MCAF: Source Control
Trigger On
- bootstrapping source-control policy
- tightening branch, merge, or PR rules
- documenting commit or release hygiene
- dealing with secrets-in-git or repository structure issues
Value
- produce a concrete project delta: code, docs, config, tests, CI, or review artifact
- reduce ambiguity through explicit planning, verification, and final validation skills
- leave reusable project context so future tasks are faster and safer
Do Not Use For
- CI/CD workflow design with no source-control policy change
- one-off git commands that do not alter repo policy
Inputs
- current branching and merge flow
- release strategy and versioning expectations
- secret-handling and repository-structure constraints
Quick Start
- Read the nearest
AGENTS.md and confirm scope and constraints.
- Run this skill's
Workflow through the Ralph Loop until outcomes are acceptable.
- Return the
Required Result Format with concrete artifacts and verification evidence.
Workflow
- Agree on merge and release strategy before scaling implementation.
- Keep branch and PR rules explicit in-repo.
- Treat secrets in git history as a critical incident, not cleanup noise.
- Use concrete policy language, not hand-waving.
Deliver
- clear branch and merge strategy
- updated contribution or governance docs
- safer repository hygiene around commits, PRs, and secrets
Validate
- naming and merge rules are explicit
- release/versioning implications are documented where needed
- secret hygiene is treated as policy, not tribal knowledge
Ralph Loop
Use the Ralph Loop for every task, including docs, architecture, testing, and tooling work.
- Brainstorm first (mandatory):
- analyze current state
- define the problem, target outcome, constraints, and risks
- generate options and think through trade-offs before committing
- capture the recommended direction and open questions
- Plan second (mandatory):
- write a detailed execution plan from the chosen direction
- list final validation skills to run at the end, with order and reason
- Execute one planned step and produce a concrete delta.
- Review the result and capture findings with actionable next fixes.
- Apply fixes in small batches and rerun the relevant checks or review steps.
- Update the plan after each iteration.
- Repeat until outcomes are acceptable or only explicit exceptions remain.
- If a dependency is missing, bootstrap it or return
status: not_applicable with explicit reason and fallback path.
Required Result Format
status: complete | clean | improved | configured | not_applicable | blocked
plan: concise plan and current iteration step
actions_taken: concrete changes made
validation_skills: final skills run, or skipped with reasons
verification: commands, checks, or review evidence summary
remaining: top unresolved items or none
For setup-only requests with no execution, return status: configured and exact next commands.
Load References
- read
references/source-control.md first
- open
references/naming-branches.md only when the task is specifically about branch naming
Example Requests
- "Define branch naming and merge rules for this repo."
- "Document how releases and component versions should work."
- "Tighten our source-control policy after a secrets leak."
1---2name: dotnet-mcaf-source-control3description: Apply MCAF source-control guidance for repository structure, branch naming, merge strategy, commit hygiene, and secrets-in-git discipline. Use when bootstrapping a repo, tightening PR flow, or documenting branch and release policy.4---5
6# MCAF: Source Control
7
8## Trigger On
9
10- bootstrapping source-control policy
11- tightening branch, merge, or PR rules
12- documenting commit or release hygiene
13- dealing with secrets-in-git or repository structure issues
14
15## Value
16
17- produce a concrete project delta: code, docs, config, tests, CI, or review artifact
18- reduce ambiguity through explicit planning, verification, and final validation skills
19- leave reusable project context so future tasks are faster and safer
20
21## Do Not Use For
22
23- CI/CD workflow design with no source-control policy change
24- one-off git commands that do not alter repo policy
25
26## Inputs
27
28- current branching and merge flow
29- release strategy and versioning expectations
30- secret-handling and repository-structure constraints
31
32## Quick Start
33
341. Read the nearest `AGENTS.md` and confirm scope and constraints.
352. Run this skill's `Workflow` through the `Ralph Loop` until outcomes are acceptable.
363. Return the `Required Result Format` with concrete artifacts and verification evidence.
37
38## Workflow
39
401. Agree on merge and release strategy before scaling implementation.
412. Keep branch and PR rules explicit in-repo.
423. Treat secrets in git history as a critical incident, not cleanup noise.
434. Use concrete policy language, not hand-waving.
44
45## Deliver
46
47- clear branch and merge strategy
48- updated contribution or governance docs
49- safer repository hygiene around commits, PRs, and secrets
50
51## Validate
52
53- naming and merge rules are explicit
54- release/versioning implications are documented where needed
55- secret hygiene is treated as policy, not tribal knowledge
56
57## Ralph Loop
58
59Use the Ralph Loop for every task, including docs, architecture, testing, and tooling work.
60
611. Brainstorm first (mandatory):
62 - analyze current state
63 - define the problem, target outcome, constraints, and risks
64 - generate options and think through trade-offs before committing
65 - capture the recommended direction and open questions
662. Plan second (mandatory):
67 - write a detailed execution plan from the chosen direction
68 - list final validation skills to run at the end, with order and reason
693. Execute one planned step and produce a concrete delta.
704. Review the result and capture findings with actionable next fixes.
715. Apply fixes in small batches and rerun the relevant checks or review steps.
726. Update the plan after each iteration.
737. Repeat until outcomes are acceptable or only explicit exceptions remain.
748. If a dependency is missing, bootstrap it or return `status: not_applicable` with explicit reason and fallback path.
75
76### Required Result Format
77
78- `status`: `complete` | `clean` | `improved` | `configured` | `not_applicable` | `blocked`
79- `plan`: concise plan and current iteration step
80- `actions_taken`: concrete changes made
81- `validation_skills`: final skills run, or skipped with reasons
82- `verification`: commands, checks, or review evidence summary
83- `remaining`: top unresolved items or `none`
84
85For setup-only requests with no execution, return `status: configured` and exact next commands.
86
87## Load References
88
89- read `references/source-control.md` first
90- open `references/naming-branches.md` only when the task is specifically about branch naming
91
92## Example Requests
93
94- "Define branch naming and merge rules for this repo."
95- "Document how releases and component versions should work."
96- "Tighten our source-control policy after a secrets leak."