wize-dev-kit 0.1.5 → 0.2.5

package/src/method-skills/2-plan-workflows/wize-create-prd/workflow.md

@@ -3,55 +3,164 @@ code: wize-create-prd
 name: Create PRD
 phase: 2-plan
 owner: wize-agent-pm   # Maria Hill
-status: stub
+status: ready
 ---
 
 # Create PRD
 
-**Goal.** Turn brief + research + trigger-map into a Product Requirements Document the team can build from.
+**Goal.** Turn brief + research + trigger map into a Product Requirements Document the team can build from. The PRD names *what* and *why* with measurable boundaries. Mantis, Fury, Tony will read it. Shuri ships against the acceptance criteria.
+
+Maria Hill drives. Peggy edits prose. Output lands in `.wize/planning/prd.md`.
 
 ## Inputs
-- `.wize/planning/brief.md`
-- `.wize/planning/research.md`
-- `.wize/planning/ux/trigger-map.md`
+
+- `.wize/planning/brief.md` (vision, audience, success criteria).
+- `.wize/planning/research.md` (when present).
+- `.wize/planning/ux/trigger-map.md` (every PRD goal references rows of this map).
+- `.wize/planning/prfaq.md` (when present — PRD scope mirrors FAQ Q5 "what's in/out").
 
 ## Outputs
+
 - `.wize/planning/prd.md`
+- `.wize/solutioning/epics/` — coarse epic outlines Tony refines later.
 
 ## Steps
-1. **Goals.** Pull the success criteria from the brief; restate as PRD goals.
-2. **Scope (in / out).** Explicit list of in-scope and out-of-scope items.
-3. **User stories backbone.** "As a … I want … so that …" — coarse, will be sliced by Tony.
-4. **Acceptance criteria per scope item.** Each scope item gets ACs Hawkeye can test.
-5. **Constraints + assumptions.** From brief and Fury (if Fury has run already).
-6. **Open questions.** Owners assigned.
-7. **Hand-off.** Trigger Mantis to start UX scenarios.
 
-## PRD template
+### 1. Goals (3–5)
+
+Pull the success criteria from the brief; restate as PRD goals. Each goal is:
+- One sentence.
+- Measurable (named metric + target + deadline).
+- Tied to a trigger-map row.
+
+Example: *"Reduce signup time from 3.5min to 1min by Q3 (signal: `signup_completed` median; row 1)."*
+
+### 2. Scope — in / out (explicit)
+
+| In | Out (for now) |
+|---|---|
+| First-team signup flow | Multi-team admin roles |
+| Self-serve invite | SSO via SAML |
+| English (US) | Other locales |
+
+If a stakeholder asked for it and it isn't here, they will ask again at gate review. Put their item in **Out** with a one-line reason, not silence.
+
+### 3. User stories backbone
+
+Coarse stories that map to scope items. "As a {role}, I want to {action}, so that {outcome}." Each story will be sliced finer by Tony in `wize-create-epics-and-stories`.
+
+Use the trigger-map rows as backbone:
+- Row 1 (Sign up) → "As a team admin, I want to sign up with my work email, so that I can invite my team within 5 minutes."
+
+### 4. Acceptance criteria per scope item
+
+For every In-scope item, write 3–7 ACs Hawkeye can test.
+
+Format: `Given … When … Then …` or a numbered behavioral list.
+
+ACs are **observable**. ✓ "If the user enters an invalid email, the input shows error text within 200ms." ✗ "The form validates emails correctly."
+
+Each AC gets an ID: `AC-{epic}-{n}`. Hawkeye references these in `tea-trace.md`.
+
+### 5. Constraints + assumptions
+
+Pull constraints from the brief. Add:
+- **Assumptions** that, if wrong, change scope.
+- **Dependencies** on other teams/services with name + deadline.
+
+Each assumption is one line + verification plan. *"Assumption: Stripe Connect onboarding average 7 days. Verification: confirm with Stripe by 2026-07-01."*
+
+### 6. NFR pointer
+
+Don't redefine NFRs in the PRD. Reference `.wize/planning/nfr-principles.md` (Fury's) once. Note any project-specific tightening.
+
+### 7. Open questions
+
+What still needs deciding before solutioning starts. Each with an owner + deadline. Blockers can't carry into Phase 3.
+
+### 8. Hand off
+
+- Mark `status: ready-for-validation`.
+- Run `wize-validate-prd` (Maria Hill + Mantis + Fury sign-off).
+- Then Mantis starts `wize-ux-scenarios`.
+
+## Output template
 
 ```markdown
+---
+status: draft | ready-for-validation | validated
+owner: Maria Hill
+created: YYYY-MM-DD
+---
+
 # PRD — {{project_name}}
 
 ## Goals
-1. …
+1. {{goal}} (metric: …, target: …, deadline: …, trigger-map row: …)
+2. …
 
 ## Scope
+
 ### In scope
-- …
+- {{item}} — {{2–3 lines of detail}}
+
 ### Out of scope
-- …
+- {{item}} — {{one-line reason: not now / not us / not yet}}
 
-## Backbone (user stories)
-- …
+## Backbone (coarse stories)
+- E01: As a {{role}}, I want to {{action}}, so that {{outcome}}.
+- E02: …
 
 ## Acceptance criteria
-| Item | ACs |
-|---|---|
-| … | AC1 …; AC2 … |
 
-## Constraints / assumptions
+### E01 — Sign-up
+- **AC-01-1:** Given a new visitor on `/signup`, When they submit a valid work email + password, Then an account is created and they land on `/onboarding` within 1.5s.
+- **AC-01-2:** Given an invalid email, When the user blurs the field, Then error text appears within 200ms identifying which rule failed.
+- **AC-01-3:** Given a duplicate email, When the user submits, Then they see a "Sign in instead?" CTA and the request returns HTTP 409.
 - …
 
+## Constraints
+- Deadline: …
+- Budget: …
+- Compliance: GDPR, LGPD, SOC2.
+
+## Assumptions
+- Stripe Connect onboarding ≤ 7 days avg. — verify by …
+- Auth0 free tier sufficient for first 6 months. — verify by …
+
+## Dependencies
+- Design system tokens from Mantis by {{date}}.
+- Database from infra team by {{date}}.
+
+## NFR pointer
+See `.wize/planning/nfr-principles.md`. Project tightening: p95 LCP ≤ 2.0s (vs. global 2.5s) on signup pages.
+
 ## Open questions
-- [ ] … (owner: …)
+- [ ] (blocker) Pricing tier exposed pre-payment? — *owner: NAME, by: DATE*
+- [ ] (important) Brazil-only beta or global launch? — *owner: NAME, by: DATE*
 ```
+
+## INVEST checklist (per AC group)
+
+Maria Hill validates every story's ACs against INVEST:
+
+- **I**ndependent: no implicit dependency on another story being built first.
+- **N**egotiable: details can move; intent can't.
+- **V**aluable: a real outcome to a real user.
+- **E**stimable: Tony can size it.
+- **S**mall: ≤ 1 PR worth (sliced finer in Phase 3 if not).
+- **T**estable: every AC is observable.
+
+If any letter fails, fix the story before it leaves Plan.
+
+## Anti-patterns Maria Hill rejects
+
+- **PRD as wishlist.** Pages of "the system shall…" with no Out-of-Scope. Force the cut.
+- **ACs as descriptions.** "The form is responsive." → no. *"At 360px, the form fits in the viewport with no horizontal scroll."*
+- **Open questions with no owner / no deadline.** They never get answered.
+- **Constraint hidden in prose.** Pull to its own bullet.
+- **PRD without a version + status.** Reviewers can't tell what they're reviewing.
+
+## Hand-off
+
+> PRD draft is at `.wize/planning/prd.md`. Two open blockers; CEO and Sales Lead have until Friday. Mantis — once we're `validated`, you start with the trigger map + PRD. Fury — your call on stack family.

package/src/method-skills/2-plan-workflows/wize-ux-design/workflow.md

@@ -4,63 +4,167 @@ name: UX Design
 phase: 2-plan
 owner: wize-agent-ux-designer   # Mantis
 absorbs: "WDS Freya — Phase 4 (Page Specs)"
-status: stub
+status: ready
 ---
 
 # UX Design
 
-**Goal.** Page-by-page specifications. Each screen documents layout, content, interactions, edge/empty/error states.
+**Goal.** Turn scenarios into page-by-page specifications Tony can architect against and Shuri can implement. One spec per screen. Every spec answers: purpose, primary action, layout, content, interactions, states (loading/empty/error/success/disabled), accessibility, and metrics.
+
+Mantis drives. Output lands in `.wize/planning/ux/ux-design/{screen-name}.md`.
 
 ## Inputs
-- `.wize/planning/ux/ux-scenarios.md`
-- `.wize/planning/prd.md`
+
+- `.wize/planning/ux/ux-scenarios.md` (every screen traces back to ≥ 1 scenario)
+- `.wize/planning/prd.md` (every screen advances at least one AC)
+- `.wize/solutioning/design-system/` (when Mantis already wrote tokens; otherwise this runs in parallel with `wize-design-system`)
+- Overlay playbooks if active:
+  - `web-overlay/playbooks/wcag-aa.md`, `responsive-breakpoints.md`, `semantic-html.md`
+  - `app-overlay/playbooks/apple-hig.md`, `material-design-3.md`, `touch-targets-and-gestures.md`, `permissions-ux.md`
 
 ## Outputs
+
 - `.wize/planning/ux/ux-design/{screen-name}.md` (one per screen)
+- `.wize/planning/ux/ux-design/index.md` (map of screens → scenarios → PRD ACs)
+
+## Steps
+
+### 1. Enumerate the screens
+
+From the scenarios, list every screen needed to deliver the moment-of-truth. Name them by role + state: `signup-empty.md`, `signup-error.md`, `team-list-with-members.md`, `team-list-empty.md`. Empty/error/loading states are screens.
+
+### 2. Per screen: fill the spec template
+
+For each screen, write the spec below. Stay disciplined; if a section is empty, ask why.
 
-## Per-screen template
+### 3. Write the index
+
+`index.md` is a single table mapping screen → scenarios touched → PRD ACs advanced. Tony reads this first; Hawkeye references it in `tea-design.md`.
+
+### 4. Hand off
+
+Mark `status: ready-for-architecture` on each spec. Notify Wizer; Tony reads next.
+
+## Spec template (one file per screen)
 
 ```markdown
 ---
-screen: {{name}}
-linked_scenario: ux-scenarios.md#scenario-N
+screen: signup-empty
+status: ready-for-architecture
+owner: Mantis
+linked_scenarios: [S1]
+linked_acs: [AC-01-1, AC-01-2]
 ---
 
-# {{Screen name}}
+# Sign up (empty state)
 
 ## Purpose
-…
+First contact: a manager wants to create an account. The goal of *this* screen is to collect work email + password with minimum friction, in service of scenario S1 moment-of-truth (3 invites within 5 minutes).
 
 ## Primary user action
-…
+Submit the form (CTA: "Create account").
 
-## Layout (ASCII wireframe or description)
+## Layout (ASCII or Mermaid)
+
+(web overlay)
 ```
-┌───────────────────────────────────────┐
-│ Header                                │
-├───────────────────────────────────────┤
-│ Content                               │
-└───────────────────────────────────────┘
+┌─────────────────────────────────────────────────┐
+│ Wize logo                          [Sign in →]  │
+├─────────────────────────────────────────────────┤
+│                                                 │
+│           Create your team's account            │
+│           ──────────────────────────            │
+│           [ Work email           ]              │
+│           [ Password (12+)       ]              │
+│                                                 │
+│           [    Create account    ]              │
+│                                                 │
+│           Already a member? Sign in              │
+│                                                 │
+└─────────────────────────────────────────────────┘
 ```
 
-## Content
-- Headline: …
-- Body: …
-- CTA: …
+(app overlay note: stacked, top-aligned, system back disabled.)
+
+## Content (copy)
+
+- Headline: "Create your team's account"
+- Sub: (none — keep the screen empty for focus)
+- Field 1 label: "Work email"
+- Field 1 placeholder: "name@yourcompany.com"
+- Field 2 label: "Password"
+- Field 2 helper text: "At least 12 characters."
+- CTA: "Create account"
+- Secondary: "Already a member? Sign in" → routes to /signin
 
 ## Interactions
-- Click {{element}} → {{outcome}}
+
+- Click CTA with valid form → submit; show loading state; redirect on success.
+- Click CTA with invalid form → set focus to first invalid field; show error region.
+- Tab order: email → password → CTA → "Sign in" link.
+- Enter on either field submits if both are valid.
 
 ## States
-- Loading: …
-- Empty: …
-- Error: …
-- Success: …
+
+- **Loading:** CTA shows spinner; button is disabled; inputs remain editable.
+- **Empty (this state):** placeholders visible; CTA disabled until both fields non-empty.
+- **Error (inline per field):** error region appears under each field, `role="alert"`, identifies the rule and the fix.
+- **Error (global):** Banner above headline if the back-end fails with a non-field error; provides a "retry" action.
+- **Success:** redirect; no flash. The next screen owns acknowledgement.
+- **Disabled:** CTA opacity 0.4; aria-disabled="true"; tooltip *"Fill both fields to continue"*.
 
 ## Accessibility notes
-- (web-overlay) WCAG …
-- (app-overlay) HIG / Material …
+
+(web overlay)
+- Both inputs have visible persistent labels (no placeholder-only).
+- `lang="en"` on `<html>`.
+- Error region: per-field `aria-describedby`, ALL `role="alert"` after first submit only.
+- Contrast pairs all ≥ 4.5:1 in light mode, ≥ 4.5:1 in dark mode.
+- 200% zoom: no horizontal scroll on 360px viewport.
+- Skip link absent (no main nav before).
+
+(app overlay)
+- Apple HIG / Material 3 systemic input components.
+- Dynamic Type / font scale: layout reflows at largest accessibility size; CTA pinned to bottom-safe-area.
+- Touch targets ≥ 44pt (iOS) / 48dp (Android).
+- VoiceOver order: headline → email → password → CTA → secondary link.
+
+## Metrics
+
+- Event `signup_completed` (Q7 success quote): fires after redirect.
+- Event `signup_error_shown {rule}`: fires on inline error.
+- Event `signup_abandoned`: fires on `beforeunload` if form had focus and CTA never fired.
+
+## Open questions for Tony
+
+- Should we use Auth0 hosted UI or our own form? (UX-decision is to keep our own; Tony decides feasibility.)
+- Magic-link as an alternative path? Out of scope per PRD; Mantis recommends putting in *Out*.
 ```
 
+## Index template
+
+```markdown
+# UX Design — index
+
+| Screen | Scenarios | PRD ACs |
+|---|---|---|
+| signup-empty | S1 | AC-01-1, AC-01-2 |
+| signup-error | S1 | AC-01-2 |
+| onboarding-step-1 | S1 | AC-02-1 |
+| team-list-empty | S1, S2 | AC-03-1 |
+| team-list-with-members | S1, S2 | AC-03-2, AC-03-3 |
+| invite-modal | S1, S2 | AC-02-2, AC-02-3 |
+```
+
+## Anti-patterns Mantis rejects
+
+- **Specs without states.** A screen with no empty/error spec is half a spec.
+- **Copy as marketing tone.** Use the user's voice. Cut "world-class," "delightful," "seamless."
+- **Mystery icons.** Icons need accessible labels; if you can't name it, draw a word next to it.
+- **Hover-only affordances on touch.** Spec the non-hover equivalent.
+- **Touch targets < platform minimum.** 24×24 CSS px on web (WCAG 2.5.8), 44pt iOS, 48dp Android — non-negotiable.
+- **Screens that don't trace to scenarios + PRD ACs.** If you can't fill the index row, the screen isn't justified.
+
 ## Hand-off
-"Tony, screen specs in `.wize/planning/ux/ux-design/`. Architecture time."
+
+> UX specs are at `.wize/planning/ux/ux-design/`. Index points screen → scenario → AC. Tony, you can start `wize-create-architecture` now; the moment-of-truth lines in scenarios tell you which interactions are load-bearing. Hawkeye, `tea-design.md` should index by screen to keep test design and UI aligned.

package/src/method-skills/2-plan-workflows/wize-ux-scenarios/workflow.md

@@ -4,45 +4,121 @@ name: UX Scenarios
 phase: 2-plan
 owner: wize-agent-ux-designer   # Mantis (absorbs WDS Freya)
 absorbs: "WDS Freya — Phase 3 (8-question dialog)"
-status: stub
+status: ready
 ---
 
 # UX Scenarios
 
-**Goal.** Produce the scenario map that anchors all UX work. Eight focused questions; one answer each.
+**Goal.** Produce a scenario map that anchors all UX work. Eight focused questions; one short answer each. Scenarios are pieces of behavior, not personas — they're how *this* user, in *this* state, tries to accomplish *that* JTBD.
+
+Mantis drives. Output lands in `.wize/planning/ux/ux-scenarios.md`. It's the bridge from PM intent (PRD) to designer concreteness (next workflow: `wize-ux-design`).
 
 ## Inputs
-- `.wize/planning/prd.md`
-- `.wize/planning/ux/trigger-map.md`
+
+- `.wize/planning/prd.md` (validated)
+- `.wize/planning/ux/trigger-map.md` (Pepper)
 - `.wize/planning/brief.md`
 
 ## Outputs
+
 - `.wize/planning/ux/ux-scenarios.md`
 
-## The 8 questions (WDS dialog)
+## Steps
+
+### 1. Identify the scenarios
+
+A scenario = one (user, state, JTBD) tuple where the product earns or loses. Aim for **3–8 scenarios** that, taken together, cover all backbone stories in the PRD.
+
+Rules:
+- One sentence each at this stage.
+- Verb-led. *"New manager onboards their first team."* Not *"Manager onboarding."*
+- Distinct. If two scenarios share trigger + state, collapse them.
+
+### 2. Run the 8-question dialog per scenario (WDS Freya)
+
+For each scenario, answer the eight questions. One paragraph per answer. No filler. Cite trigger-map row when relevant.
 
 1. **Who is the user, in one sentence?**
-2. **What state are they in when they arrive?** (emotional, contextual)
-3. **What are they trying to accomplish?** (job-to-be-done)
+   Role + context. *"A 38-year-old engineering manager at a 25-person SaaS, primarily on desktop, sometimes phone."*
+
+2. **What state are they in when they arrive?**
+   Emotion + situational context. *"It's Monday morning. They just got CTO's request to onboard 3 hires this sprint. They're alt-tabbing between Slack and Linear."*
+
+3. **What are they trying to accomplish?** (JTBD)
+   *"Add three teammates and assign each to the right project before the team standup at 10am."* Concrete.
+
 4. **What would they do without our product today?**
+   *"Slack screenshots of the project list to each new hire; have them sign up individually; cross-check who landed where."*
+
 5. **What's the moment of truth — when they decide it works?**
+   *"The first time they see all three names in the team list with the right project tags, in under 5 minutes."*
+
 6. **What's the failure mode — when do they walk away?**
+   *"If they can't tell whether the invite arrived. If the invite email looks like spam. If they have to leave the page to find someone's email."*
+
 7. **What does success look like to them, in their words?**
+   *"It just worked. I sent the invites, they signed up, they were on the right project."* (Imagine the future quote.)
+
 8. **What's the next thing we want them to do?**
+   *"Open the project where the first teammate landed and verify the access works."*
 
-## Output structure
+### 3. Cross-link to the PRD
+
+For each scenario, list the **backbone story IDs** + **AC IDs** it touches. Mantis won't write specs for a scenario the PRD doesn't cover (it'd be scope creep); Hill won't sign off on a story the scenarios don't surface (it'd be over-spec).
+
+### 4. Hand off to UX Design
+
+Mark `status: ready-for-design`. Wizer pings Mantis to start `wize-ux-design`, where each scenario becomes one or more page specs.
+
+## Output template
 
 ```markdown
-# UX Scenarios
+---
+status: ready-for-design
+owner: Mantis
+created: YYYY-MM-DD
+covers_prd_stories: [E01, E02, E04]
+---
+
+# UX Scenarios — {{project_name}}
 
-## Scenario 1: {{name}}
+## Scenario 1: New manager onboards their first team
 
-- Q1 …
-- Q2 …
-- …
+- **Trigger-map row:** 1 (Sign up), 2 (Invite first teammate)
+- **PRD stories:** E01, E02
+- **AC IDs touched:** AC-01-1, AC-01-2, AC-02-1, AC-02-3
 
-## Scenario N: …
+**Q1 — Who:** A 38-year-old engineering manager at a 25-person SaaS, primarily on desktop, sometimes phone.
+**Q2 — State:** It's Monday morning. They just got CTO's request to onboard 3 hires this sprint. They're alt-tabbing between Slack and Linear.
+**Q3 — JTBD:** Add three teammates and assign each to the right project before the team standup at 10am.
+**Q4 — Today:** Slack screenshots of the project list to each new hire; have them sign up individually; cross-check who landed where.
+**Q5 — Moment of truth:** The first time they see all three names in the team list with the right project tags, under 5 minutes.
+**Q6 — Failure mode:** Can't tell whether the invite arrived; the email looks like spam; they have to leave the page to find someone's email.
+**Q7 — Success in their words:** "It just worked. I sent the invites, they signed up, they were on the right project."
+**Q8 — Next thing:** Open the project where the first teammate landed and verify access.
+
+## Scenario 2: Returning admin adds a fourth member months later
+
+(…)
+
+## Coverage check
+
+| PRD story | Scenarios |
+|---|---|
+| E01 (Sign up) | S1 |
+| E02 (Invite) | S1, S2 |
+| E03 (Switch project) | S2 |
+| E04 (Dashboard) | S1 |
 ```
 
+## Anti-patterns Mantis rejects
+
+- **Personas instead of scenarios.** Mantis cares what people *do*, not who they are in the abstract.
+- **Scenarios with no emotion or context.** "User wants to sign up." — that's a backbone story restated. The point is the *state*.
+- **JTBD written as features.** "Wants the dashboard." Wrong layer. Reword to the goal: "Wants to know if the team is healthy at a glance."
+- **Q5 ("moment of truth") that's actually a feature description.** It should be the user's perception, not the UI.
+- **More than 8 scenarios.** Two of them are duplicates. Find which.
+
 ## Hand-off
-"Mantis → Mantis": run `wize-ux-design` next.
+
+> Scenarios are in `.wize/planning/ux/ux-scenarios.md`. They cover E01–E04. Next: page specs in `.wize/planning/ux/ux-design/` (one per screen). Tony, when you read these, the moment-of-truth lines tell you which interactions are load-bearing.

package/src/method-skills/2-plan-workflows/wize-validate-prd/workflow.md

@@ -2,26 +2,120 @@
 code: wize-validate-prd
 name: Validate PRD
 phase: 2-plan
-owner: wize-agent-pm   # Maria Hill (with Pepper + Mantis + Fury input)
-status: stub
+owner: wize-agent-pm   # Maria Hill (with Pepper, Mantis, Fury input)
+status: ready
 ---
 
 # Validate PRD
 
-**Goal.** Make sure the PRD is ready to leave Plan and enter Solutioning. Catch ambiguity before architecture is wasted on it.
+**Goal.** Decide whether the PRD is ready to leave Plan and enter Solutioning. Catch ambiguity before architecture is wasted on it. Cheap step; saves multiples of itself downstream.
+
+Maria Hill chairs. Pepper, Mantis, Fury contribute. Output is either `validated: true` written to `prd.md` or a punch list routed back to authors.
+
+## When to run
+
+After `wize-create-prd` produces `status: ready-for-validation`. Run once per major PRD change.
 
 ## Inputs
+
 - `.wize/planning/prd.md`
+- `.wize/planning/brief.md`
+- `.wize/planning/ux/trigger-map.md`
+- `.wize/planning/research.md` (when present)
+- `.wize/planning/tech-vision.md` (when Fury already wrote one)
 
 ## Outputs
-- Inline edits + a validation log appended to `prd.md`.
 
-## Checklist
-- [ ] Every scope item has measurable ACs.
-- [ ] No "TBD" in goals or constraints.
-- [ ] Mantis confirms UX is addressable.
-- [ ] Fury approves stack-family direction (or has explicit reason not to yet).
-- [ ] No open questions with `blocker` priority remain.
+- In-place edits to `prd.md` (validators add a "Validation log" section).
+- If validated: `prd.md` frontmatter flips to `status: validated`.
+- If not: a punch list, each item routed back to the owning agent.
+
+## Checklist (Maria Hill runs this)
+
+### Completeness
+- [ ] Vision sentence present and matches the brief.
+- [ ] 3–5 goals; each measurable; each tied to a trigger-map row.
+- [ ] Scope `In` and `Out` both populated; `Out` items have reasons.
+- [ ] Backbone stories cover every In-scope item.
+- [ ] Every In-scope item has 3–7 ACs.
+- [ ] Constraints + Assumptions + Dependencies all named.
+- [ ] NFR pointer present.
+- [ ] Open questions: each has an owner + deadline.
+
+### Quality
+- [ ] Every AC is observable (testable by Hawkeye without ambiguity).
+- [ ] No AC contains the word "easy", "intuitive", "responsive" without a numeric criterion.
+- [ ] INVEST: every backbone story passes (independent, negotiable, valuable, estimable, small, testable).
+- [ ] No goal repeats a brief constraint as if it were a goal.
+
+### Cross-checks
+- [ ] **Pepper:** every goal anchors on a row of the trigger map.
+- [ ] **Mantis:** every screen implied by the ACs is addressable in UX (no AC requires a UI the team hasn't agreed exists).
+- [ ] **Fury:** the PRD's NFR pointer doesn't contradict the tech-vision.
+- [ ] **Hawkeye preview:** at least the gate strategy is mentioned (advisory vs enforcing) for visibility.
+
+### Risk
+- [ ] No open question is marked `blocker` AND has a deadline past the PRD validation date.
+- [ ] Any assumption that, if wrong, kills > 30% of the scope has a verification plan.
+
+## Decision
+
+After the checklist:
+
+- **Validated** → flip frontmatter to `status: validated`. Append a Validation log block to `prd.md` with date + each signatory.
+- **Concerns** → write specific fix-asks per agent. Each fix-ask is concrete (line ref + what to change).
+- **Reject** → rare. Use when the brief itself is wrong; loop back to Pepper.
+
+## Validation log template (appended to `prd.md`)
+
+```markdown
+## Validation log — YYYY-MM-DD
+
+**Status:** validated
+
+**Signatories**
+- Maria Hill (PM)  — concerns: none
+- Pepper Potts (Analyst) — concerns: trigger-map row 3 needs a stronger signal name, will update.
+- Mantis (UX) — concerns: none, UX work starts next.
+- Fury (Solution Strategy) — concerns: none. NFR pointer confirmed.
+
+**Notes**
+- Open question "Brazil-only beta?" was answered by sales lead — added to *Out of scope: global launch* with rationale.
+```
+
+## Punch-list template (when not validated)
+
+```markdown
+## Validation punch list — YYYY-MM-DD
+
+**Status:** changes required
+
+**By Maria Hill — author rewrites:**
+- `AC-02-3`: "loads fast" is not observable. Rewrite with numeric target tied to Fury's NFRs.
+- Backbone story E04 fails INVEST-S (too large). Split into 2 stories.
+
+**By Pepper:**
+- Goal 2 is not anchored on a trigger-map row. Add row reference or remove.
+
+**By Mantis:**
+- AC-01-4 implies a "preview" screen that isn't in any UX list. Either spec the screen or cut the AC.
+
+**By Fury:**
+- NFR pointer cites old version of nfr-principles.md. Update.
+```
+
+## Anti-patterns
+
+- "Looks good to me" with no checklist run. The validation only counts if checked.
+- Validating to keep the schedule, knowing concerns are open. Document the concern.
+- Validating with no Hawkeye preview at all. Even a one-line gate strategy reference matters.
+
+## Hand-off
+
+If validated:
+
+> PRD validated. Mantis, you're up: `wize-ux-scenarios`. Fury, write or refresh `tech-vision.md` so Tony can read both.
+
+If not:
 
-## Outcome
-Either `validated: true` (timestamp + signatories) or list of fix-asks routed back to the right agent.
+> PRD not yet validated. Punch list lives at the bottom of `prd.md`. {{Author}} fixes by {{date}}; we re-run validation.