Menu
Verify hooks ran, no secrets, protected paths untouched, and commit message valid before committing. Owned by the reviewer.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Keep commits atomic — split a mixed change set into scoped, reviewable commits.
The one-time procedure to take an exported project to live — understand it, confirm the name/goal/stack with the user, run the deterministic `aspis bootstrap`, enrich the judgment files (AGENTS.md, ARCHITECTURE, context), verify, and let the package self-clean. Followed by the bootstrap agent.
Keep per-subsystem architectural intent current through the planning loop — read before designing, record an impact report on change, confirm with the user, apply a dated update, and verify the build against approved intent.
Audit a plan's task dependency graph for structural integrity — circular dependencies, missing prerequisites, orphan tasks, and dependency classification (hard/soft/warning). Produces a pass/warn/fail audit report per dependency so planners catch graph errors before build starts.
Every editing agent should start on a clean working tree so parallel work never collides.
Prove the catalog regenerates the live runtime byte-for-byte; refuse export on any mismatch.
| name | commit-readiness |
| description | Verify hooks ran, no secrets, protected paths untouched, and commit message valid before committing. Owned by the reviewer. |
Before any commit lands, confirm the git hooks fired correctly, no secrets leaked into the diff, no protected path was touched without R-008 approval, and the commit message follows the project convention. This is the last deterministic gate before the committer writes — the reviewer owns it, the committer consults it.
pre-commit and commit-msg hooks executed without
block. A skipped hook (.git/hooks/pre-commit missing or non-executable) is
a HIGH finding — refuse the commit.git diff --cached) for secret
patterns (keys, tokens, passwords). Any hit is CRITICAL — refuse the commit..aspis/state/approval-ledger.yaml). A protected path
without an active governance approve entry is CRITICAL — refuse the commit.type(scope): description ≤72 chars). Non-conforming messages are MEDIUM
— block unless the committer provides an explicit reason.COMMIT-READY only when every gate passes. Any
finding that blocks returns COMMIT-BLOCKED with file:line evidence per
the finding-format skill.COMMIT-READY or COMMIT-BLOCKED.