analysis-pipeline
Reverse engineering - multi-source product intelligence analysis with provenance tracking. Master methodology for all analysis agents.
Detect existing workspace, diff current sources against high water mark metadata, classify specs as unchanged/stale/orphaned/new, re-analyze only what changed. Activates automatically when /analyze finds an existing workspace.
$ npx -y skills add prime-radiant-inc/greenfield --skill incremental-analysis --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/incremental-analysisContext preview
The summary Claude sees to decide when to auto-load this skill.
Detect existing workspace, diff current sources against high water mark metadata, classify specs as unchanged/stale/orphaned/new, re-analyze only what changed. Activates automatically when /analyze finds an existing workspace.
name: incremental-analysis description: Detect existing workspace, diff current sources against high water mark metadata, classify specs as unchanged/stale/orphaned/new, re-analyze only what changed. Activates automatically when /analyze finds an existing workspace.
When a workspace already exists for a target, avoid re-analyzing unchanged sources. Diff the current state against what was previously analyzed and re-analyze only what's stale.
This skill activates automatically when `/analyze` is invoked and a workspace directory already exists at the target path. No `--follow` flag needed. If the workspace has a `.git` directory, this is an incremental run. Otherwise, it's a fresh analysis.
Note: `--follow` is for continuing an interrupted analysis within a single run. Incremental analysis is for subsequent runs against an evolved codebase.
Each raw specs tracks the sources it was derived from in YAML frontmatter. This metadata is the basis for incremental diffing.
---
spec_id: SPEC-SESSION-001
derived_from:
- path: workspace/raw/source/analysis/session-module.md
source_ref: a1b2c3d # git SHA of original source file, if available
file_hash: sha256:deadbeef1234 # sha256 of source artifact at analysis time
- path: workspace/public/docs/session-api.md
fetched_at: 2026-04-13T10:00:00Z
url: https://docs.example.com/sessions
- path: workspace/raw/test-evidence/e2e-session-flow.md
file_hash: sha256:cafebabe5678
analyzed_at: 2026-04-13T14:30:00Z
greenfield_version: "2.0"
---Each entry in `derived_from` uses the fields appropriate to its source type:
| Source Type | Required Fields | Optional Fields | |-------------|----------------|-----------------| | Source code artifact | `path`, `file_hash` | `source_ref` (git SHA) | | Web-fetched doc | `path`, `url`, `fetched_at` | `file_hash` | | Runtime observation | `path`, `file_hash` | timestamp in `fetched_at` | | Git history | `path`, `source_ref` | `file_hash` | | Test evidence | `path`, `file_hash` | -- |
When writing or updating a raw spec, always include `derived_from` metadata:
When `/analyze` is invoked, before workspace initialization:
WORKSPACE="${WORKSPACE_ARG:-./analysis-workspace}"
if [ -d "$WORKSPACE/.git" ]; then
echo "Existing workspace detected at $WORKSPACE"
echo "Running incremental analysis..."
# Proceed with incremental flow (this skill)
else
echo "No existing workspace. Running fresh analysis..."
# Proceed with fresh workspace initialization (standard /analyze flow)
fiTo force a fresh analysis, delete the workspace directory.
Run the discovery/inventory phase to produce a new inventory manifest. This is always fresh -- the available sources may have changed since the last run. New files may exist, old files may have been deleted, documentation may have been updated.
The output is a complete inventory of what sources are available NOW, independent of what was analyzed before.
For each existing raw specs, check its `derived_from` metadata against current state:
# For each source with a git ref: current_sha=$(git -C "$SOURCE_REPO" log -1 --format="%H" -- "$SOURCE_FILE") # Compare against source_ref in derived_from # For each source with a file hash: current_hash=$(sha256sum "$ARTIFACT_PATH" | cut -d' ' -f1) # Compare against file_hash in derived_from # For web sources: # Check if content has changed (HTTP ETag/Last-Modified, or re-fetch and diff)
Each existing spec gets exactly one classification:
| Classification | Criteria | Action | |---------------|----------|--------| | **Unchanged** | All `derived_from` sources match current state (same hash/SHA) | Carry forward as-is | | **Stale** | One or more `derived_from` sources have changed | Queue for re-analysis | | **Orphaned** | A `derived_from` source no longer exists | Queue for re-analysis (may result in spec removal) | | **New** | Discovery found sources with no corresponding spec | Queue for fresh analysis |
Write the classification results to the workspace before proceeding:
workspace/raw/incremental/
classification.md # Summary: N unchanged, N stale, N orphaned, N new
unchanged.txt # List of spec IDs carried forward
stale.txt # List of spec IDs queued for re-analysis, with changed sources
orphaned.txt # List of spec IDs whose sources no longer exist
new.txt # List of new sources needing analysisFor **stale** specs: dispatch the appropriate Layer 1-3 agents. The analysis agents write updated specs that replace the stale versions. The `derived_from` metadata is updated with current hashes/SHAs.
For **new** sources: dispatch fresh Layer 1-3 analysis. Produces new spec files with `derived_from` metadata.
For **orphaned** specs: if the source was removed (feature deleted), remove the spec. If the source was renamed or moved, the discovery agent should detect the new location and classify it as "new" instead. When uncertain, flag for manual review rather than silently deleting.
For **unchanged** specs: no action. Carry forward as-is.
Run Gates 1-2 on the **full set** (carried forward + updated + new). Cross-module interactions may have changed even if a spec's direct sources didn't. A change in one module can create contradictions with
Reverse engineer clean behavioral specs from any codebase. Greenfield reads source code, documentation, SDKs, runtime behavior, and binaries, then produces behavioral specifications, test vectors, acceptance criteria, and a full provenance trail.
Repo: prime-radiant-inc/greenfield
Reverse engineering - multi-source product intelligence analysis with provenance tracking. Master methodology for all analysis agents.
Layer 1 intelligence source discovery - auto-detect available sources, search for public information, negotiate with user, produce inventory manifest
Layer 3 deep documentation methodology. Per-module behavioral specifications, external and behavioral integration contracts, behavior documentation, end-to-end…
Layer 1 methodology for extracting behavioral intelligence from compiled binaries, bytecode archives, managed assemblies, and bundled applications. Covers…
Layer 1 skill for community intelligence gathering. Search channels, extraction methodology, consensus analysis, version-aware behavioral changes, structural…
Infrastructure skill for containerized target execution. Runtime detection, container lifecycle, security restrictions, interaction patterns.