tribunal-kit 8.0.0 โ†’ 9.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/.agent/ARCHITECTURE.md +2 -2
  2. package/.agent/config/plugin.json +4 -4
  3. package/.agent/config/system-prompt.md +54 -1
  4. package/.agent/routing_index.json +2 -2
  5. package/.agent/skills/12-principles-of-animation/SKILL.md +19 -16
  6. package/.agent/skills/60fps-animation/SKILL.md +47 -21
  7. package/.agent/skills/accessible-animation/SKILL.md +19 -16
  8. package/.agent/skills/adapt/SKILL.md +19 -16
  9. package/.agent/skills/advanced-rag-pipelines/SKILL.md +41 -40
  10. package/.agent/skills/agent-organizer/SKILL.md +9 -59
  11. package/.agent/skills/agentic-patterns/SKILL.md +9 -57
  12. package/.agent/skills/agentic-workflows-2026/SKILL.md +45 -8
  13. package/.agent/skills/ai-app-hardening/SKILL.md +31 -5
  14. package/.agent/skills/ai-prompt-injection-defense/SKILL.md +28 -66
  15. package/.agent/skills/animation-on-scroll/SKILL.md +19 -16
  16. package/.agent/skills/animation-systems/SKILL.md +19 -15
  17. package/.agent/skills/antfu-conventions/SKILL.md +19 -18
  18. package/.agent/skills/api-patterns/SKILL.md +8 -58
  19. package/.agent/skills/api-security-auditor/SKILL.md +8 -58
  20. package/.agent/skills/app-builder/SKILL.md +9 -59
  21. package/.agent/skills/appflow-wireframe/SKILL.md +13 -57
  22. package/.agent/skills/apple-design/SKILL.md +22 -14
  23. package/.agent/skills/architecture/SKILL.md +9 -59
  24. package/.agent/skills/audit-and-fix/SKILL.md +19 -16
  25. package/.agent/skills/authentication-best-practices/SKILL.md +8 -58
  26. package/.agent/skills/backend-security-expert/SKILL.md +32 -65
  27. package/.agent/skills/baseline-ui/SKILL.md +22 -14
  28. package/.agent/skills/bash-linux/SKILL.md +9 -59
  29. package/.agent/skills/behavioral-modes/SKILL.md +9 -57
  30. package/.agent/skills/better-colors/SKILL.md +22 -14
  31. package/.agent/skills/better-typography/SKILL.md +26 -14
  32. package/.agent/skills/better-ui/SKILL.md +54 -19
  33. package/.agent/skills/bolder/SKILL.md +19 -16
  34. package/.agent/skills/brainstorming/SKILL.md +9 -57
  35. package/.agent/skills/browser-native-ai/SKILL.md +9 -28
  36. package/.agent/skills/build-primitive/SKILL.md +19 -16
  37. package/.agent/skills/building-native-ui/SKILL.md +9 -59
  38. package/.agent/skills/cicd-pro/SKILL.md +21 -28
  39. package/.agent/skills/clarify/SKILL.md +19 -16
  40. package/.agent/skills/clean-code/SKILL.md +18 -61
  41. package/.agent/skills/cloud-architect/SKILL.md +21 -28
  42. package/.agent/skills/cobejs/SKILL.md +19 -15
  43. package/.agent/skills/code-review-checklist/SKILL.md +8 -58
  44. package/.agent/skills/codebase-design/SKILL.md +33 -22
  45. package/.agent/skills/colorize/SKILL.md +19 -16
  46. package/.agent/skills/compact-landing/SKILL.md +19 -16
  47. package/.agent/skills/company-logos/SKILL.md +19 -16
  48. package/.agent/skills/config-validator/SKILL.md +9 -59
  49. package/.agent/skills/containerization-pro/SKILL.md +21 -28
  50. package/.agent/skills/context-engineering-pro/SKILL.md +31 -5
  51. package/.agent/skills/create-design-md/SKILL.md +22 -14
  52. package/.agent/skills/critique/SKILL.md +20 -11
  53. package/.agent/skills/csharp-developer/SKILL.md +8 -58
  54. package/.agent/skills/data-validation-schemas/SKILL.md +9 -59
  55. package/.agent/skills/database-design/SKILL.md +27 -67
  56. package/.agent/skills/delight/SKILL.md +19 -16
  57. package/.agent/skills/deployment-procedures/SKILL.md +9 -59
  58. package/.agent/skills/design-lab/SKILL.md +19 -16
  59. package/.agent/skills/devops-engineer/SKILL.md +8 -58
  60. package/.agent/skills/devops-incident-responder/SKILL.md +9 -59
  61. package/.agent/skills/diagnosing-bugs/SKILL.md +20 -21
  62. package/.agent/skills/distill/SKILL.md +19 -16
  63. package/.agent/skills/documentation-templates/SKILL.md +9 -59
  64. package/.agent/skills/domain-modeling/SKILL.md +19 -18
  65. package/.agent/skills/duckdb-analytical-sql/SKILL.md +31 -5
  66. package/.agent/skills/edge-ai-mobile/SKILL.md +31 -5
  67. package/.agent/skills/edge-computing/SKILL.md +9 -59
  68. package/.agent/skills/emil-design-eng/SKILL.md +21 -24
  69. package/.agent/skills/error-resilience/SKILL.md +31 -66
  70. package/.agent/skills/expo-router-v4/SKILL.md +31 -5
  71. package/.agent/skills/extract-design-system/SKILL.md +9 -59
  72. package/.agent/skills/fabel-protocol/SKILL.md +26 -8
  73. package/.agent/skills/fixing-accessibility/SKILL.md +22 -14
  74. package/.agent/skills/fixing-metadata/SKILL.md +19 -16
  75. package/.agent/skills/fixing-motion-performance/SKILL.md +22 -14
  76. package/.agent/skills/framer-motion-expert/SKILL.md +9 -57
  77. package/.agent/skills/frontend-design/SKILL.md +27 -7
  78. package/.agent/skills/frontend-security-expert/SKILL.md +8 -58
  79. package/.agent/skills/game-design-expert/SKILL.md +9 -59
  80. package/.agent/skills/game-engineering-expert/SKILL.md +9 -59
  81. package/.agent/skills/generative-ui-expert/SKILL.md +9 -28
  82. package/.agent/skills/geo-fundamentals/SKILL.md +9 -59
  83. package/.agent/skills/git-pro/SKILL.md +19 -30
  84. package/.agent/skills/github-operations/SKILL.md +8 -58
  85. package/.agent/skills/gpt-taste/SKILL.md +19 -16
  86. package/.agent/skills/gsap-core/SKILL.md +8 -78
  87. package/.agent/skills/gsap-frameworks/SKILL.md +8 -78
  88. package/.agent/skills/gsap-performance/SKILL.md +9 -77
  89. package/.agent/skills/gsap-plugins/SKILL.md +9 -77
  90. package/.agent/skills/gsap-react/SKILL.md +9 -21
  91. package/.agent/skills/gsap-scrolltrigger/SKILL.md +8 -78
  92. package/.agent/skills/gsap-timeline/SKILL.md +9 -77
  93. package/.agent/skills/gsap-utils/SKILL.md +9 -77
  94. package/.agent/skills/harden/SKILL.md +19 -16
  95. package/.agent/skills/harness-protocol/SKILL.md +9 -21
  96. package/.agent/skills/i18n-localization/SKILL.md +9 -59
  97. package/.agent/skills/impeccable/SKILL.md +19 -18
  98. package/.agent/skills/improve-codebase-architecture/SKILL.md +19 -17
  99. package/.agent/skills/improve-ui/SKILL.md +22 -14
  100. package/.agent/skills/intelligent-routing/SKILL.md +9 -23
  101. package/.agent/skills/knowledge-graph/SKILL.md +9 -21
  102. package/.agent/skills/landing-page/SKILL.md +19 -16
  103. package/.agent/skills/lint-and-validate/SKILL.md +9 -59
  104. package/.agent/skills/llm-engineering/SKILL.md +8 -58
  105. package/.agent/skills/local-first/SKILL.md +9 -59
  106. package/.agent/skills/local-first-architecture/SKILL.md +37 -20
  107. package/.agent/skills/lottie-animation/SKILL.md +19 -15
  108. package/.agent/skills/marquee-loop/SKILL.md +19 -16
  109. package/.agent/skills/masked-reveal/SKILL.md +19 -15
  110. package/.agent/skills/mcp-builder/SKILL.md +9 -59
  111. package/.agent/skills/micro-interaction/SKILL.md +19 -16
  112. package/.agent/skills/mobile-design/SKILL.md +8 -58
  113. package/.agent/skills/monorepo-management/SKILL.md +9 -59
  114. package/.agent/skills/morphing-icons/SKILL.md +19 -15
  115. package/.agent/skills/motion-engineering/SKILL.md +22 -15
  116. package/.agent/skills/nextjs-react-expert/SKILL.md +35 -67
  117. package/.agent/skills/nodejs-best-practices/SKILL.md +34 -61
  118. package/.agent/skills/observability/SKILL.md +8 -58
  119. package/.agent/skills/opentelemetry-observability/SKILL.md +31 -5
  120. package/.agent/skills/page-transition-animation/SKILL.md +19 -16
  121. package/.agent/skills/parallel-agents/SKILL.md +9 -59
  122. package/.agent/skills/performance-profiling/SKILL.md +8 -58
  123. package/.agent/skills/plan-writing/SKILL.md +36 -69
  124. package/.agent/skills/platform-engineer/SKILL.md +9 -59
  125. package/.agent/skills/platform-engineering-opentofu/SKILL.md +31 -5
  126. package/.agent/skills/playwright-ai-e2e/SKILL.md +31 -5
  127. package/.agent/skills/playwright-best-practices/SKILL.md +9 -59
  128. package/.agent/skills/polish/SKILL.md +19 -16
  129. package/.agent/skills/powershell-windows/SKILL.md +8 -58
  130. package/.agent/skills/pricing-page/SKILL.md +19 -16
  131. package/.agent/skills/product-aware-heuristics/SKILL.md +27 -8
  132. package/.agent/skills/progressive-blur/SKILL.md +19 -16
  133. package/.agent/skills/project-idioms/SKILL.md +9 -59
  134. package/.agent/skills/property-based-testing/SKILL.md +31 -5
  135. package/.agent/skills/python-patterns/SKILL.md +9 -59
  136. package/.agent/skills/python-pro/SKILL.md +35 -67
  137. package/.agent/skills/quieter/SKILL.md +19 -16
  138. package/.agent/skills/react-doctor/SKILL.md +19 -16
  139. package/.agent/skills/react-specialist/SKILL.md +26 -65
  140. package/.agent/skills/readme-builder/SKILL.md +9 -59
  141. package/.agent/skills/realtime-patterns/SKILL.md +8 -58
  142. package/.agent/skills/red-team-tactics/SKILL.md +9 -59
  143. package/.agent/skills/redesign-skill/SKILL.md +19 -16
  144. package/.agent/skills/review-animations/SKILL.md +21 -25
  145. package/.agent/skills/rust-pro/SKILL.md +30 -61
  146. package/.agent/skills/seo-fundamentals/SKILL.md +9 -59
  147. package/.agent/skills/server-management/SKILL.md +9 -59
  148. package/.agent/skills/shadcn-ui-expert/SKILL.md +9 -59
  149. package/.agent/skills/shape/SKILL.md +19 -16
  150. package/.agent/skills/skill-creator/SKILL.md +36 -86
  151. package/.agent/skills/soft-skill/SKILL.md +19 -16
  152. package/.agent/skills/sounds-on-the-web/SKILL.md +19 -16
  153. package/.agent/skills/sql-pro/SKILL.md +47 -62
  154. package/.agent/skills/supabase-postgres-best-practices/SKILL.md +9 -59
  155. package/.agent/skills/svg-animation/SKILL.md +19 -15
  156. package/.agent/skills/swiftui-expert/SKILL.md +9 -59
  157. package/.agent/skills/swiss-design/SKILL.md +19 -16
  158. package/.agent/skills/system-design-pro/SKILL.md +21 -26
  159. package/.agent/skills/systematic-debugging/SKILL.md +19 -60
  160. package/.agent/skills/systematic-debugging/condition-based-waiting.md +115 -0
  161. package/.agent/skills/systematic-debugging/defense-in-depth.md +122 -0
  162. package/.agent/skills/systematic-debugging/root-cause-tracing.md +169 -0
  163. package/.agent/skills/tailwind-patterns/SKILL.md +8 -58
  164. package/.agent/skills/taste-skill/SKILL.md +19 -16
  165. package/.agent/skills/tdd-workflow/SKILL.md +65 -25
  166. package/.agent/skills/test-result-analyzer/SKILL.md +9 -59
  167. package/.agent/skills/testing-patterns/SKILL.md +8 -58
  168. package/.agent/skills/thermo-nuclear-code-quality-review/SKILL.md +19 -18
  169. package/.agent/skills/thinking-protocol/SKILL.md +33 -2
  170. package/.agent/skills/to-spring-or-not-to-spring/SKILL.md +19 -15
  171. package/.agent/skills/transitions-dev/SKILL.md +19 -15
  172. package/.agent/skills/trend-researcher/SKILL.md +9 -59
  173. package/.agent/skills/typescript-advanced/SKILL.md +21 -64
  174. package/.agent/skills/typeset/SKILL.md +19 -16
  175. package/.agent/skills/ui-reasoning-engine/SKILL.md +27 -8
  176. package/.agent/skills/ui-skill-packs/SKILL.md +26 -16
  177. package/.agent/skills/ui-skills-root/SKILL.md +22 -14
  178. package/.agent/skills/ui-ux-pro-max/SKILL.md +38 -12
  179. package/.agent/skills/ui-ux-researcher/SKILL.md +9 -59
  180. package/.agent/skills/vector-search-pgvector/SKILL.md +31 -5
  181. package/.agent/skills/verification-before-completion/SKILL.md +125 -0
  182. package/.agent/skills/vue-expert/SKILL.md +9 -57
  183. package/.agent/skills/vulnerability-scanner/SKILL.md +8 -58
  184. package/.agent/skills/web-accessibility-auditor/SKILL.md +9 -59
  185. package/.agent/skills/web-design-guidelines/SKILL.md +27 -7
  186. package/.agent/skills/web-quality-audit/SKILL.md +19 -16
  187. package/.agent/skills/webapp-testing/SKILL.md +9 -59
  188. package/.agent/skills/webgpu-performance/SKILL.md +9 -28
  189. package/.agent/skills/whimsy-injector/SKILL.md +9 -57
  190. package/.agent/skills/workflow-optimizer/SKILL.md +9 -57
  191. package/.agent/skills/zero-trust-passkeys/SKILL.md +31 -5
  192. package/.agent/templates/DESIGN.md +680 -160
  193. package/.agent/templates/sdd/implementer-prompt.md +53 -0
  194. package/.agent/templates/sdd/re-review-prompt.md +28 -0
  195. package/.agent/templates/sdd/task-reviewer-prompt.md +59 -0
  196. package/.agent/workflows/acf.md +4 -0
  197. package/.agent/workflows/api-tester.md +5 -0
  198. package/.agent/workflows/audit.md +5 -0
  199. package/.agent/workflows/brainstorm.md +17 -1
  200. package/.agent/workflows/changelog.md +5 -0
  201. package/.agent/workflows/contract.md +19 -0
  202. package/.agent/workflows/create.md +6 -1
  203. package/.agent/workflows/debug.md +5 -0
  204. package/.agent/workflows/deploy.md +6 -1
  205. package/.agent/workflows/enhance.md +6 -1
  206. package/.agent/workflows/fix-ci.md +5 -0
  207. package/.agent/workflows/fix.md +5 -0
  208. package/.agent/workflows/generate.md +5 -0
  209. package/.agent/workflows/marathon.md +6 -1
  210. package/.agent/workflows/migrate.md +5 -0
  211. package/.agent/workflows/minimal.md +4 -0
  212. package/.agent/workflows/orchestrate.md +6 -1
  213. package/.agent/workflows/performance-benchmarker.md +6 -1
  214. package/.agent/workflows/pipeline.md +5 -0
  215. package/.agent/workflows/plan.md +6 -1
  216. package/.agent/workflows/preview.md +6 -1
  217. package/.agent/workflows/refactor.md +6 -0
  218. package/.agent/workflows/review-ai.md +5 -0
  219. package/.agent/workflows/review.md +5 -0
  220. package/.agent/workflows/sdd.md +122 -0
  221. package/.agent/workflows/session.md +5 -0
  222. package/.agent/workflows/status.md +4 -0
  223. package/.agent/workflows/super-prompt.md +4 -0
  224. package/.agent/workflows/swarm.md +6 -1
  225. package/.agent/workflows/test.md +6 -1
  226. package/.agent/workflows/tribunal-backend.md +5 -0
  227. package/.agent/workflows/tribunal-cicd.md +5 -0
  228. package/.agent/workflows/tribunal-database.md +5 -0
  229. package/.agent/workflows/tribunal-full.md +8 -0
  230. package/.agent/workflows/tribunal-mobile.md +5 -0
  231. package/.agent/workflows/tribunal-performance.md +5 -0
  232. package/.agent/workflows/tribunal-speed.md +5 -0
  233. package/.agent/workflows/tribunal-ui.md +7 -0
  234. package/.agents/plugins/marketplace.json +20 -0
  235. package/.claude-plugin/marketplace.json +17 -0
  236. package/.claude-plugin/plugin.json +26 -0
  237. package/.codex-plugin/plugin.json +45 -0
  238. package/.cursor-plugin/plugin.json +26 -0
  239. package/.devin-plugin/plugin.json +14 -0
  240. package/.hermes-plugin/__init__.py +102 -0
  241. package/.hermes-plugin/plugin.yaml +6 -0
  242. package/.kimi-plugin/plugin.json +38 -0
  243. package/.opencode/INSTALL.md +41 -0
  244. package/.opencode/plugins/tribunal.js +101 -0
  245. package/.pi/extensions/tribunal.ts +133 -0
  246. package/CONTRIBUTING.md +1 -1
  247. package/README.md +246 -221
  248. package/bin/wrapper.js +1 -0
  249. package/dist/cli.js +355 -355
  250. package/dist/esm/index.mjs +142 -142
  251. package/dist/index.d.ts +349 -343
  252. package/gemini-extension.json +6 -0
  253. package/hooks/hooks-cursor.json +16 -0
  254. package/hooks/hooks.json +16 -0
  255. package/hooks/session-start.js +77 -0
  256. package/package.json +165 -146
  257. package/scripts/audit_skill_sdo.js +87 -0
  258. package/scripts/modernize_skills.js +254 -0
@@ -2,8 +2,8 @@
2
2
  name: api-patterns
3
3
  description: API design mastery. REST, GraphQL, tRPC, and gRPC selection. Request/response design, pagination (cursor/offset), filtering, versioning, rate limiting, error formats (RFC 9457), authentication (JWT/OAuth2/API keys), idempotency, file uploads, webhooks, and OpenAPI documentation. Use when designing APIs, choosing protocols, or implementing API standards.
4
4
  tools: Read, Grep, Glob, Bash, Edit, Write
5
- version: 3.0.0
6
- last-updated: 2026-07-30
5
+ version: 4.0.0
6
+ last-updated: 2026-09-07
7
7
  skills:
8
8
  - api-security-auditor
9
9
  - backend-security-expert
@@ -25,7 +25,11 @@ Before designing or implementing API endpoints, you MUST inspect:
25
25
  2. Cursor-Based Pagination (Section 19) โ†’ Use cursor pagination for datasets >10K rows to eliminate `OFFSET N` performance degradation
26
26
  3. Idempotency Header for Mutations (Section 21) โ†’ Require `Idempotency-Key` headers for state-changing `POST` or `PATCH` retry operations
27
27
 
28
- # API Patterns โ€” Design & Protocol Mastery
28
+
29
+ ## Activation Boundaries
30
+
31
+ - **Activate when:** Operating in tasks requiring API design mastery. REST, GraphQL, tRPC, and gRPC selection. Request/response design, pagination (cursor/offset), filtering, versioning, rate limiting, error formats (RFC 9457), authentication (JWT/OAuth2/API keys), idempotency, file uploads, webhooks, and OpenAPI documentation. Use when designing APIs, choosing protocols, or implementing API standards..
32
+ - **DO NOT activate when:** The task falls strictly outside api-patterns domain or belongs to a different dedicated specialist.
29
33
 
30
34
  ## Hallucination Traps (Read First)
31
35
 
@@ -235,69 +239,17 @@ AI coding assistants often fall into specific bad habits when dealing with this
235
239
 
236
240
  ---
237
241
 
238
- **Slash command: `/review` or `/tribunal-full`**
239
- **Active reviewers: `logic-reviewer` ยท `security-auditor`**
240
-
241
- ### โŒ Forbidden AI Tropes
242
-
243
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
244
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
245
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
246
-
247
- Review these questions before confirming output:
248
-
249
- ```
250
- โœ… Did I rely ONLY on real, verified tools and methods?
251
- โœ… Is this solution appropriately scoped to the user's constraints?
252
- โœ… Did I handle potential failure modes and edge cases?
253
- โœ… Have I avoided generic boilerplate that doesn't add value?
254
- ```
255
-
256
- ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
257
-
258
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
259
-
260
- - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
261
- - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
262
-
263
- ## Pre-Flight Checklist
264
-
265
- - [ ] Have I reviewed the user's specific constraints and requests?
266
- - [ ] Have I checked the environment for relevant existing implementations?
267
-
268
- ## VBC Protocol (Verification-Before-Completion)
269
-
270
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
271
-
272
- ---
273
-
274
- ## ๐Ÿค– LLM-Specific Traps
275
-
276
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
277
-
278
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
279
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
280
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
281
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
282
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
283
-
284
- ---
285
-
286
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
242
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
287
243
 
288
244
  **Slash command: `/review` or `/tribunal-full`**
289
245
  **Active reviewers: `logic-reviewer` ยท `security-auditor`**
290
246
 
291
247
  ### โŒ Forbidden AI Tropes
292
-
293
248
  1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
294
249
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
295
250
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
296
251
 
297
252
  ### โœ… Pre-Flight Self-Audit
298
-
299
- Review these questions before confirming output:
300
-
301
253
  ```
302
254
  โœ… Did I rely ONLY on real, verified tools and methods?
303
255
  โœ… Is this solution appropriately scoped to the user's constraints?
@@ -306,8 +258,6 @@ Review these questions before confirming output:
306
258
  ```
307
259
 
308
260
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
309
-
310
261
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
311
-
312
262
  - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
313
263
  - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
@@ -2,8 +2,8 @@
2
2
  name: api-security-auditor
3
3
  description: API Security auditing mastery. Rate limiting architecture, API key management, payload validation, IDOR (Insecure Direct Object Reference) prevention, mass assignment flaws, GraphQL security, and server-side mitigations. Use when building external APIs, B2B services, or reviewing endpoint security.
4
4
  tools: Read, Grep, Glob, Bash, Edit, Write
5
- version: 3.0.0
6
- last-updated: 2026-07-30
5
+ version: 4.0.0
6
+ last-updated: 2026-09-07
7
7
  skills:
8
8
  - backend-security-expert
9
9
  - vulnerability-scanner
@@ -25,7 +25,11 @@ Before auditing or hardening API endpoints, you MUST inspect:
25
25
  2. Mass Assignment Mitigations (Section 47) โ†’ Enforce strict Zod schemas (`.strict()`) to prevent parameter overposting into DB updates
26
26
  3. Distributed Rate Limiting (Section 80) โ†’ Store rate limit state in Redis for multi-pod load balanced environments to prevent limit bypasses
27
27
 
28
- # API Security Auditor โ€” Endpoint Hardening Mastery
28
+
29
+ ## Activation Boundaries
30
+
31
+ - **Activate when:** Operating in tasks requiring API Security auditing mastery. Rate limiting architecture, API key management, payload validation, IDOR (Insecure Direct Object Reference) prevention, mass assignment flaws, GraphQL security, and server-side mitigations. Use when building external APIs, B2B services, or reviewing endpoint security..
32
+ - **DO NOT activate when:** The task falls strictly outside api-security-auditor domain or belongs to a different dedicated specialist.
29
33
 
30
34
  ---
31
35
 
@@ -174,69 +178,17 @@ AI coding assistants often fall into specific bad habits when dealing with this
174
178
 
175
179
  ---
176
180
 
177
- **Slash command: `/review` or `/tribunal-full`**
178
- **Active reviewers: `logic-reviewer` ยท `security-auditor`**
179
-
180
- ### โŒ Forbidden AI Tropes
181
-
182
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
183
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
184
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
185
-
186
- Review these questions before confirming output:
187
-
188
- ```
189
- โœ… Did I rely ONLY on real, verified tools and methods?
190
- โœ… Is this solution appropriately scoped to the user's constraints?
191
- โœ… Did I handle potential failure modes and edge cases?
192
- โœ… Have I avoided generic boilerplate that doesn't add value?
193
- ```
194
-
195
- ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
196
-
197
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
198
-
199
- - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
200
- - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
201
-
202
- ## Pre-Flight Checklist
203
-
204
- - [ ] Have I reviewed the user's specific constraints and requests?
205
- - [ ] Have I checked the environment for relevant existing implementations?
206
-
207
- ## VBC Protocol (Verification-Before-Completion)
208
-
209
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
210
-
211
- ---
212
-
213
- ## ๐Ÿค– LLM-Specific Traps
214
-
215
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
216
-
217
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
218
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
219
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
220
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
221
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
222
-
223
- ---
224
-
225
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
181
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
226
182
 
227
183
  **Slash command: `/review` or `/tribunal-full`**
228
184
  **Active reviewers: `logic-reviewer` ยท `security-auditor`**
229
185
 
230
186
  ### โŒ Forbidden AI Tropes
231
-
232
187
  1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
233
188
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
234
189
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
235
190
 
236
191
  ### โœ… Pre-Flight Self-Audit
237
-
238
- Review these questions before confirming output:
239
-
240
192
  ```
241
193
  โœ… Did I rely ONLY on real, verified tools and methods?
242
194
  โœ… Is this solution appropriately scoped to the user's constraints?
@@ -245,8 +197,6 @@ Review these questions before confirming output:
245
197
  ```
246
198
 
247
199
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
248
-
249
200
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
250
-
251
201
  - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
252
202
  - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
@@ -2,8 +2,8 @@
2
2
  name: app-builder
3
3
  description: Main application building orchestrator. Creates full-stack applications from natural language requests. Determines project type, selects tech stack, coordinates agents.
4
4
  tools: Read, Grep, Glob, Bash, Edit, Write
5
- version: 3.0.0
6
- last-updated: 2026-07-30
5
+ version: 4.0.0
6
+ last-updated: 2026-09-07
7
7
  skills:
8
8
  - nextjs-react-expert
9
9
  - react-specialist
@@ -25,6 +25,12 @@ Before scaffolding or orchestrating application builds, you MUST inspect:
25
25
  2. Plan Verification (Section 220) โ†’ Ensure `{task-slug}.md` is created and verified in project root before invoking specialist agents
26
26
  3. Incremental Build Rule (Section 15) โ†’ Never generate entire applications in one shot; build and verify module by module
27
27
 
28
+
29
+ ## Activation Boundaries
30
+
31
+ - **Activate when:** Operating in tasks requiring Main application building orchestrator. Creates full-stack applications from natural language requests. Determines project type, selects tech stack, coordinates agents..
32
+ - **DO NOT activate when:** The task falls strictly outside app-builder domain or belongs to a different dedicated specialist.
33
+
28
34
  ## Hallucination Traps (Read First)
29
35
 
30
36
  - โŒ Generating entire applications in one shot -> โœ… Build one module at a time, verify each
@@ -33,8 +39,6 @@ Before scaffolding or orchestrating application builds, you MUST inspect:
33
39
 
34
40
  ---
35
41
 
36
- # App Builder โ€” Application Orchestrator
37
-
38
42
  ---
39
43
 
40
44
  ## When This Skill Activates
@@ -552,69 +556,17 @@ AI coding assistants often fall into specific bad habits when dealing with this
552
556
 
553
557
  ---
554
558
 
555
- **Slash command: `/review` or `/tribunal-full`**
556
- **Active reviewers: `logic-reviewer` ยท `security-auditor`**
557
-
558
- ### โŒ Forbidden AI Tropes
559
-
560
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
561
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
562
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
563
-
564
- Review these questions before confirming output:
565
-
566
- ```
567
- โœ… Did I rely ONLY on real, verified tools and methods?
568
- โœ… Is this solution appropriately scoped to the user's constraints?
569
- โœ… Did I handle potential failure modes and edge cases?
570
- โœ… Have I avoided generic boilerplate that doesn't add value?
571
- ```
572
-
573
- ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
574
-
575
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
576
-
577
- - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
578
- - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
579
-
580
- ## Pre-Flight Checklist
581
-
582
- - [ ] Have I reviewed the user's specific constraints and requests?
583
- - [ ] Have I checked the environment for relevant existing implementations?
584
-
585
- ## VBC Protocol (Verification-Before-Completion)
586
-
587
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
588
-
589
- ---
590
-
591
- ## ๐Ÿค– LLM-Specific Traps
592
-
593
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
594
-
595
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
596
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
597
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
598
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
599
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
600
-
601
- ---
602
-
603
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
559
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
604
560
 
605
561
  **Slash command: `/review` or `/tribunal-full`**
606
562
  **Active reviewers: `logic-reviewer` ยท `security-auditor`**
607
563
 
608
564
  ### โŒ Forbidden AI Tropes
609
-
610
565
  1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
611
566
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
612
567
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
613
568
 
614
569
  ### โœ… Pre-Flight Self-Audit
615
-
616
- Review these questions before confirming output:
617
-
618
570
  ```
619
571
  โœ… Did I rely ONLY on real, verified tools and methods?
620
572
  โœ… Is this solution appropriately scoped to the user's constraints?
@@ -623,8 +575,6 @@ Review these questions before confirming output:
623
575
  ```
624
576
 
625
577
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
626
-
627
578
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
628
-
629
579
  - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
630
580
  - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
@@ -2,16 +2,26 @@
2
2
  name: appflow-wireframe
3
3
  description: Application flow and wireframing mastery. Mermaid.js flowcharting, state diagrams, user journey mapping, interaction matrices, explicit screen boundary demarcation, and accessibility flow modeling. Use when planning UI architectures, designing user onboarding flows, or visualizing complex state machines before writing code.
4
4
  allowed-tools: Read, Write, Edit, Glob, Grep
5
- version: 2.0.0
6
- last-updated: 2026-04-02
5
+ version: 4.0.0
6
+ last-updated: 2026-09-07
7
7
  applies-to-model: gemini-2.5-pro, claude-3-7-sonnet
8
8
  routing:
9
9
  domain: general
10
10
  tier: basic
11
+ scripts-binding:
12
+ - .agent/scripts/lint_runner.js
13
+ - .agent/scripts/verify_all.js
11
14
  ---
12
15
 
13
16
  ## Hallucination Traps (Read First)
14
17
 
18
+
19
+
20
+ ## Activation Boundaries
21
+
22
+ - **Activate when:** Operating in tasks requiring Application flow and wireframing mastery. Mermaid.js flowcharting, state diagrams, user journey mapping, interaction matrices, explicit screen boundary demarcation, and accessibility flow modeling. Use when planning UI architectures, designing user onboarding flows, or visualizing complex state machines before writing code..
23
+ - **DO NOT activate when:** The task falls strictly outside appflow-wireframe domain or belongs to a different dedicated specialist.
24
+
15
25
  - โŒ Drawing wireframes without defined user personas -> โœ… Establish WHO uses each screen before designing
16
26
  - โŒ Skipping error/empty/loading states in flow diagrams -> โœ… Every screen needs 4 states: loading, empty, populated, error
17
27
  - โŒ Assuming linear user journeys -> โœ… Real users jump between screens, go back, and abandon flows mid-way
@@ -110,69 +120,17 @@ AI coding assistants often fall into specific bad habits when dealing with this
110
120
 
111
121
  ---
112
122
 
113
- **Slash command: `/review` or `/tribunal-full`**
114
- **Active reviewers: `logic-reviewer` ยท `security-auditor`**
115
-
116
- ### โŒ Forbidden AI Tropes
117
-
118
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
119
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
120
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
121
-
122
- Review these questions before confirming output:
123
-
124
- ```
125
- โœ… Did I rely ONLY on real, verified tools and methods?
126
- โœ… Is this solution appropriately scoped to the user's constraints?
127
- โœ… Did I handle potential failure modes and edge cases?
128
- โœ… Have I avoided generic boilerplate that doesn't add value?
129
- ```
130
-
131
- ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
132
-
133
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
134
-
135
- - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
136
- - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
137
-
138
- ## Pre-Flight Checklist
139
-
140
- - [ ] Have I reviewed the user's specific constraints and requests?
141
- - [ ] Have I checked the environment for relevant existing implementations?
142
-
143
- ## VBC Protocol (Verification-Before-Completion)
144
-
145
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
146
-
147
- ---
148
-
149
- ## ๐Ÿค– LLM-Specific Traps
150
-
151
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
152
-
153
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
154
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
155
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
156
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
157
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
158
-
159
- ---
160
-
161
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
123
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
162
124
 
163
125
  **Slash command: `/review` or `/tribunal-full`**
164
126
  **Active reviewers: `logic-reviewer` ยท `security-auditor`**
165
127
 
166
128
  ### โŒ Forbidden AI Tropes
167
-
168
129
  1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
169
130
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
170
131
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
171
132
 
172
133
  ### โœ… Pre-Flight Self-Audit
173
-
174
- Review these questions before confirming output:
175
-
176
134
  ```
177
135
  โœ… Did I rely ONLY on real, verified tools and methods?
178
136
  โœ… Is this solution appropriately scoped to the user's constraints?
@@ -181,8 +139,6 @@ Review these questions before confirming output:
181
139
  ```
182
140
 
183
141
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
184
-
185
142
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
186
-
187
143
  - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
188
144
  - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
@@ -1,8 +1,8 @@
1
1
  ---
2
2
  name: apple-design
3
3
  description: Apple's approach to interface design and fluid, physical motion, translated for the web. Use when building or reviewing gesture-driven UI, spring animations, drag/swipe/sheet interactions, momentum and interruptible transitions, translucent materials and depth, typography (optical sizing, tracking, leading), reduced-motion, or the design foundations behind Apple-style interfaces.
4
- version: 3.0.0
5
- last-updated: 2026-07-30
4
+ version: 4.0.0
5
+ last-updated: 2026-09-07
6
6
  skills:
7
7
  - soft-skill
8
8
  - emil-design-eng
@@ -27,6 +27,12 @@ Before engineering Apple-style UIs or gesture-driven components, you MUST inspec
27
27
 
28
28
  Design engineering guidelines for bringing Apple's fluid, physical interface paradigms to modern web applications.
29
29
 
30
+
31
+ ## Activation Boundaries
32
+
33
+ - **Activate when:** Operating in tasks requiring Apple's approach to interface design and fluid, physical motion, translated for the web. Use when building or reviewing gesture-driven UI, spring animations, drag/swipe/sheet interactions, momentum and interruptible transitions, translucent materials and depth, typography (optical sizing, tracking, leading), reduced-motion, or the design foundations behind Apple-style interfaces..
34
+ - **DO NOT activate when:** The task falls strictly outside apple-design domain or belongs to a different dedicated specialist.
35
+
30
36
  ---
31
37
 
32
38
  ## 1. Physics-Based Spring Animations
@@ -96,23 +102,25 @@ Apple depth relies on subtle, multi-layered backdrop blur and border highlights:
96
102
 
97
103
  ---
98
104
 
99
- ## ๐Ÿค– LLM-Specific Traps
105
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
100
106
 
101
- 1. **Over-using Blur**: Applying `backdrop-filter: blur(30px)` to dozens of items causes severe GPU frame drops during scrolling. Apply blur to sticky headers or modal backdrops only.
102
- 2. **Non-Interruptible Gestures**: Using CSS `transition: transform 0.5s ease` for drag or swipe handlers instead of gesture springs.
107
+ **Slash command: `/review` or `/tribunal-full`**
108
+ **Active reviewers: `logic-reviewer` ยท `security-auditor`**
103
109
 
104
- ---
105
-
106
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
110
+ ### โŒ Forbidden AI Tropes
111
+ 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
112
+ 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
113
+ 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
107
114
 
108
115
  ### โœ… Pre-Flight Self-Audit
109
-
110
116
  ```
111
- โœ… Are spring animations interruptible with realistic mass/stiffness/damping?
112
- โœ… Is backdrop-filter limited to top-level sticky surfaces and modals?
113
- โœ… Does letter-spacing scale inversely with font size (tighter for large titles)?
117
+ โœ… Did I rely ONLY on real, verified tools and methods?
118
+ โœ… Is this solution appropriately scoped to the user's constraints?
119
+ โœ… Did I handle potential failure modes and edge cases?
120
+ โœ… Have I avoided generic boilerplate that doesn't add value?
114
121
  ```
115
122
 
116
123
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
117
-
118
- Test gesture response and spring motion in live preview to ensure 60/120fps fluidity without GPU lag.
124
+ **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
125
+ - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
126
+ - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
@@ -2,8 +2,8 @@
2
2
  name: architecture
3
3
  description: Software architecture mastery. System design patterns, clean architecture, hexagonal/ports-and-adapters, event-driven architecture, microservices vs monolith decision framework, CQRS, domain-driven design, Architecture Decision Records (ADRs), and scalability patterns. Use when making architecture decisions, designing systems, or documenting technical decisions.
4
4
  tools: Read, Grep, Glob, Bash, Edit, Write
5
- version: 3.0.0
6
- last-updated: 2026-07-30
5
+ version: 4.0.0
6
+ last-updated: 2026-09-07
7
7
  skills:
8
8
  - domain-modeling
9
9
  - codebase-design
@@ -25,6 +25,12 @@ Before selecting architectural patterns or designing systems, you MUST inspect:
25
25
  2. Clean Architecture Dependency Direction (Section 50) โ†’ Ensure dependency arrows point strictly inward to Domain; Domain must have zero external infrastructure dependencies
26
26
  3. ADR Requirement for Non-Trivial Decisons (Section 135) โ†’ Document every major architectural decision with an ADR in `docs/architecture/`
27
27
 
28
+
29
+ ## Activation Boundaries
30
+
31
+ - **Activate when:** Operating in tasks requiring Software architecture mastery. System design patterns, clean architecture, hexagonal/ports-and-adapters, event-driven architecture, microservices vs monolith decision framework, CQRS, domain-driven design, Architecture Decision Records (ADRs), and scalability patterns. Use when making architecture decisions, designing systems, or documenting technical decisions..
32
+ - **DO NOT activate when:** The task falls strictly outside architecture domain or belongs to a different dedicated specialist.
33
+
28
34
  ## Hallucination Traps (Read First)
29
35
 
30
36
  - โŒ Choosing microservices for a team of 1-3 developers -> โœ… Start monolith, extract services only when team/scale demands it
@@ -33,8 +39,6 @@ Before selecting architectural patterns or designing systems, you MUST inspect:
33
39
 
34
40
  ---
35
41
 
36
- # Architecture โ€” System Design Mastery
37
-
38
42
  ## Architecture Selection
39
43
 
40
44
  ```
@@ -205,69 +209,17 @@ AI coding assistants often fall into specific bad habits when dealing with this
205
209
 
206
210
  ---
207
211
 
208
- **Slash command: `/review` or `/tribunal-full`**
209
- **Active reviewers: `logic-reviewer` ยท `security-auditor`**
210
-
211
- ### โŒ Forbidden AI Tropes
212
-
213
- 1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
214
- 2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
215
- 3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
216
-
217
- Review these questions before confirming output:
218
-
219
- ```
220
- โœ… Did I rely ONLY on real, verified tools and methods?
221
- โœ… Is this solution appropriately scoped to the user's constraints?
222
- โœ… Did I handle potential failure modes and edge cases?
223
- โœ… Have I avoided generic boilerplate that doesn't add value?
224
- ```
225
-
226
- ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
227
-
228
- **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
229
-
230
- - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
231
- - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.
232
-
233
- ## Pre-Flight Checklist
234
-
235
- - [ ] Have I reviewed the user's specific constraints and requests?
236
- - [ ] Have I checked the environment for relevant existing implementations?
237
-
238
- ## VBC Protocol (Verification-Before-Completion)
239
-
240
- You MUST verify existing code signatures and variables before attempting to modify or call them. No hallucination is permitted.
241
-
242
- ---
243
-
244
- ## ๐Ÿค– LLM-Specific Traps
245
-
246
- AI coding assistants often fall into specific bad habits when dealing with this domain. These are strictly forbidden:
247
-
248
- 1. **Over-engineering:** Proposing complex abstractions or distributed systems when a simpler approach suffices.
249
- 2. **Hallucinated Libraries/Methods:** Using non-existent methods or packages. Always `// VERIFY` or check `package.json` / `requirements.txt`.
250
- 3. **Skipping Edge Cases:** Writing the "happy path" and ignoring error handling, timeouts, or data validation.
251
- 4. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
252
- 5. **Silent Degradation:** Catching and suppressing errors without logging or re-raising.
253
-
254
- ---
255
-
256
- ## ๐Ÿ›๏ธ Tribunal Integration (Anti-Hallucination)
212
+ ## ๐Ÿ›๏ธ Tribunal Verification & Guardrails
257
213
 
258
214
  **Slash command: `/review` or `/tribunal-full`**
259
215
  **Active reviewers: `logic-reviewer` ยท `security-auditor`**
260
216
 
261
217
  ### โŒ Forbidden AI Tropes
262
-
263
218
  1. **Blind Assumptions:** Never make an assumption without documenting it clearly with `// VERIFY: [reason]`.
264
219
  2. **Silent Degradation:** Catching and suppressing errors without logging or handling.
265
220
  3. **Context Amnesia:** Forgetting the user's constraints and offering generic advice instead of tailored solutions.
266
221
 
267
222
  ### โœ… Pre-Flight Self-Audit
268
-
269
- Review these questions before confirming output:
270
-
271
223
  ```
272
224
  โœ… Did I rely ONLY on real, verified tools and methods?
273
225
  โœ… Is this solution appropriately scoped to the user's constraints?
@@ -276,8 +228,6 @@ Review these questions before confirming output:
276
228
  ```
277
229
 
278
230
  ### ๐Ÿ›‘ Verification-Before-Completion (VBC) Protocol
279
-
280
231
  **CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
281
-
282
232
  - โŒ **Forbidden:** Declaring a task complete because the output "looks correct."
283
233
  - โœ… **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing tests, compile success, or equivalent proof) that your output works as intended.