nccgs 1.1.1 → 1.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.claude/agents/nccgs-adversarial-reviewer.md +7 -1
- package/.claude/agents/nccgs-engine-programmer.md +2 -1
- package/.claude/agents/nccgs-gameplay-programmer.md +2 -1
- package/.claude/agents/nccgs-qa-engineer.md +2 -1
- package/.claude/agents/nccgs-ui-programmer.md +2 -1
- package/.claude/agents/nccgs-unity-build-specialist.md +2 -1
- package/.claude/agents/nccgs-unity-implementer.md +2 -1
- package/.claude/agents/nccgs-unity-systems-specialist.md +2 -1
- package/.claude/agents/nccgs-unity-ui-specialist.md +2 -1
- package/.claude/agents/nccgs-verification-engineer.md +2 -1
- package/.claude/nccgs/VERSION +1 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-accessibility-specialist.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-adversarial-reviewer.md +30 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-ai-programmer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-analytics-engineer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-art-direction-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-audio-direction-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-creative-director.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-documentation-manager.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-economy-designer.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-engine-programmer.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-game-design-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-game-designer.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-gameplay-programmer.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-level-designer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-live-ops-designer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-localization-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-narrative-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-network-programmer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-performance-analyst.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-producer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-production-coordinator.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-programming-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-prototyper.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-qa-engineer.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-qa-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-release-engineer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-release-lead.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-security-engineer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-sound-designer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-systems-designer.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-technical-architect.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-technical-artist.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-technical-director.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-tools-programmer.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-ui-programmer.md +25 -0
- package/.claude/nccgs/agent-library/nccgs-unity-build-specialist.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-unity-content-specialist.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-unity-implementer.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-unity-rendering-specialist.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-unity-systems-specialist.md +25 -0
- package/.claude/nccgs/agent-library/nccgs-unity-ui-specialist.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-ux-designer.md +0 -1
- package/.claude/nccgs/agent-library/nccgs-verification-engineer.md +25 -0
- package/.claude/{agents → nccgs/agent-library}/nccgs-world-builder.md +0 -1
- package/.claude/{agents → nccgs/agent-library}/nccgs-writer.md +0 -1
- package/.claude/nccgs/constitution.md +13 -0
- package/.claude/nccgs/hooks/agent-audit.mjs +6 -0
- package/.claude/nccgs/hooks/closure-guard.mjs +34 -0
- package/.claude/nccgs/hooks/runtime-observation.mjs +11 -0
- package/.claude/nccgs/hooks/session-start.mjs +8 -1
- package/.claude/nccgs/pipeline.json +176 -0
- package/.claude/nccgs/protocols/agent-contract.md +5 -0
- package/.claude/nccgs/protocols/astra-claude.md +77 -0
- package/.claude/nccgs/protocols/evidence.md +6 -0
- package/.claude/nccgs/protocols/model-routing.md +27 -5
- package/.claude/nccgs/protocols/orchestration.md +5 -0
- package/.claude/nccgs/protocols/task-gates.md +66 -0
- package/.claude/nccgs/routing.generated.md +11 -0
- package/.claude/nccgs/settings.fragment.json +73 -9
- package/.claude/nccgs/studio.json +187 -96
- package/.claude/nccgs/tools/compile-policy.mjs +83 -0
- package/.claude/nccgs/tools/configure-models.mjs +75 -35
- package/.claude/nccgs/tools/gates.mjs +167 -0
- package/.claude/nccgs/tools/policy.mjs +62 -0
- package/.claude/nccgs/tools/runtime.mjs +40 -0
- package/.claude/nccgs/tools/task.mjs +77 -0
- package/.claude/nccgs/workflow-catalog.json +90 -13
- package/.claude/skills/accessibility-review/SKILL.md +6 -5
- package/.claude/skills/accessibility-review/references/astra.md +17 -0
- package/.claude/skills/accessibility-review/references/legacy.md +7 -0
- package/.claude/skills/architecture-decision/SKILL.md +6 -5
- package/.claude/skills/architecture-decision/references/astra.md +12 -0
- package/.claude/skills/architecture-decision/references/legacy.md +7 -0
- package/.claude/skills/asset-audit/SKILL.md +6 -5
- package/.claude/skills/asset-audit/references/astra.md +17 -0
- package/.claude/skills/asset-audit/references/legacy.md +7 -0
- package/.claude/skills/audit/SKILL.md +6 -7
- package/.claude/skills/audit/references/astra.md +17 -0
- package/.claude/skills/audit/references/legacy.md +9 -0
- package/.claude/skills/balance-review/SKILL.md +6 -5
- package/.claude/skills/balance-review/references/astra.md +17 -0
- package/.claude/skills/balance-review/references/legacy.md +7 -0
- package/.claude/skills/bug-triage/SKILL.md +6 -5
- package/.claude/skills/bug-triage/references/astra.md +20 -0
- package/.claude/skills/bug-triage/references/legacy.md +7 -0
- package/.claude/skills/closure/SKILL.md +5 -4
- package/.claude/skills/closure/references/astra.md +15 -0
- package/.claude/skills/closure/references/legacy.md +7 -0
- package/.claude/skills/compatibility-review/SKILL.md +6 -5
- package/.claude/skills/compatibility-review/references/astra.md +17 -0
- package/.claude/skills/compatibility-review/references/legacy.md +7 -0
- package/.claude/skills/context-pack/SKILL.md +5 -4
- package/.claude/skills/context-pack/references/astra.md +12 -0
- package/.claude/skills/context-pack/references/legacy.md +7 -0
- package/.claude/skills/dependency-review/SKILL.md +6 -5
- package/.claude/skills/dependency-review/references/astra.md +17 -0
- package/.claude/skills/dependency-review/references/legacy.md +7 -0
- package/.claude/skills/design/SKILL.md +6 -11
- package/.claude/skills/design/references/astra.md +12 -0
- package/.claude/skills/design/references/legacy.md +13 -0
- package/.claude/skills/design-review/SKILL.md +6 -5
- package/.claude/skills/design-review/references/astra.md +17 -0
- package/.claude/skills/design-review/references/legacy.md +7 -0
- package/.claude/skills/evidence-review/SKILL.md +6 -5
- package/.claude/skills/evidence-review/references/astra.md +17 -0
- package/.claude/skills/evidence-review/references/legacy.md +7 -0
- package/.claude/skills/hotfix/SKILL.md +6 -5
- package/.claude/skills/hotfix/references/astra.md +23 -0
- package/.claude/skills/hotfix/references/legacy.md +7 -0
- package/.claude/skills/incident-recovery/SKILL.md +6 -5
- package/.claude/skills/incident-recovery/references/astra.md +20 -0
- package/.claude/skills/incident-recovery/references/legacy.md +7 -0
- package/.claude/skills/localize-game/SKILL.md +6 -5
- package/.claude/skills/localize-game/references/astra.md +20 -0
- package/.claude/skills/localize-game/references/legacy.md +7 -0
- package/.claude/skills/migrate-project/SKILL.md +6 -16
- package/.claude/skills/migrate-project/references/astra.md +23 -0
- package/.claude/skills/migrate-project/references/legacy.md +19 -0
- package/.claude/skills/migrate-project/references/procedure.md +8 -0
- package/.claude/skills/milestone-review/SKILL.md +6 -5
- package/.claude/skills/milestone-review/references/astra.md +12 -0
- package/.claude/skills/milestone-review/references/legacy.md +7 -0
- package/.claude/skills/nccgs-code-review/SKILL.md +6 -4
- package/.claude/skills/nccgs-code-review/references/astra.md +15 -0
- package/.claude/skills/nccgs-code-review/references/legacy.md +7 -0
- package/.claude/skills/performance-audit/SKILL.md +6 -5
- package/.claude/skills/performance-audit/references/astra.md +17 -0
- package/.claude/skills/performance-audit/references/legacy.md +7 -0
- package/.claude/skills/plan-feature/SKILL.md +6 -5
- package/.claude/skills/plan-feature/references/astra.md +12 -0
- package/.claude/skills/plan-feature/references/legacy.md +7 -0
- package/.claude/skills/playtest/SKILL.md +5 -4
- package/.claude/skills/playtest/references/astra.md +20 -0
- package/.claude/skills/playtest/references/legacy.md +7 -0
- package/.claude/skills/project-stage/SKILL.md +5 -4
- package/.claude/skills/project-stage/references/astra.md +12 -0
- package/.claude/skills/project-stage/references/legacy.md +7 -0
- package/.claude/skills/prototype-feature/SKILL.md +6 -5
- package/.claude/skills/prototype-feature/references/astra.md +20 -0
- package/.claude/skills/prototype-feature/references/legacy.md +7 -0
- package/.claude/skills/qa-plan/SKILL.md +6 -5
- package/.claude/skills/qa-plan/references/astra.md +12 -0
- package/.claude/skills/qa-plan/references/legacy.md +7 -0
- package/.claude/skills/release/SKILL.md +6 -9
- package/.claude/skills/release/references/astra.md +23 -0
- package/.claude/skills/release/references/legacy.md +11 -0
- package/.claude/skills/release-readiness/SKILL.md +6 -5
- package/.claude/skills/release-readiness/references/astra.md +17 -0
- package/.claude/skills/release-readiness/references/legacy.md +7 -0
- package/.claude/skills/retrospective/SKILL.md +6 -5
- package/.claude/skills/retrospective/references/astra.md +12 -0
- package/.claude/skills/retrospective/references/legacy.md +7 -0
- package/.claude/skills/review/SKILL.md +6 -7
- package/.claude/skills/review/references/astra.md +15 -0
- package/.claude/skills/review/references/legacy.md +9 -0
- package/.claude/skills/security-audit/SKILL.md +6 -5
- package/.claude/skills/security-audit/references/astra.md +17 -0
- package/.claude/skills/security-audit/references/legacy.md +7 -0
- package/.claude/skills/sprint-plan/SKILL.md +6 -5
- package/.claude/skills/sprint-plan/references/astra.md +12 -0
- package/.claude/skills/sprint-plan/references/legacy.md +7 -0
- package/.claude/skills/status/SKILL.md +5 -6
- package/.claude/skills/status/references/astra.md +13 -0
- package/.claude/skills/status/references/legacy.md +9 -0
- package/.claude/skills/story-readiness/SKILL.md +5 -4
- package/.claude/skills/story-readiness/references/astra.md +17 -0
- package/.claude/skills/story-readiness/references/legacy.md +7 -0
- package/.claude/skills/test/SKILL.md +6 -7
- package/.claude/skills/test/references/astra.md +20 -0
- package/.claude/skills/test/references/legacy.md +9 -0
- package/.claude/skills/ui-review/SKILL.md +6 -5
- package/.claude/skills/ui-review/references/astra.md +17 -0
- package/.claude/skills/ui-review/references/legacy.md +7 -0
- package/.claude/skills/work/SKILL.md +6 -27
- package/.claude/skills/work/references/astra.md +20 -0
- package/.claude/skills/work/references/closure.md +10 -0
- package/.claude/skills/work/references/feature-contracts.md +4 -0
- package/.claude/skills/work/references/legacy.md +29 -0
- package/README.md +59 -25
- package/UPGRADING.md +37 -0
- package/VERSION +1 -1
- package/docs/ARCHITECTURE.md +30 -13
- package/docs/HUONG-DAN-MIGRATE-VA-SU-DUNG.md +34 -329
- package/docs/MIGRATION-MATRIX.md +1 -1
- package/docs/NCCGS-1.3.md +125 -0
- package/docs/PROJECT-POLICY.md +18 -3
- package/docs/WORKFLOWS.md +19 -13
- package/package.json +5 -3
- package/scaffold/.nccgs/gates.json +7 -0
- package/scaffold/.nccgs/project.yaml +6 -3
- package/scaffold/.nccgs/state.md +1 -1
- package/scaffold/.nccgs/templates/agent-handoff.md +10 -0
- package/scaffold/.nccgs/templates/closure-record.md +11 -0
- package/scaffold/.nccgs/templates/feature-contract.md +9 -0
- package/scaffold/.nccgs/templates/implementation-report.md +49 -0
- package/scripts/cli.mjs +9 -4
- package/scripts/doctor.mjs +27 -1
- package/scripts/install.mjs +4 -3
- package/scripts/validate.mjs +20 -7
- package/tests/framework.test.mjs +143 -2
- package/tests/gates.test.mjs +170 -0
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Performance Audit
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Remain read-only unless explicitly asked to optimize. Define platform, scene, hardware/environment, scenario, baseline, and budget. Use official Unity Skills and profiling tools where available. Measure before attributing cause. Report bottlenecks with evidence, player impact, confidence, and prioritized experiment or remediation. For implemented optimizations, compare identical before/after conditions and regression risk.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: plan-feature
|
|
3
3
|
description: Creates an executable feature plan with dependencies, role ownership, write sets, verification, decisions, and closure gates. Use for meaningful STANDARD or CONTROLLED implementation before edits begin.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Agent, AskUserQuestion
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Plan Feature
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Plan Feature — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Astra owns this workflow and its canonical outputs. Claude only inspects relevant
|
|
8
|
+
inputs and returns factual constraints, missing information, or proposed amendments.
|
|
9
|
+
Do not create a replacement plan/document or sign off as Astra.
|
|
10
|
+
|
|
11
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
12
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Plan Feature
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Read policy, state, feature contract, and context packet. Define approved outcome, non-goals, risk, execution DAG, role per node, one writer per path, checkpoints, rollback, evidence, PO decisions, and closure artifacts. Use the [orchestration protocol](../../../nccgs/protocols/orchestration.md). Parallelize only independent nodes. Persist the plan in the mapped planning source or `.nccgs/features/` when no canonical plan exists. A plan authorizes no extra product scope.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -6,9 +6,10 @@ allowed-tools: Read, Glob, Grep, Write, Edit, AskUserQuestion
|
|
|
6
6
|
|
|
7
7
|
# Playtest
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
# Playtest — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Domain objective: Prepares and records a reproducible Product Owner or player playtest for subjective experience, usability, pacing, balance, readability, audio, or narrative gates.
|
|
8
|
+
|
|
9
|
+
Work only inside the supplied plan and assigned write set. Activate an optional
|
|
10
|
+
specialist with the agents command only when its domain is required. Keep one writer
|
|
11
|
+
per path and use official Unity Skills for Editor/assets/runtime operations.
|
|
12
|
+
|
|
13
|
+
For code changes: task init with Astra's plan, bind the session, implement and test,
|
|
14
|
+
record implementation evidence, request independent review, fix and re-review as
|
|
15
|
+
needed, then task check --target report. Only after that check passes write and
|
|
16
|
+
record the report for Astra. Stop at AWAITING_ASTRA_CHECK. Astra checking and the
|
|
17
|
+
Product Owner's explicit acceptance happen outside the Claude implementation session.
|
|
18
|
+
|
|
19
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
20
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Playtest
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Define build/version, participant assumptions, scenario, setup, tasks, observation prompts, success signals, and questions without leading the participant. Keep objective telemetry separate from subjective feedback. Record observations and decisions in the mapped playtest source or `.nccgs/playtests/`. A model may prepare and summarize; it must not fabricate player experience or close the PO gate.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -6,9 +6,10 @@ allowed-tools: Read, Glob, Grep, Bash
|
|
|
6
6
|
|
|
7
7
|
# Project Stage
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Project Stage — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Astra owns this workflow and its canonical outputs. Claude only inspects relevant
|
|
8
|
+
inputs and returns factual constraints, missing information, or proposed amendments.
|
|
9
|
+
Do not create a replacement plan/document or sign off as Astra.
|
|
10
|
+
|
|
11
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
12
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Project Stage
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Remain read-only. Inspect policy, state, canonical sources, code/assets, tests, builds, release evidence, and Git history. Classify discovery, concept, pre-production, production, stabilization, release, live operations, maintenance, or mixed/transition state. Report evidence, missing prerequisites that materially block the next outcome, and one recommended next workflow. Existing projects need not backfill ceremonial phases.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: prototype-feature
|
|
3
3
|
description: Creates an isolated, time-boxed Unity prototype to answer one explicit design or technical hypothesis, with measurement and keep/discard criteria.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit, Bash,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Bash, Agent, AskUserQuestion
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Prototype Feature
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
# Prototype Feature — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Domain objective: Creates an isolated, time-boxed Unity prototype to answer one explicit design or technical hypothesis, with measurement and keep/discard criteria.
|
|
8
|
+
|
|
9
|
+
Work only inside the supplied plan and assigned write set. Activate an optional
|
|
10
|
+
specialist with the agents command only when its domain is required. Keep one writer
|
|
11
|
+
per path and use official Unity Skills for Editor/assets/runtime operations.
|
|
12
|
+
|
|
13
|
+
For code changes: task init with Astra's plan, bind the session, implement and test,
|
|
14
|
+
record implementation evidence, request independent review, fix and re-review as
|
|
15
|
+
needed, then task check --target report. Only after that check passes write and
|
|
16
|
+
record the report for Astra. Stop at AWAITING_ASTRA_CHECK. Astra checking and the
|
|
17
|
+
Product Owner's explicit acceptance happen outside the Claude implementation session.
|
|
18
|
+
|
|
19
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
20
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Prototype Feature
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Define hypothesis, cheapest falsifiable experiment, isolation boundary, timebox, measurement, success/failure threshold, and disposal plan. Keep production contracts and source untouched unless integration is explicitly approved. Use official Unity Skills for operations. Record result, evidence, limitations, and recommendation: discard, iterate, or migrate through a separate CONTROLLED plan. Never silently promote prototype code.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: qa-plan
|
|
3
3
|
description: Builds a risk-based Unity QA plan mapping requirements to automated, integration, runtime, build, performance, compatibility, and Product Owner validation scenarios.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Agent
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Qa Plan
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Qa Plan — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Astra owns this workflow and its canonical outputs. Claude only inspects relevant
|
|
8
|
+
inputs and returns factual constraints, missing information, or proposed amendments.
|
|
9
|
+
Do not create a replacement plan/document or sign off as Astra.
|
|
10
|
+
|
|
11
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
12
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Qa Plan
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Read policy, context packet, requirements, architecture, affected systems, existing tests, and baseline. Identify risk surfaces and map each criterion to the strongest practical evidence, test owner, environment, data/fixtures, expected result, regression scope, and PO gate. Include failure triage and stopping conditions. Persist in the mapped QA source or `.nccgs/evidence/`. Do not inflate coverage with redundant cases.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,18 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: release
|
|
3
3
|
description: Prepares a reproducible Unity release candidate and coordinates builds, versions, regression, known issues, rollback, and sign-offs. Publishing, deployment, store submission, or production changes require explicit Product Owner authority.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit, Bash,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Bash, Agent, AskUserQuestion, WebSearch, WebFetch
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Release
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Compose release lead, release engineer, Unity build specialist, QA, performance, security, localization, and content roles only where the target requires them. Use official Unity Skills for build operations.
|
|
14
|
-
|
|
15
|
-
Produce local artifacts, logs, manifests, checksums, evidence, and rollback notes. Fix authorized technical failures but never waive gates or change scope silently. Immediately before upload, publication, store submission, deployment, signing changes, or production configuration, obtain explicit Product Owner authority.
|
|
16
|
-
|
|
17
|
-
Report candidate identity, source revision, targets, tests/builds, artifact paths, known issues, waivers, pending gates, rollback, and external actions intentionally not performed.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
18
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
# Release — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Domain objective: Prepares a reproducible Unity release candidate and coordinates builds, versions, regression, known issues, rollback, and sign-offs. Publishing, deployment, store submission, or production changes require explicit Product Owner authority.
|
|
8
|
+
|
|
9
|
+
Work only inside the supplied plan and assigned write set. Activate an optional
|
|
10
|
+
specialist with the agents command only when its domain is required. Keep one writer
|
|
11
|
+
per path and use official Unity Skills for Editor/assets/runtime operations.
|
|
12
|
+
|
|
13
|
+
For code changes: task init with Astra's plan, bind the session, implement and test,
|
|
14
|
+
record implementation evidence, request independent review, fix and re-review as
|
|
15
|
+
needed, then task check --target report. Only after that check passes write and
|
|
16
|
+
record the report for Astra. Stop at AWAITING_ASTRA_CHECK. Astra checking and the
|
|
17
|
+
Product Owner's explicit acceptance happen outside the Claude implementation session.
|
|
18
|
+
|
|
19
|
+
Publication and other external release actions still require explicit Product Owner
|
|
20
|
+
authority; successful local verification grants no publication permission.
|
|
21
|
+
|
|
22
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
23
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
# Release
|
|
2
|
+
|
|
3
|
+
Treat release work as CONTROLLED when it changes platform configuration, signing, dependencies/services, compatibility, or production state.
|
|
4
|
+
|
|
5
|
+
Read release policy, candidate scope, closures, known issues, migrations, versioning, repository state, build matrix, and rollback requirements. Run `/release-readiness` before producing a candidate.
|
|
6
|
+
|
|
7
|
+
Compose release lead, release engineer, Unity build specialist, QA, performance, security, localization, and content roles only where the target requires them. Use official Unity Skills for build operations.
|
|
8
|
+
|
|
9
|
+
Produce local artifacts, logs, manifests, checksums, evidence, and rollback notes. Fix authorized technical failures but never waive gates or change scope silently. Immediately before upload, publication, store submission, deployment, signing changes, or production configuration, obtain explicit Product Owner authority.
|
|
10
|
+
|
|
11
|
+
Report candidate identity, source revision, targets, tests/builds, artifact paths, known issues, waivers, pending gates, rollback, and external actions intentionally not performed.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: release-readiness
|
|
3
3
|
description: Performs a read-only go/no-go readiness review across feature closure, tests, builds, compatibility, performance, security, localization, accessibility, known issues, rollback, and Product Owner sign-offs.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Bash,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Bash, Agent
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Release Readiness
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
# Release Readiness — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Domain objective: Performs a read-only go/no-go readiness review across feature closure, tests, builds, compatibility, performance, security, localization, accessibility, known issues, rollback, and Product Owner sign-offs.
|
|
8
|
+
|
|
9
|
+
Work only inside the supplied plan and assigned write set. Activate an optional
|
|
10
|
+
specialist with the agents command only when its domain is required. Keep one writer
|
|
11
|
+
per path and use official Unity Skills for Editor/assets/runtime operations.
|
|
12
|
+
|
|
13
|
+
This procedure is read-only: return evidence-backed findings and decisions to Astra
|
|
14
|
+
or the implementer. Supplemental analysis does not replace the mandatory Fable gate.
|
|
15
|
+
|
|
16
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
17
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Release Readiness
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Read release policy, candidate identity, closures, evidence, defects, build matrix, migrations, and rollback plan. Route only applicable domain checks. Classify every gate PASS, FAIL, NOT PROVEN, PO GATE, or waived with authority. Return GO, CONDITIONAL GO, or NO-GO with exact blockers and residual risks. Do not build, publish, or alter release state.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: retrospective
|
|
3
3
|
description: Captures evidence-based process improvements after a feature, sprint, release, migration, or incident without turning one anecdote into universal policy.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Agent
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Retrospective
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Retrospective — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Astra owns this workflow and its canonical outputs. Claude only inspects relevant
|
|
8
|
+
inputs and returns factual constraints, missing information, or proposed amendments.
|
|
9
|
+
Do not create a replacement plan/document or sign off as Astra.
|
|
10
|
+
|
|
11
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
12
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Retrospective
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Read goals, state transitions, handoffs, evidence, blockers, rework, and outcomes. Identify what helped, what failed, causal evidence, and a small number of testable improvements with owner and review trigger. Separate project-specific learning from framework change. Update canonical process records only when the improvement is accepted; do not add permanent rules for unverified anecdotes.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,16 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: review
|
|
3
3
|
description: Runs an independent, adversarial, read-only review of code, design, architecture, migration, release, or feature evidence. Use for second opinions and pre-closure scrutiny; it does not implement fixes.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Bash,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Bash, Agent
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Review
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Check behavior, edge cases, design/canon, architecture, Unity lifecycle/serialization, ownership, compatibility, security, performance, test coverage, migration reversibility, and closure claims as applicable.
|
|
14
|
-
|
|
15
|
-
Each finding includes BLOCKER/HIGH/MEDIUM/LOW severity, location/evidence, violated contract or reproducible failure mode, impact, and smallest safe remediation direction. Report unknowns and confidence. Lead with findings; do not edit or drift into fixes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
16
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
# Review — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Run the independent reviewer selected by pipeline.json on the final snapshot.
|
|
8
|
+
Read raw requirements, diff, affected callers, and verification evidence. Return
|
|
9
|
+
PASS, CHANGES_REQUIRED, or BLOCKED with findings, severity, locations, and evidence.
|
|
10
|
+
Do not fix code. BLOCKER/HIGH findings and unmet required criteria prevent PASS.
|
|
11
|
+
Record the review through task record; return fixes to the implementer and review
|
|
12
|
+
again after changes. Review is mandatory even for FAST work.
|
|
13
|
+
|
|
14
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
15
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
# Review
|
|
2
|
+
|
|
3
|
+
Remain read-only. Review from raw requirements, policy, governing decisions, final diff, tests, and runtime/build evidence rather than implementer rationale.
|
|
4
|
+
|
|
5
|
+
Select domain reviewers only when they add a distinct failure lens. CONTROLLED work must include `nccgs-adversarial-reviewer`; provide bounded artifacts and no intended verdict.
|
|
6
|
+
|
|
7
|
+
Check behavior, edge cases, design/canon, architecture, Unity lifecycle/serialization, ownership, compatibility, security, performance, test coverage, migration reversibility, and closure claims as applicable.
|
|
8
|
+
|
|
9
|
+
Each finding includes BLOCKER/HIGH/MEDIUM/LOW severity, location/evidence, violated contract or reproducible failure mode, impact, and smallest safe remediation direction. Report unknowns and confidence. Lead with findings; do not edit or drift into fixes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: security-audit
|
|
3
3
|
description: Threat-models and reviews Unity code, networking, services, commerce, secrets, dependencies, validation, and abuse paths without implementing fixes.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Bash,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Bash, Agent, WebSearch, WebFetch
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Security Audit
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
# Security Audit — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Domain objective: Threat-models and reviews Unity code, networking, services, commerce, secrets, dependencies, validation, and abuse paths without implementing fixes.
|
|
8
|
+
|
|
9
|
+
Work only inside the supplied plan and assigned write set. Activate an optional
|
|
10
|
+
specialist with the agents command only when its domain is required. Keep one writer
|
|
11
|
+
per path and use official Unity Skills for Editor/assets/runtime operations.
|
|
12
|
+
|
|
13
|
+
This procedure is read-only: return evidence-backed findings and decisions to Astra
|
|
14
|
+
or the implementer. Supplemental analysis does not replace the mandatory Fable gate.
|
|
15
|
+
|
|
16
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
17
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Security Audit
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Remain read-only. Identify assets, actors, trust boundaries, entry points, authority, sensitive data, dependencies, and threat assumptions. Inspect relevant code/configuration without exposing secrets. Prioritize exploitable findings by likelihood and impact, provide evidence and mitigations, and distinguish verified vulnerabilities from hardening opportunities. Service, dependency, authority, and privacy changes require Product Owner decisions.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -1,14 +1,15 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: sprint-plan
|
|
3
3
|
description: Creates a capacity-aware, dependency-ordered short-horizon plan from approved features, risks, Product Owner priority, and verification/closure work.
|
|
4
|
-
allowed-tools: Read, Glob, Grep, Write, Edit,
|
|
4
|
+
allowed-tools: Read, Glob, Grep, Write, Edit, Agent, AskUserQuestion
|
|
5
5
|
---
|
|
6
6
|
|
|
7
7
|
# Sprint Plan
|
|
8
8
|
|
|
9
|
-
Read
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
14
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
# Sprint Plan — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Astra owns this workflow and its canonical outputs. Claude only inspects relevant
|
|
8
|
+
inputs and returns factual constraints, missing information, or proposed amendments.
|
|
9
|
+
Do not create a replacement plan/document or sign off as Astra.
|
|
10
|
+
|
|
11
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
12
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
# Sprint Plan
|
|
2
|
+
|
|
3
|
+
Read `.nccgs/project.yaml`, `.nccgs/state.md`, and the active context packet when present. Preserve Product Owner authority and unrelated work.
|
|
4
|
+
|
|
5
|
+
Read mapped planning sources, priorities, feature readiness, dependencies, known defects, capacity assumptions, and release constraints. Do not invent dates or capacity. Select a coherent goal, order work by dependency and risk, include verification/closure, identify ownership and PO decisions, and expose stretch work separately. Persist in the canonical planning location and keep scope changes explicit.
|
|
6
|
+
|
|
7
|
+
Return outcome, evidence, affected records, blockers or decisions, residual risk, and the exact next workflow. Do not claim DONE unless this is the `closure` skill and every configured gate passes.
|
|
@@ -6,11 +6,10 @@ allowed-tools: Read, Glob, Grep, Bash
|
|
|
6
6
|
|
|
7
7
|
# Status
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
Read models.profile in .nccgs/project.yaml; if absent, use the defaultProfile in
|
|
10
|
+
.claude/nccgs/pipeline.json. Load exactly one procedure:
|
|
10
11
|
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
For `brief`, omit evidence detail. For `full`, add requirement mapping, source revision freshness, role/model routing, hook health, linked artifact completion, working-tree summary, and recent decisions. For a feature ID, scope the report to that feature.
|
|
14
|
-
|
|
15
|
-
Use IMPLEMENTED, VERIFIED, VALIDATED, DONE, or BLOCKED exactly. Never show DONE while a configured artifact, strict checklist, objective check, or manual gate is incomplete without a valid item-specific waiver.
|
|
12
|
+
- astra-claude: [Astra/Claude procedure](references/astra.md).
|
|
13
|
+
- quality, balanced, inherit: [Legacy procedure](references/legacy.md).
|
|
16
14
|
|
|
15
|
+
Do not load or merge the other branch. Unknown profiles are configuration errors.
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
# Status — astra-claude
|
|
2
|
+
|
|
3
|
+
Read [the pipeline protocol](../../../nccgs/protocols/astra-claude.md) and
|
|
4
|
+
[generated routing](../../../nccgs/routing.generated.md). Use Astra's supplied plan,
|
|
5
|
+
requirements, and exact context references. Never substitute a legacy procedure.
|
|
6
|
+
|
|
7
|
+
Remain read-only. Read task records, active-agent selection, runtime observations,
|
|
8
|
+
and project evidence. Use task check for the requested next stage. Report actual
|
|
9
|
+
missing/stale gates and requested versus observed model/effort. Never infer DONE
|
|
10
|
+
from prose, configured model pins, or an old closed record.
|
|
11
|
+
|
|
12
|
+
Use [task gate commands](../../../nccgs/protocols/task-gates.md) for evidence and
|
|
13
|
+
state transitions. Report outcome, evidence, pending decisions, and next owner.
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
# Status
|
|
2
|
+
|
|
3
|
+
Remain read-only. Read project policy, state, active context packet, feature contract, evidence and closure records, plus repository status. Do not run broad tests solely for status.
|
|
4
|
+
|
|
5
|
+
Report current objective and risk, accountable role and active specialists, configured model profile and any fallback, implementation/automated/runtime/regression/docs/PO-gate states, closure mode and artifacts, blockers, stale records, and next concrete action.
|
|
6
|
+
|
|
7
|
+
For `brief`, omit evidence detail. For `full`, add requirement mapping, source revision freshness, role/model routing, hook health, linked artifact completion, working-tree summary, and recent decisions. For a feature ID, scope the report to that feature.
|
|
8
|
+
|
|
9
|
+
Use IMPLEMENTED, VERIFIED, VALIDATED, DONE, or BLOCKED exactly. Never show DONE while a configured artifact, strict checklist, objective check, or manual gate is incomplete without a valid item-specific waiver.
|