)
+3. [Status Rules](#3-rules)
+4. [Timing Guide](#4-timing)
+5. [Example: Filled Checklist](#5-example)
+
+---
+
+## 1. Workflow
+
+```
+1. Conductor creates checklist (copy section 2 as-is)
+2. Fill in statuses as evidence is gathered
+3. All blocking items (🔴) must be DONE for GO
+4. Advisory items (🟡) can be N/A with justification
+5. Pass checklist to $release_gate for final decisions
+```
+
+---
+
+## 2. Checklist
+
+### Evidence (source data collection)
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-01 | Evidence | Scope release + version/tag/commit specified | 🔴 | ☐ |
+| RG-02 | Evidence | CI: unit tests PASS | 🔴 | ☐ |
+| RG-03 | Evidence | CI: integration tests PASS | 🔴 | ☐ |
+| RG-04 | Evidence | CI: lint/format PASS | 🟡 | ☐ |
+| RG-05 | Evidence | Dependency/SCA audit PASS or risks documented | 🟡 | ☐ |
+| RG-06 | Evidence | Reviewer report received (P0=0) + link | 🔴 | ☐ |
+| RG-07 | Evidence | Tester report received (P0=0) + link | 🔴 | ☐ |
+
+### DoD (Definition of Done)
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-08 | DoD | Secrets not got into in code/logs | 🔴 | ☐ |
+| RG-09 | DoD | Runbook / instructions startup up to date | 🔴 | ☐ |
+| RG-10 | DoD | Baseline security: input validation + authz | 🔴 | ☐ |
+
+### Contracts & Data
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-11 | Contracts | API matches contracts | 🔴 | ☐ |
+| RG-12 | Data | Migrations/data: plan + reversibility | 🟡 | ☐ |
+
+### Operations
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-13 | Ops | Observability: request_id + safe logs | 🟡 | ☐ |
+| RG-14 | Ops | Rate limiting / security headers | 🟡 | ☐ |
+
+### Release
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-15 | Release | Release notes prepared | 🟡 | ☐ |
+| RG-16 | Release | Feature flags / rollout strategy | 🟡 | ☐ |
+| RG-17 | Rollback | Rollback plan described and understandable | 🔴 | ☐ |
+| RG-18 | Rollback | Backup/restore (if DB) | 🟡 | ☐ |
+
+### Post-deploy
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-19 | Post-deploy | Smoke test scenarios defined | 🔴 | ☐ |
+| RG-20 | Post-deploy | Smoke test execution on goal env | 🔴 | ☐ |
+| RG-21 | Post-deploy | Monitoring/logs checked | 🟡 | ☐ |
+
+### Decision
+
+| # | Category | Check | Blocking? | Status |
+|---|----------|-------|:---------:|--------|
+| RG-22 | Decision | Final decision: GO / NO-GO | 🔴 | ☐ |
+
+---
+
+## 3. Status Rules
+
+| Status | Meaning |
+|--------|---------|
+| `☐ TODO` | Not started |
+| `⏳ IN-PROGRESS` | Being checked |
+| `✅ DONE` | Check passed |
+| `⚠️ BLOCKED` | Check failed — requires fix |
+| `N/A` | Not applicable (with reason) |
+
+### Blocking rules
+
+| Condition | Result |
+|----------|--------|
+| Any 🔴 item = `⚠️ BLOCKED` | Release = **NO-GO** |
+| P0 from RG-06 or RG-07 | Release = **NO-GO** |
+| All 🔴 items = `✅ DONE` | Release = **GO** (or GO-with-conditions for P1) |
+| 🟡 item = `⚠️ BLOCKED` | Acceptable risk, document + track |
+
+---
+
+## 4. Timing Guide
+
+When to check each item:
+
+| Phase | Items | When |
+|-------|-------|------|
+| **Pre-collect** | RG-01 | Start of release gate |
+| **CI verification** | RG-02, RG-03, RG-04, RG-05 | After DEV complete |
+| **Reports collection** | RG-06, RG-07 | After REV + TEST gates |
+| **DoD verification** | RG-08, RG-09, RG-10 | During review/assessment |
+| **Contracts check** | RG-11, RG-12 | After API changes |
+| **Ops check** | RG-13, RG-14 | After OPS gate |
+| **Release prep** | RG-15, RG-16, RG-17, RG-18 | Pre-deploy |
+| **Post-deploy** | RG-19, RG-20, RG-21 | After deploy to target env |
+| **Final** | RG-22 | Last step |
+
+---
+
+## 5. Example: Filled Checklist
+
+```markdown
+## Release Gate Checklist — Smart Cart Rescue v0.9
+
+### Evidence
+| # | Check | Blocking | Status | Notes |
+|---|-------|:--------:|:------:|-------|
+| RG-01 | Scope: Settings + Coupons + Widget v0.9, commit abc1234 | 🔴 | ✅ | — |
+| RG-02 | Unit tests: 42/42 pass | 🔴 | ✅ | CI run #78 |
+| RG-03 | Integration tests: 8/8 pass | 🔴 | ✅ | CI run #78 |
+| RG-04 | Lint: 0 errors | 🟡 | ✅ | Biome |
+| RG-05 | npm audit: 0 high/critical | 🟡 | ✅ | — |
+| RG-06 | Reviewer: 0 P0, 2 P1 | 🔴 | ✅ | rev-01.md |
+| RG-07 | Tester: 0 P0, 1 P1, 22/24 pass | 🔴 | ✅ | test-report-iter1.md |
+
+### DoD
+| RG-08 | No secrets in code/logs | 🔴 | ✅ | grep clean |
+| RG-09 | Runbook: docs/runbook.md | 🔴 | ✅ | Updated |
+| RG-10 | Zod validation + auth middleware | 🔴 | ✅ | — |
+
+### Contracts
+| RG-11 | API matches contracts | 🔴 | ✅ | api-compliance.md |
+| RG-12 | No migrations needed | 🟡 | N/A | New app, no existing data |
+
+### Ops
+| RG-13 | Pino + request_id | 🟡 | ✅ | — |
+| RG-14 | Helmet security headers | 🟡 | ✅ | — |
+
+### Release
+| RG-15 | Release notes | 🟡 | ✅ | CHANGELOG.md |
+| RG-16 | No feature flags | 🟡 | N/A | — |
+| RG-17 | Rollback: docker compose revert | 🔴 | ✅ | Documented |
+| RG-18 | MongoDB backup | 🟡 | ✅ | mongodump before deploy |
+
+### Post-deploy
+| RG-19 | Smoke scenarios: 3 P0 flows | 🔴 | ✅ | Defined |
+| RG-20 | Smoke test PASS on staging | 🔴 | ✅ | All 3 pass |
+| RG-21 | Logs clean, no error spike | 🟡 | ✅ | — |
+
+### Decision
+| RG-22 | **⚠️ GO with conditions** | 🔴 | ✅ | 3 P1 tracked for v0.9.1 |
+
+### What's Missing to GO
+Nothing blocking. 3 P1 issues accepted with tasks + owners.
+```
+
+---
+
+## See also
+- `$release_gate` — decision process (uses this checklist)
+- `$gates` — gate definitions