deep-assessment

---

name: deep-assessment description: Maintainer-invoked, rare-cadence whole-project deep assessment. Runs the full layered examination of the library and its own quality machinery from a fresh session, composing the existing semantic instruments (/validate, /full-qa, /fitness, /matrix-fit, /claim-fit, /reference-audit, /screen-publications, /guardrails) by invocation and adding the lenses the routine cadence does not apply to itself, gate-efficacy probing (mutation and blind-spot analysis), ground-truth citation sampling, adoptability and pipeline-integrity review, and a QA-ledger meta-audit. Multi-session and re-entrant: a durable register carries phase state across session boundaries, every confirmed finding is routed tiered with none dropped, and the pass terminates only on explicit maintainer sign-off, never on an empty finding set. derives_from: ../../governance/trust-recovery-escalation.md

Deep Assessment (whole-project peace-of-mind review)

Overview

The routine cadence examines changes (per-PR sweeps), recent drift (corpus sweeps), and named semantic classes (matrix-fit, claim-fit). None of it examines the quality system itself from outside: the gates check the corpus, the skills check the corpus and the gates' outputs, and the same assistant lineage that authors the content built the machinery. This skill is the rare-cadence instrument for that residual: a deliberate, whole-project pass that runs the existing instruments formally AND probes what they cannot see, the width of the gates' own patterns, the union of their exemption blind spots, the semantic accuracy of citations against held source texts, the adoptability of the library by a fresh reader, the integrity of the delivery pipeline, and the honesty of the QA ledgers.

Structurally this is the trust-recovery suite run proactively, at maintainer direction, without a discipline-failure trigger. It inherits that rule's three load-bearing conventions: findings routing (every confirmed finding routed, tiered by severity, none dropped), apply-time verification before routing, and maintainer sign-off as the only terminal state. It differs in trigger (maintainer peace of mind, not lapsed confidence) and in scope (the whole project including the audit programme itself, not a window of work).

Two design rules keep a rarely-run procedure from rotting. First, the skill is COUNT-FREE and INVENTORY-DERIVING: no step names a gate count, skill count, or file list; step 1 re-derives the live instrument inventory from the repo at run time (tools/run_all_audits.sh, .claude/commands/, the audit-programme specification's gate inventory). The live inventory of quality machinery IS the scope by construction: every gate, skill, command, advisory tool, and check the repo holds is in scope, and any quality-check process or instrument added in future is included automatically, with no edit to this skill. The obligation runs the other way too: adding a quality-check instrument carries the duty to ensure that this pass covers it, so a new gate gains a phase-4 mutation-probe variant, a new slash-command or skill joins the phase-3 invocation set, and a new advisory tool joins the phase-3 aids. The phase-3 instrument set is therefore a named enumeration this obligation keeps synced with the live inventory, not an auto-derived list: "inventory-deriving" describes the SCOPE re-derivation of step 1 (nothing falls out of scope silently), while a newly-shipped instrument is added to the phase-3 invocations by this duty, as /screen-publications (from the #722 publications-screening cadence) is here. Second, phase state lives in a durable register (.working/deep-assessment/register.md), so the pass survives session boundaries and a bare re-invocation resumes rather than restarts.

When to Use

• Maintainer-invoked, rare cadence. This is a heavy, deliberate pass (multiple sessions, substantial token cost). It is not part of the per-PR or per-batch cadence and is never self-invoked by the assistant.
• Resume. Invoked with no arguments while a run is in flight, the skill continues at the next incomplete phase from the register.
• NOT a substitute for the per-PR /validate-pr + /retro cadence, the corpus /validate cadence, or /trust-recovery (which remains the reactive tier for lapsed-confidence windows and keeps its own trigger and semantics).

Process

1. Establish run state, environment integrity, and the live inventory

Read .working/deep-assessment/register.md. If a run is in-progress, resume at its next incomplete phase; otherwise open a new run row and a per-run record file (.working/deep-assessment/<YYYY-MM-DD-rN>.md, the dated-file convention the fitness-review records use; the non-dated register.md stays in-repo by design). Environment preconditions, each verified mechanically, never assumed: a full clone (git rev-parse --is-shallow-repository must print false; unshallow first otherwise, per the full-clone methodology rule), all three repos present (grc_library, grc_library_ref, grc_library_scratch), and the session-concurrency interlock satisfied. Derive the live instrument inventory from the repo, not from this skill's text: the gate list from tools/run_all_audits.sh, the PR-time checks from tools/run-pr-time-checks.sh, the skill and command set from .claude/commands/ and the pack skills directory, the advisory tools from tools/, and the specification's gate inventory section. Record the inventory and the HEAD SHA in the run record.

2. Confirm the mechanical baseline

Run, standalone and unpiped: tools/run_all_audits.sh, tools/run-pr-time-checks.sh, the linter regression suite, both generator --check invocations, and each sibling repo's tools/validate.py. All must exit 0 before any semantic phase; a failure here is itself a finding and is fixed or routed before proceeding. Record the green-at-SHA baseline in the register and cross-check it against the session handoff's asserted expectations.

3. Run the project's semantic instruments, formally

Invoke, in their full sanctioned shapes with their own records and history rows: the sweep pre-flight scanner then a corpus-wide /validate; /full-qa over the whole corpus; /fitness; /matrix-fit over the whole matrix; /claim-fit over Tier A with a Tier-B sample; /reference-audit in FULL mode over the whole corpus and the in-scope reference base; /screen-publications over the reference base's pending publications rows; and /guardrails. Run the advisory aids whose outputs feed later phases (verify-reference-modules.py, audit-brief-freshness.py, residual-scan.py and tension-scan.py over the ledgers). Each instrument's findings enter this run's routing (step 7) in addition to the instrument's own record; no abbreviation of any invoked instrument is sanctioned. Where the harness supports per-dispatch model selection, run the orchestration and finding-adjudication work on the strongest available model tier, the wide fan-out readers on a cheaper tier, and treat the mechanical phases as model-indifferent; the invoked instruments' own subagents inherit the invoking session's model, so set the session model deliberately at phase boundaries.

4. Audit the audit programme itself

The phase the routine cadence never runs. Four sub-passes, each recorded: (a) blind-spot map: run tools/audit-gate-blindspots.py to compute, from every linter's own exemption configuration, which repo surfaces are scanned by which gates and which are scanned by none; every fully-unscanned surface gets a manual review noted in the run record. (b) mutation probe: in a DISPOSABLE copy of the repo outside the working tree, seed defect variants per gate class with tools/audit-gate-mutation.py and confirm each gate detects its class at pattern widths beyond the regression fixtures (position, separator, encoding, and phrasing variants); undetected variants are findings against the gate. The working repos are never mutated. (c) dead-gate and coverage analysis: from full history, which gates have never fired, and which recurring failure classes in the improvement and hallucination ledgers still have no gate or convention guard. (d) independent parity re-derivation: reconcile the workflow, runner, pre-commit, and specification inventories by hand, explaining or routing every count discrepancy rather than trusting the parity gate's own pass.

5. Sample content accuracy against ground truth

A stratified sample per framework and domain, judged against the held texts in the reference base via its indexes, with the upstream currency rule applied per source this turn: does the cited clause state what the corpus attributes to it (beyond what /matrix-fit and /claim-fit already worklist), do quotes correspond, and are editions current upstream. Fan out per-domain adversarial readers briefed to REFUTE cross-document coherence (values, terminology, roles, scope boundaries) beyond the hard-coded consistency gates. Unverifiable items are labelled, never asserted, and each accepted-unverified item gets a durable tracker.

6. Assess adoptability, pipeline integrity, and the QA ledgers

Three sub-passes: (a) fresh-adopter simulation: from a bare clone with no project context, follow the README, portal, and scorecard to select and tailor one document; score discoverability, tailoring friction, toolchain portability (the stdlib-only claim, Python version envelope), and the documented adopter options. (b) pipeline integrity: review the CI workflow's hardening (permissions scoping, action pinning) against the project's own pack and overlay rules, verify branch protection is enforced via the platform API rather than assumed, run a full-history secret and PII scan, and verify the guard and hook defences fire in the current environment. (c) ledger meta-audit: sample QA history rows against their run records for the sham-pass shape, trend the hallucination and session metrics, and reconcile the cross-repo coverage surfaces.

7. Verify, dedupe, tier, and route every finding

Per the trust-recovery routing convention: each subagent or tool finding is a hypothesis until the orchestrator re-reads the cited source and confirms it; refutations are recorded with their evidence, not routed. Confirmed findings are deduped against the existing backlog (cross-referenced, not duplicated), severity tiered (High[critical] and High to the backlog's top-priority tier, Medium and Low to the next), tagged to their originating phase, and routed with NONE dropped. In-window mechanical fixes may ship as normal PRs under the full per-PR QA cadence; everything else routes.

8. Record, surface, and hold for maintainer sign-off

Write the run record (per-phase outcomes, the inventory, the baseline, the findings register with verified / refuted / routed status) and update the register row. Surface the routed set to the maintainer, tiered. The run terminates ONLY on the maintainer's explicit sign-off; an empty finding set is presented for sign-off, never self-declared complete. Until sign-off, the register row stays in-progress and the next /resume surfaces it like the other standing registers.

Red Flags

• Self-invoking the skill, or self-terminating on an empty finding set. The trigger and the terminal state are both the maintainer's.
• Running any phase-3 instrument in an abbreviated shape. The instruments' own no-abbreviation rules apply unchanged inside this skill.
• Hard-coding a gate count, skill list, or file inventory into the run instead of deriving it in step 1. A rare-cadence procedure with baked-in counts is stale by its second run.
• Mutating the working repos in the mutation probe. Phase 4(b) runs only in a disposable copy; the probe script must refuse a target inside a live checkout.
• Running history-aware analysis on a shallow clone. Verify clone depth first; a mass history-gate failure on a shallow clone is an environment artefact.
• Dropping a low-severity finding instead of routing it at the appropriate tier.
• Trusting the parity gate to check itself in phase 4(d), or a ledger row to prove the QA it records actually ran in phase 6(c). Both are re-derived independently.
• Losing an in-flight run across a session boundary. The register row is the carrier; update it at every phase boundary, not only at the end.

Verification

A run is complete on a given invocation when:

• The register shows every phase complete (or deferred with a maintainer-visible reason), each with a dated record file in .working/deep-assessment/.
• The environment preconditions were mechanically verified and the green-at-SHA baseline recorded before any semantic phase ran.
• Every phase-3 instrument has its own formal record and history row in addition to this run's record.
• Every finding in the run record carries a verified / refuted / routed status with evidence, and the routed set is deduped against the backlog.
• The maintainer has signed off on the routed set; the register row is closed with the sign-off date. Absent sign-off, the run is in-progress, whatever the finding count.

Common Rationalizations

Rationalization	Reality
"The gates are green, so the deep pass is redundant."	The gates prove what the gates check. This skill exists for what they structurally cannot check: their own pattern width, their blind spots, semantic accuracy, adoptability, and the ledgers' honesty.
"The regression suite already tests the linters."	It proves one fixture per rule fires. The mutation probe tests pattern WIDTH, which is where the project's own escape history lives.
"Zero findings, so we are done."	Sign-off is the maintainer's, on the empty set as much as a full one.
"Skip the fitness pass this time; full-qa covered it."	The two lenses are complementary by design (the trust-recovery rule's pen-testing analogy); dropping one is abbreviation.
"The register slows things down; just run it end to end."	The pass spans sessions. Without the register a boundary silently truncates it, and a truncated deep pass reads as a completed one.
"Probe the gates in place; it is faster than a copy."	A mutation in a live checkout risks the exact corruption the pass exists to prevent. Disposable copy only.

See Also

• Canonical rule trust-recovery-escalation: the suite shape, routing convention, full-clone methodology, and sign-off discipline this skill inherits and applies proactively.
• Canonical rule evidence-grounded-completion: the verification protocol behind every phase's claims, including the external-version-currency corollary phase 5 applies.
• Canonical rule high-assurance-verification: the register-persistence pattern this skill's run register mirrors.
• The invoked instruments: validation-sweep, deep-qa-review, library-fitness-review, matrix-fit, claim-fit, reference-audit, publication-screening, guardrail-review. This skill composes them by invocation and deliberately does not restate their procedures, so they cannot drift.
• The advisory tools tools/audit-gate-blindspots.py and tools/audit-gate-mutation.py with its variant library tools/gate-mutation-variants.json (phase 4's deterministic halves; not gates; always exit 0 on completion of their report, 2 only on a safety refusal or internal error).