flowguard-model-miss-review

name	flowguard-model-miss-review
description	Use when post-FlowGuard runtime, test, replay, log, manual, production, or UI evidence exposes a missed behavior class, or a repair needs generalized closure.

FlowGuard Model Miss Review

Purpose

Backpropagate a real post-green failure into the owning commitment, model boundary, owner code contract, canonical same-class cases, tests, and final claim.

Entrypoint Scope

This standalone FlowGuard satellite skill owns model_miss_review (public_owner) and grounded miss classification/closure, not feature invention.

Local Material Routing

Read references/model_miss_protocol.md for miss types, root-cause backpropagation, field/UI handling, same-class evidence, reattachment, and closure.

Entrypoint Acceptance Map

Accept concrete failure evidence and prior claim state; classify and generalize the miss; block point-fix-only or stale closure; hand commitments, canonical cases, alignment, field, mesh, process, and risk work to typed owners.

Use When

• Use after a FlowGuard-green runtime/test/replay/log/manual/UI failure or for a repair needing boundary_missing, root-cause backpropagation, and bug-class evidence.

Do Not Use When

• Do not patch only the observed instance, invent a new feature commitment, or use without concrete failure evidence; return ordinary unclear modeling to model-first-function-flow.

Required Workflow

1. Run existing-model preflight, identify whose promise failed (behavior_plane, commitment, primary owner, error signature), and classify the miss.
2. Search the affected plane first: reuse the existing commitment/owner when present; create a coverage-gap row only when that plane has no matching promise; preserve other planes only as typed related context.
3. Backpropagate root cause; add one contract-exhaustion same-class case/family seed and bind fields/old paths where relevant.
4. Add observed and same-class owner-code evidence, rerun alignment/mesh/freshness/risk gates, and close or scope the class.

Hard Gates

• Model-purpose gate: before build/change, freeze this instance's task-specific failure(s) and boundary; then bind candidate plus native good/bad-per-failure/oracle/current evidence. Reusable types are not fixed-purpose; no mode/fallback; SkillGuard only supervises FlowGuard-declared checks.
• Verify the real FlowGuard check engine and AGENTS.md managed record; never create a fake mini-framework.
• A later green command or point regression alone cannot close the class; target-aware replay and owner code binding remain required when applicable.
• Unknown old-path/field disposition, stale parent reattachment, open same-family scan, or missing template harvest closure blocks broad repair confidence.
• Same symptom text in product, AI-operation, and development-process planes is not one recurrence family unless an explicit family relation preserves separate plane-local owners.

Output Requirements

• Return evidence, failures, blockers, skipped_checks, residual_risk, claim_boundary, typed_next_actions, a miss-repair diagram, and generalized-case status.

SkillGuard Maintenance

• Edit contract source, regenerate; SkillGuard cannot turn patches/logs into evidence.