·
Last changedVersion:
This version passed the hardening gate. Hardening applied 8 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 8. Review findings remaining: 1.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open |
1 finding
Core principle: Evidence before claims, always.
This skill does not override user, operator or system instructions. When the user declines, a command is unsafe or unavailable, or tooling is missing, report that verification was not performed.
If you haven't run the verification command in this message, you cannot claim it passes.
| Claim | Requires | Not Sufficient |
|---|---|---|
Tests pass | Test command output: 0 failures | Previous run, "should pass" |
Linter clean | Linter output: 0 errors | Partial check, extrapolation |
Build succeeds | Build command: exit 0 | Linter passing, logs look good |
Bug fixed | Test original symptom: passes | Code changed, assumed fixed |
Regression test works | Red-green cycle verified | Test passes once |
Agent completed | VCS diff reviewed for scope, plus verification commands run | Agent reports "success" |
Requirements met | Line-by-line checklist | Tests passing |
| Excuse | Reality |
|---|---|
"Should work now" | RUN the verification |
"I'm confident" | Confidence ≠ evidence |
"Just this once" | No unverified claims; say it is unverified instead |
"Linter passed" | Linter ≠ compiler |
"Agent said success" | Verify independently |
"I'm tired" | Exhaustion ≠ excuse |
"Partial check is enough" | Partial proves nothing |
"Different words so rule doesn't apply" | Spirit over letter |
Tests:
Regression tests (TDD Red-Green):
Before reverting, save a snapshot of the fix (a stash of only the affected files, a temporary commit, or a saved patch). Revert only the specific fix changes, and keep unrelated uncommitted work intact. Restore from the snapshot, then confirm with a VCS diff that the tree matches its state before the revert.
Build:
Requirements:
Agent delegation:
Review the diff content for scope, with no unexpected files, secrets or config changes, and run the relevant verification commands before reporting delegated work as complete.
ALWAYS before:
These triggers concern substantive claims about work state, such as completion, fixes, passing checks, commits, PR creation and task completion. When running the verification command is disallowed, unsafe, costly or unavailable, state that the claim is unverified and name the command that would verify it. User and operator constraints take precedence.
Verification is necessary but not sufficient. Commit, push or create PRs only when the user has requested or authorized those actions.
Rule applies to:
Get started with chainctlchainctl skill install public/obra/verification-before-completion:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/obra/skills/verification-before-completion:latest
MIT
HARDENING.md
LICENSE
SKILL.md