gate-security
Detects leaked secrets, injection patterns, and sensitive data exposure across changed files. Uses real tooling when configured, LLM judgment for analysis.…
Runs configured build and test commands in tiered order. Captures output as evidence per tier. Returns PASS, FAIL, WARN, or SKIP based on per-tier verdicts. Internal gate — invoked by verify, not directly by users.
$ npx -y skills add Obsidian-Owl/specwright --skill gate-build --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/gate-buildContext preview
The summary Claude sees to decide when to auto-load this skill.
Runs configured build and test commands in tiered order. Captures output as evidence per tier. Returns PASS, FAIL, WARN, or SKIP based on per-tier verdicts. Internal gate — invoked by verify, not directly by users.
name: gate-build description: >- Runs configured build and test commands in tiered order. Captures output as evidence per tier. Returns PASS, FAIL, WARN, or SKIP based on per-tier verdicts. Internal gate — invoked by verify, not directly by users. allowed-tools: - Read - Bash - Glob - Write
Confirm the codebase compiles and tests pass across all configured tiers. This is the most basic gate — if the code doesn't build or tests don't pass, nothing else matters.
`commands.test:integration`, `commands.test:smoke`
**Tiered Execution (LOW freedom):**
Run tiers in execution order: `commands.build` → `commands.test` → `commands.test:integration` → `commands.test:smoke`. Each tier runs only if the previous tier passes (any tier failure stops further execution).
an INFO note for each unconfigured tier — visibility rule: display the unconfigured tier name so users know what was skipped.
**Per-Tier Verdicts (LOW freedom):**
| Tier | Failure verdict | |------|----------------| | `commands.build` | FAIL | | `commands.test` | FAIL (test failure = FAIL) | | `commands.test:integration` | FAIL (integration failure = FAIL) | | `commands.test:smoke` | WARN (smoke produces WARN on failure — charter exception: quality gates default to FAIL: smoke tests validate optional end-to-end paths; degraded smoke is advisory, not blocking) |
Unconfigured tier = SKIP.
**Evidence (LOW freedom):**
Follow `protocols/evidence.md`. Evidence starts with a tier layout header summarizing configured tiers and their run order. Each tier produces its own evidence section containing: command executed (capture command run), exit code, stdout/stderr output, and duration (elapsed wall time). Per-tier sections are written regardless of tier outcome.
| Condition | Action | |-----------|--------| | Build command not configured | SKIP build check, continue to test check | | Test command not configured | SKIP test check | | test:integration command not configured | SKIP integration tier, emit INFO note | | test:smoke command not configured | SKIP smoke tier, emit INFO note | | All tier commands null | Gate status = SKIP | | Command times out (>5min) | Gate status = ERROR with timeout message | | test:integration failure | FAIL verdict (integration failures block ship) | | test:smoke failure | WARN verdict (smoke is advisory; see charter exception: quality gates default to FAIL) |
Craft quality software with AI discipline. Spec-driven development plugin for Claude Code and Opencode — quality gates, adversarial testing, and evidence capture.
Repo: Obsidian-Owl/specwright
Detects leaked secrets, injection patterns, and sensitive data exposure across changed files. Uses real tooling when configured, LLM judgment for analysis.…
Tiered semantic analysis of changed code (rg → ast-grep → OpenGrep). Detects error-path bugs structural gates miss. Findings default to WARN. Internal —…
Maps every acceptance criterion from the spec to implementation evidence and test evidence. Criteria without evidence fail. The ultimate quality gate. Internal…
Audits test quality — assertion strength, boundary coverage, mock discipline, error path testing. Delegates to the tester agent for adversarial analysis.…
Detects unused exports, orphaned files, architecture layer violations, and circular dependencies across changed files. Delegates to architect agent for…
Explicitly adopt an existing work into the current worktree after validating live ownership, stale sessions, and branch consistency.