| name | flow |
| description | End-to-end zcp dev flow for any non-trivial change — analyze, live-verified plan, sliced AFK implementation, full verification, owner retest pack, spec reconciliation. Routes small safe fixes to a LITE path. |
/flow — router
Read .claude/skills/flow/dna.md once when a flow starts. Never load all
phases/*.md at once — read only the file for the phase you are entering.
Step 1: route LITE or FULL
LITE only when ALL hold: bounded single seam · existing test oracle covers
the area · no public wire-contract / security / credential / lifecycle-state /
concurrency / destructive-action implications · no live-platform mutation ·
reversible in one session. → invoke the problem-solving skill, one vertical
slice, RED(reproduce)→GREEN→REFACTOR, existing hooks gate. No plan file.
FULL on any hard trigger: load-bearing platform-API assumption · new MCP
tool · public wire contract or schema change · security/credential surface ·
destructive/irreversible op or migration · cross-process lifecycle/state ·
concurrency primitives · multi-session scope · owner asks. Layer count alone
is not a trigger (an ops+tools one-line fix stays LITE; a single-layer
credential change is FULL). Unknown-cause bug: root-cause with a deterministic
regression test first (still LITE); re-route to FULL once the cause names a
hard-trigger risk class.
Announce the verdict and the trigger out loud before proceeding. Skipping
FRAME/PROVE/SHAPE is justified by name, never silent.
Step 2 (FULL only): six phases, two owner gates
| # | Phase | Runs it | Exit gate |
|---|
| 1 | FRAME | Fable + owner dialogue | Outcome, AC1..n w/ planned evidence, non-goals, risk class, tagged assumptions |
| 2 | PROVE | platform-verifier + zerops MCP reads | every load-bearing assumption VERIFIED or CONFIRMED; REFUTED → back to FRAME |
| 3 | SHAPE | Fable; codex-brief gate | slice register + briefs + verify plan; Codex clean |
| — | OWNER GATE 1 | Karel | approves the register; spec-shaped contracts promoted to docs/spec-*.md now — BUILD briefs cite the spec §, never the plan |
| 4 | BUILD | Sonnet subagents, AFK, worktree waves | per slice: RED replay passed, layer tests, lint; landed on integration branch |
| 5 | ASSEMBLE | fresh verifier session | whole-feature battery green; Verify Trace complete; retest pack written |
| — | OWNER GATE 2 | Karel | runs the retest pack, confirms |
| 6 | LAND | Fable; /code-review on the diff | findings dispositioned; spec reconciled with shipped behavior; plan archived |
FRAME+PROVE+SHAPE run in one owner-present block. BUILD+ASSEMBLE (incl.
retest-pack generation) is the AFK run. The Codex and code-review gates are
automated, not owner stops.
Load discipline
dna.md — once, at flow start.phases/<n>-<name>.md — only the file for the phase you are entering (e.g.
phases/3-shape.md on entering SHAPE). Never all six at once.templates/*.md — only when producing that artifact.
Invocation forms
/flow <request> — routes LITE/FULL, starts FRAME (FULL) or the
problem-solving skill (LITE)./flow resume plans/<file> — read ## Run State, re-enter at its phase:./flow build|assemble|land plans/<file> — revalidates that phase's entry
conditions; never a gate bypass.
Plan file
One file at plans/<slug>-<YYYY-MM-DD>.md, built from templates/plan.md.
