一键导入
commit-readiness
Verify hooks ran, no secrets, protected paths untouched, and commit message valid before committing. Owned by the reviewer.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Verify hooks ran, no secrets, protected paths untouched, and commit message valid before committing. Owned by the reviewer.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Keep commits atomic — split a mixed change set into scoped, reviewable commits.
The one-time procedure to take an exported project to live — understand it, confirm the name/goal/stack with the user, run the deterministic `aspis bootstrap`, enrich the judgment files (AGENTS.md, ARCHITECTURE, context), verify, and let the package self-clean. Followed by the bootstrap agent.
Keep per-subsystem architectural intent current through the planning loop — read before designing, record an impact report on change, confirm with the user, apply a dated update, and verify the build against approved intent.
Audit a plan's task dependency graph for structural integrity — circular dependencies, missing prerequisites, orphan tasks, and dependency classification (hard/soft/warning). Produces a pass/warn/fail audit report per dependency so planners catch graph errors before build starts.
Every editing agent should start on a clean working tree so parallel work never collides.
Prove the catalog regenerates the live runtime byte-for-byte; refuse export on any mismatch.
| name | commit-readiness |
| description | Verify hooks ran, no secrets, protected paths untouched, and commit message valid before committing. Owned by the reviewer. |
Before any commit lands, confirm the git hooks fired correctly, no secrets leaked into the diff, no protected path was touched without R-008 approval, and the commit message follows the project convention. This is the last deterministic gate before the committer writes — the reviewer owns it, the committer consults it.
pre-commit and commit-msg hooks executed without
block. A skipped hook (.git/hooks/pre-commit missing or non-executable) is
a HIGH finding — refuse the commit.git diff --cached) for secret
patterns (keys, tokens, passwords). Any hit is CRITICAL — refuse the commit..aspis/state/approval-ledger.yaml). A protected path
without an active governance approve entry is CRITICAL — refuse the commit.type(scope): description ≤72 chars). Non-conforming messages are MEDIUM
— block unless the committer provides an explicit reason.COMMIT-READY only when every gate passes. Any
finding that blocks returns COMMIT-BLOCKED with file:line evidence per
the finding-format skill.COMMIT-READY or COMMIT-BLOCKED.