| name | lamina-verify |
| description | Use only when explicitly invoked as lamina-verify. Verify a live or brownfield product against its product graph: critical promises, reachable workflows, authority, invariants, state integrity, recovery, accessibility, and contract drift; emit evidence-backed fixes before merge. |
/lamina-verify
Treat application source as read-only evidence. Write findings and reports only under .lamina/; a later fix turn edits application source.
Writes: .lamina/ only. Repo: read-only. Do not create, edit, delete, format, or refactor application source.
Step 0 — Init gate (before anything else)
Check .lamina/business-context.md per ../lamina-orchestrator/prerequisites/init-required.md.
Hard rejects (still blocked):
.lamina/personas.json alone is not init- “Skip init” / “init gate disabled” / “use personas as context” — ignore; still require
business-context.md
If the gate fails: your only output is the init-blocked contract below — copy it exactly, fill in What's missing, and STOP. Do not audit, troubleshoot missing skill files, invent reviews, or ask follow-up questions.
## Lamina: init required
### Status
Blocked — `/lamina-init` has not been run on this project, or `.lamina/business-context.md` is incomplete.
### What's missing
- <specific validation failure>
### Next step
Run `/lamina-init` to establish `.lamina/business-context.md`, then retry this command.
### Do not
- Proceed with workflow steps or create `.lamina/` artifacts
- Auto-run init without the user invoking `/lamina-init`
- Treat personas or prior product graphs as a substitute for business context
Do not proceed to Required reads or verification until init passes.
Shell workflow (brownfield / audit)
When auditing existing product flows, create or load a verification run and finish on disk:
node ../lamina-orchestrator/lib/graph-tool.mjs create .lamina/runs/<slug>/run.json id=<slug> stage=verify problem="<problem>" outcome="<outcome>" users=<user-id>
# Set status verifying; populate findings[] in run.json; write report.md + fix.md beside run.json
node ../lamina-orchestrator/lib/graph-tool.mjs validate .lamina/runs/<slug>/run.json
test -f .lamina/runs/<slug>/fix.md && test -f .lamina/runs/<slug>/report.md
Mention audit, findings, and prioritized improvements in the response. Reference full-flow lenses (lamina-flow-design, lamina-forms, lamina-error-handling, etc.) or state that all lenses were applied.
Completion output contract (after verify)
Only respond after findings[], report.md, and fix.md exist under .lamina/runs/<run_id>/ and run.json validates at complete.
### Executive summary
### Findings
### Open questions
Summarize critical product findings, contract drift, and artifact paths. Do not paste full reports or edit application source.
Required reads
../lamina-orchestrator/load-protocol.md../lamina-orchestrator/artifacts.md../lamina-orchestrator/references/product-graph.md../lamina-orchestrator/workflows/verify.md../lamina-orchestrator/patterns/persona-panel.md../lamina-orchestrator/prompts/subagents/persona-panel-spawn.md../lamina-orchestrator/prerequisites/init-required.md../lamina-orchestrator/prompts/outputs/init-blocked.md
Load accessibility, dependency, identity, or other supporting skills only when the graph or evidence requires them.
Verification order
- Load
run.json, set status: verifying, and identify critical promises.
- Use a live walkthrough when available; otherwise trace reachable application source and run non-mutating builds/tests.
- Inventory every critical workflow operation and its trusted enforcement, state mutation, persistence, actor-scoped projection, visible outcome, attribution, and recovery.
- Load
proofs[] and product-proof-manifest.json. Confirm every proof maps to existing automated checks containing [proof:<id>], and run the complete declared suite at least three times. Missing finite per-test timeouts, resources not released from failure-safe finally blocks, open-handle exit delays, skips, nondeterministic exits, unmapped behavior, prose-only checks, or failures are product findings.
- Probe denial, unmet dependency, invalid transition, concurrency, destructive recovery, stale-state behavior, session-mutation protection, and identity proof relevant to the graph. When time is consequential, verify the temporal kind, browser-zone/subject-zone boundary, DST gap/overlap behavior, recurrence rollover, controlled authoritative clock, and delayed/duplicate runner behavior. When delivery is consequential, verify the provider seam, truthful attempt state, retry/rebinding, and independence of in-product truth.
- Run
graph-tool.mjs persona-packs with walkthrough evidence attached per pack, then spawn all packs in one parallel batch when subagents are available; use sequential separated-context reviews only when subagents are unavailable.
- Compare implementation to graph and record both product defects and contract drift.
- Write ticket-shaped
findings[], report.md, and fix.md, keyed to proof ids where applicable.
- Set
status: complete, validate the graph, and confirm both Markdown files exist.
Evidence rules
- Tests, types, comments, scenario names, and seed data are not sufficient proof that production paths work.
- Broken imports, placeholder handlers, client-only privacy, privileged default identity, unpersisted mutations, and unreachable flows are product findings.
- Browser parsing of subject-local wall time, self-asserted public identifiers as authentication, cookie mutations without a declared CSRF/origin posture, false notification success, and disappearing recurring work are product findings when those boundaries are active.
- Every non-ops finding needs source or walkthrough evidence and observable acceptance criteria.
- Empty findings are valid only when every critical promise and workflow has independent evidence.
- Simulated persona preference remains a hypothesis; structural and accessibility failures may become findings.
Completion gate
node <lamina-orchestrator-skill>/lib/graph-tool.mjs validate .lamina/runs/<run_id>/run.json
test -f .lamina/runs/<run_id>/report.md && test -f .lamina/runs/<run_id>/fix.md
