kerberosmansour

Use this skill after /slo-architect (and /slo-tla if tla_required), when the user says "write the runbook", "plan the milestones", "turn this into tasks". Authors a full v4 runbook INTERACTIVELY, one milestone at a time, confirming each contract before moving…

Use this skill after /slo-spike has filled §7, to fill §8 Curation Decision — decide honestly. Mode is convergent. Classify confidence as exploratory, confirmatory, or engineering_ready from the evidence; require ablation and failure analysis before an…

Use this skill after /slo-curate has filled §8, to fill §9 Demo Pack + §10 Handoff Contract — make the discovery communicable and emit a method-complete RecommendationPacket. Mode is communication. Preserve confidence, ablation, failures, replication,…

Use this skill after /slo-pattern has filled §5, to fill §6 Precision Model — make the invisible measurable. Mode is measurement. Convert each promising pattern into a falsifiable claim with a measurement handle, an accept threshold AND a kill threshold,…

Use this skill after /slo-precision has filled §6, to fill §7 with a bounded DiscoveryRecord and/or ValidationRecord. Discovery is exploratory and may refine a mechanism; validation cites one complete active ProtocolFreeze, uses held-out frozen arms with no…

Use this skill to drive one milestone of a v3 runbook. Invoke with the milestone number or identifier, e.g. "/slo-execute M3" or "execute milestone 3 of the runbook". Restates milestone constraints, writes BDD tests first, implements the smallest safe change,…

Use this skill when a product repo needs graph-backed codebase understanding, fast troubleshooting, or security triage. It combines Graphify knowledge graphs with semantic-provider facts from rust-analyzer / TypeScript language service and analysis-provider…

Use this skill to wire threat-model-driven SAST scanning into a target product repo. Reads docs/slo/design/<slug>-threat-model.md for CWE references, picks tuned Semgrep rule packs for the detected stack, emits a safe GitHub Actions workflow plus a baselined…

Select and integrate published Hulumi hardened Pulumi TypeScript components for AWS, GitHub, Kubernetes, and Cloudflare. Use for an IaC task that fits these components, or when the user asks to evaluate Hulumi.

Run an AWS or GitHub cloud / platform threat model for a specific Hulumi scenario. Produces a structured markdown threat-model document at docs/threat-model-<scenario>-<date>.md in the user's working directory, citing CSA CCM v4.1, NIST SP 800-53 Rev 5, NIST…

Select and integrate SunLit Rust security crates for deny-by-default authorization, envelope encryption, security events, and request validation. Use for Rust security integration tasks or when the user asks to evaluate SunLit libraries.

Prepare optional, sanitized local feedback about a Hulumi or SunLit Rust integration. Use after a reproducible defect, documentation gap, feature limitation, workaround, or when the operator asks to share an outcome. Never submit automatically.