PM AI Improvement to Route
Choose the next AI improvement lever from evidence, not fashion. This skill is
for the decision before a team commits to a prompt edit, broader context,
retrieval, a tool or orchestration change, a model or effort change, a data
reuse path, a UX/control change, or fine-tuning/distillation.
The output is a reviewable route packet. It is not an optimizer, benchmark
runner, model or vendor recommendation, tuning pipeline, deployment, or proof
that a candidate will improve a live product.
When to use
Use this skill when:
- an AI product has a named user-job gap but the team has not agreed which
layer is responsible or which intervention to test first;
- a proposed fix could be a prompt, context, retrieval, tool, orchestration,
model, reasoning effort, provider, data, product-control, or UX change and
the trade-off is not yet visible;
- a team is tempted to fine-tune or distill because a narrow score, cost target,
or provider feature appears attractive;
- a quality improvement may trade against safety, privacy, evidence, latency,
cost, reliability, user control, or maintainability;
- a PM needs one smallest, reversible next experiment with a paired baseline,
an owner, an evaluation slice, and a stop or rollback rule;
- a provider capability, model lifecycle notice, or data-control change may
change which routes are actually available.
Use pm-ai-signal-to-intervention when the primary decision is how to respond
to a validated live signal. Use pm-ai-trace-to-regression when one concrete
failed run should become a minimized regression case. Use
pm-ai-context-to-contract, pm-ai-prompt-to-version, pm-ai-retrieval-to-grounding,
pm-ai-tool-to-contract, or pm-ai-orchestration-to-contract after that route
has been selected. Use pm-ai-model-to-route for a model/provider route
decision, pm-ai-model-change-to-migration for a lifecycle migration,
pm-ai-cost-to-guardrail for economics or latency as the primary question,
pm-ai-data-to-purpose for the data lifecycle, and
pm-ai-evaluation-plan or pm-ai-independent-eval-to-release for evaluation
design or independent evaluation respectively.
Do not use
Do not use this skill to:
- call a model or provider, run fine-tuning or distillation, inspect a billing
account, change a prompt or route, enable a flag, deploy code, or send data;
- pick a vendor from reputation, a current price, one leaderboard, or a
provider statement without task-level evidence and eligibility checks;
- replace a missing baseline, denominator, evaluator, data permission, model
identity, or user outcome with a plausible value;
- expose raw prompts, customer content, credentials, tokens, private URLs,
hidden reasoning, or a proprietary training set in the packet;
- make a composite score that hides quality, safety, privacy, cost, latency,
reliability, or user outcome differences;
- optimize a security incident, privacy breach, authorization failure,
harmful side effect, or cross-tenant leak before containment and the proper
security or incident route;
- call a fictional fixture a user study, benchmark, adoption result, safety
assessment, production result, or release proof.
Write Not provided, Unknown, Not measured, Not run, Not reproduced,
Conflict, Not available, or Not covered when the evidence is absent.
Core guardrails
- Start with one user job, one product surface, one observable gap, one
decision owner, and one outcome oracle. “Make the AI better” is not a
decision frame.
- Localize before selecting a technique. Separate input or intent, context,
retrieval, instruction, tool or orchestration, model or effort, data,
product control, UX, and operations hypotheses.
- Check hard blockers before preference: authorization, privacy, data purpose,
safety, side effects, required capability, tenant or region, version
identity, availability, and rollback.
- Treat a provider document, model card, benchmark, or internal hypothesis as
scoped evidence. It can shape a test; it cannot prove this product's result.
- Compare the baseline and one candidate on the same representative tasks.
Keep success, completeness, required evidence, safety, abstention, cost,
latency, reliability, and user control as separate observations.
- Fewer tokens, calls, retries, or dollars count as improvement only when the
user outcome and required guardrails still pass.
- Prefer the smallest reversible intervention that can disconfirm the main
hypothesis. “Smallest” describes the test and blast radius, not a universal
preference for prompt edits over a real product or data fix.
- Fine-tuning and distillation require a data-purpose ledger, permission or
consent boundary, minimization and redaction, contamination review,
training/evaluation separation, safety regression slices, provider
availability, and a rollback plan before they are eligible.
- Do not turn a route choice into a release decision. A selected route still
needs implementation evidence, evaluation evidence, product-control
evidence, and deployment or pilot evidence at their own layers.
- For high-impact decisions, external actions, access, money, customer
records, or irreversible state, keep human approval and reconciliation
outside the model's route choice.
- Preserve a last-known-good baseline and a way to narrow exposure, disable
the candidate, remove unauthorized data, restore the prior configuration,
or hand the job to a person.
- Record freshness and version identity. A route that was available when a
proposal was written may be unavailable or changed when it is executed.
Workflow
1. Frame the decision
Write one sentence:
Decide which improvement route should be tested first for user job on
surface because observed gap, within quality, trust, cost, latency, privacy, and recovery boundaries.
Record:
- decision owner and approver;
- current workaround and last-known-good configuration;
- exposure, segment, observation window, and freshness;
- primary outcome oracle and guardrail or negative oracles;
- what is known, inferred, supplied, fictional, and missing.
If the gap, user job, or oracle is missing, stop at Need evidence.
2. Build an evidence ledger
Use stable IDs such as G-001 for the gap, B-001 for the baseline, S-001
for a source, and E-001 for an evaluation slice. Record:
| Field |
Required record |
| Gap |
observable behavior, affected job, severity, segment, and freshness |
| Baseline |
prompt/context/retrieval/tools/model/data/UX versions or Not provided |
| Evidence |
source, owner, timestamp, method, denominator, and confidence |
| Outcome |
task success, completeness, required evidence, user correction, or safe abstention |
| Resources |
tokens, calls, latency, cost, retries, and failure rate when relevant |
| Boundary |
data purpose, permission, tenant, region, side-effect, and retention status |
| Missingness |
what cannot be concluded and what would change the decision |
Do not infer prevalence from a single trace. Do not use a dashboard count as a
user outcome without exposure and denominator.
3. Localize the likely failure layer
Use the smallest evidence-supported hypothesis, then list one alternative:
| Layer |
Diagnostic question |
Candidate route |
| Input or intent |
Did the system understand the job and ambiguity? |
clarify, classify, or narrow the product entry point |
| Context |
Did the model see the right instructions, state, memory, and knowledge? |
context contract, selection, compaction, or source boundary |
| Retrieval or grounding |
Were eligible, current, authoritative sources found and supportable? |
query, ranking, source policy, citation, or abstention |
| Prompt or instruction |
Is a measured behavior gap in the instruction or output contract? |
versioned prompt or schema change |
| Tool or orchestration |
Did a tool, transition, retry, or delegation create the failure? |
tool contract, bounded workflow, validator, or handoff |
| Model or effort |
Is the task eligible for a different capability or reasoning budget? |
model, snapshot, provider, tier, or effort route |
| Data or training |
Is a stable behavior gap justified by permitted, representative data? |
data repair, supervised tuning, preference route, or distillation |
| Product control or UX |
Is the model output acceptable but the user cannot inspect, edit, approve, or recover? |
preview, explanation, approval, fallback, or manual route |
| Operations |
Is the observed issue caused by latency, quota, outage, drift, or missing telemetry? |
budget, availability, observability, or incident route |
Localization is a hypothesis until an ablation, trace, controlled comparison,
or domain review supports it.
4. Apply hard eligibility gates
Before comparing upside, mark each route Eligible, Blocked, Unknown, or
Not applicable for:
- user job and required capability;
- data purpose, permission, minimization, retention, and provider egress;
- safety, policy, privacy, cross-tenant, and side-effect boundary;
- model or tool identity, version, modality, context/output limits, region,
quota, reliability, and current provider availability;
- baseline availability, representative slices, evaluator, denominator, and
success oracle;
- owner, approval boundary, exposure, rollback, and recovery.
Any critical Blocked or unresolved high-impact Unknown keeps the decision
at Hold or Need evidence. Do not rank an ineligible route against eligible
ones.
5. Form a route shortlist
For each eligible route, record:
| Field |
Question |
| Mechanism hypothesis |
What failure should this route change, and why? |
| Smallest candidate |
What is the narrowest reversible test? |
| Required evidence |
What baseline, slice, oracle, and owner are needed? |
| Expected benefit |
Which user outcome or guardrail could improve? |
| Trade-off |
What might worsen: safety, evidence, cost, latency, privacy, or control? |
| Disconfirming signal |
What result would rule this route out? |
| Rollback |
How is the baseline restored and who owns it? |
| Route status |
Eligible, Blocked, Unknown, or Not applicable |
Do not prescribe a prompt change when the evidence points to missing authority,
stale sources, a broken tool contract, or an unclear user decision boundary.
6. Treat model and training routes as higher-evidence candidates
For a model, effort, provider, fine-tuning, or distillation candidate, freeze:
- provider, model ID, snapshot or alias, endpoint/region, serving tier, and
source date;
- input/output contract, tools, context, retries, evaluator, budget, and
safety configuration;
- training or distillation data origin, purpose, permission, redaction,
retention, labeling, contamination, and quality review;
- baseline and candidate evaluation sets, including out-of-domain and
high-severity negative slices;
- expected cost, latency, quota, availability, and rollback behavior.
Fine-tuning or distillation is not a substitute for fixing stale knowledge,
missing permission, wrong routing, or a broken user-control state. A small
model that is cheaper is not an improvement if the completed user job, evidence
quality, or safety boundary regresses.
7. Define the smallest paired experiment
Use the same representative task slices for baseline and candidate. At minimum
state:
- sample and slice IDs, expected behavior, negative behavior, oracle, reviewer,
and denominator;
- the single changed surface and all held-constant surfaces;
- quality, completeness, required evidence, abstention, safety, privacy,
cost, latency, reliability, and user-control observations as applicable;
- exposure, observation window, stopping rule, and whether human review is
required;
- the rollback trigger and the owner who can apply it.
Do not move a threshold after seeing results. Do not collapse high-severity
failures into an average. If the candidate cannot be tested without real
customer data or irreversible actions, keep the route at Need evidence and
design a safe fixture or supervised pilot first.
8. Make the route decision
Return exactly one primary status:
Ship: the route is already implemented and its stated release evidence is
present; this skill alone cannot grant that status.
Pilot: the route and controls are defined, but product-surface or user
evidence is deliberately bounded and still pending.
Iterate: the route is eligible but the smallest test or evidence needs
revision.
Hold: a critical safety, privacy, permission, authority, data, or rollback
boundary is unresolved.
Rollback: the candidate has a verified harmful regression or unsafe state;
restore the baseline and hand off to the owner.
Need evidence: a required input or evaluation layer is missing.
Not applicable: the route does not address the named job or gap.
The packet must name one primary next action and one explicit reason not to
take the strongest rejected alternative.
9. Hand off and write back
Route the packet to the smallest next owner:
- prompt, context, retrieval, tool, orchestration, model, migration, data,
evaluation, security, privacy, UX, reliability, or incident contract;
- issue or decision log with stable IDs and a review date;
- redacted eval slice or regression case, never raw customer content.
Write back the chosen route, rejected alternative, evidence gap, baseline
identity, owner, expiry, and rollback receipt. A route decision expires when
the model/provider, data policy, user job, or product surface changes materially.
Output contract
Return these sections in order. Keep unsupported values explicitly labelled:
Improvement decision
State the user job, observed gap, primary route, status, owner, and one next
action in five lines or fewer.
Problem frame and evidence ledger
Include the decision sentence, baseline identity, source IDs, observation
window, outcome oracle, guardrails, denominator, and missing evidence.
Failure localization
Show the primary layer, evidence, alternative hypothesis, confidence, and
what would disconfirm it.
Route shortlist
Use a table with route status, smallest candidate, expected benefit, trade-off,
required evidence, and rollback. Keep hard blockers visible.
Paired evaluation and release gate
Name slices, baseline/candidate, held-constant surfaces, oracles, reviewer,
denominator, cost/latency observations, stopping rule, and the exact condition
for Ship, Pilot, Iterate, Hold, Rollback, or Need evidence.
Data, permission, and trust boundary
State what data may enter which stage, who may approve it, what is redacted,
what is retained, which provider or external system is eligible, and what is
blocked. For fine-tuning or distillation, include training/evaluation
separation and safety regression coverage.
Rollout, recovery, and writeback
State exposure, manual approval, user-visible degraded state, owner, rollback
trigger, last-known-good configuration, recovery path, expiry, and next review.
Not covered
List every unrun provider call, unverified score, unavailable source, real-user
claim, production claim, security/legal/accessibility review, adoption claim,
and other evidence layer this packet does not establish.
Review ask
End with one choice: Run smallest test, Collect evidence, Route to owner,
Hold, or Rollback, plus the missing receipt needed for the next review.
Edge cases
- A prompt edit looks cheapest: compare it with context, retrieval, tool,
and UX hypotheses; cost is not the user outcome.
- A larger model scores higher: keep quality, evidence, safety, latency,
cost, and completed-job denominators separate; a single score does not
authorize migration.
- Fine-tuning has many examples: more examples do not establish permission,
representativeness, contamination safety, or generalization.
- Distillation copies a strong model: inspect whether the teacher output is
correct, permitted, current, and safe; teacher output is not ground truth.
- Lower latency comes from skipping evidence: block the route if required
source support, review, or user control is lost.
- The route touches a side effect: require approval, idempotency,
reconciliation, and postcondition evidence; do not blindly retry through a
different model or provider.
- The signal is only a user complaint: preserve it as a lead, define a
safe reproduction or research slice, and avoid converting it into
prevalence or release evidence.
- Provider guidance conflicts with product evidence: keep both source IDs,
lower confidence, and use the product's declared oracle and controls.
Final check
Before handing off, confirm:
- the route starts from a user job and an observable gap;
- the primary layer and alternative are evidence-labelled;
- ineligible or unknown routes are not ranked as if eligible;
- the smallest candidate changes one surface and has a paired baseline;
- quality, safety, privacy, cost, latency, evidence, and user control are not
hidden in one score;
- fine-tuning/distillation has data purpose, permission, safety, provider, and
rollback gates;
- first-time, empty, error, recovery, approval, and manual fallback states are
represented where relevant;
- the status is truthful and
## Not covered contains every unsupported
claim;
- the next owner, review date, and rollback receipt are explicit.
1---2name: pm-ai-improvement-to-route3description: Turn an observed AI product quality, trust, cost, latency, coverage, or completion gap into a source-bounded choice of improvement route across prompt, context, retrieval, tools, model, data, UX, or fine-tuning. Use before committing to one technique; require a user job, failure localization, paired evaluation, permission boundary, owner, stop rule, and rollback.4---56# PM AI Improvement to Route78Choose the next AI improvement lever from evidence, not fashion. This skill is9for the decision before a team commits to a prompt edit, broader context,10retrieval, a tool or orchestration change, a model or effort change, a data11reuse path, a UX/control change, or fine-tuning/distillation.1213The output is a reviewable route packet. It is not an optimizer, benchmark14runner, model or vendor recommendation, tuning pipeline, deployment, or proof15that a candidate will improve a live product.1617## When to use1819Use this skill when:2021- an AI product has a named user-job gap but the team has not agreed which22 layer is responsible or which intervention to test first;23- a proposed fix could be a prompt, context, retrieval, tool, orchestration,24 model, reasoning effort, provider, data, product-control, or UX change and25 the trade-off is not yet visible;26- a team is tempted to fine-tune or distill because a narrow score, cost target,27 or provider feature appears attractive;28- a quality improvement may trade against safety, privacy, evidence, latency,29 cost, reliability, user control, or maintainability;30- a PM needs one smallest, reversible next experiment with a paired baseline,31 an owner, an evaluation slice, and a stop or rollback rule;32- a provider capability, model lifecycle notice, or data-control change may33 change which routes are actually available.3435Use `pm-ai-signal-to-intervention` when the primary decision is how to respond36to a validated live signal. Use `pm-ai-trace-to-regression` when one concrete37failed run should become a minimized regression case. Use38`pm-ai-context-to-contract`, `pm-ai-prompt-to-version`, `pm-ai-retrieval-to-grounding`,39`pm-ai-tool-to-contract`, or `pm-ai-orchestration-to-contract` after that route40has been selected. Use `pm-ai-model-to-route` for a model/provider route41decision, `pm-ai-model-change-to-migration` for a lifecycle migration,42`pm-ai-cost-to-guardrail` for economics or latency as the primary question,43`pm-ai-data-to-purpose` for the data lifecycle, and44`pm-ai-evaluation-plan` or `pm-ai-independent-eval-to-release` for evaluation45design or independent evaluation respectively.4647## Do not use4849Do not use this skill to:5051- call a model or provider, run fine-tuning or distillation, inspect a billing52 account, change a prompt or route, enable a flag, deploy code, or send data;53- pick a vendor from reputation, a current price, one leaderboard, or a54 provider statement without task-level evidence and eligibility checks;55- replace a missing baseline, denominator, evaluator, data permission, model56 identity, or user outcome with a plausible value;57- expose raw prompts, customer content, credentials, tokens, private URLs,58 hidden reasoning, or a proprietary training set in the packet;59- make a composite score that hides quality, safety, privacy, cost, latency,60 reliability, or user outcome differences;61- optimize a security incident, privacy breach, authorization failure,62 harmful side effect, or cross-tenant leak before containment and the proper63 security or incident route;64- call a fictional fixture a user study, benchmark, adoption result, safety65 assessment, production result, or release proof.6667Write `Not provided`, `Unknown`, `Not measured`, `Not run`, `Not reproduced`,68`Conflict`, `Not available`, or `Not covered` when the evidence is absent.6970## Core guardrails71721. Start with one user job, one product surface, one observable gap, one73 decision owner, and one outcome oracle. “Make the AI better” is not a74 decision frame.752. Localize before selecting a technique. Separate input or intent, context,76 retrieval, instruction, tool or orchestration, model or effort, data,77 product control, UX, and operations hypotheses.783. Check hard blockers before preference: authorization, privacy, data purpose,79 safety, side effects, required capability, tenant or region, version80 identity, availability, and rollback.814. Treat a provider document, model card, benchmark, or internal hypothesis as82 scoped evidence. It can shape a test; it cannot prove this product's result.835. Compare the baseline and one candidate on the same representative tasks.84 Keep success, completeness, required evidence, safety, abstention, cost,85 latency, reliability, and user control as separate observations.866. Fewer tokens, calls, retries, or dollars count as improvement only when the87 user outcome and required guardrails still pass.887. Prefer the smallest reversible intervention that can disconfirm the main89 hypothesis. “Smallest” describes the test and blast radius, not a universal90 preference for prompt edits over a real product or data fix.918. Fine-tuning and distillation require a data-purpose ledger, permission or92 consent boundary, minimization and redaction, contamination review,93 training/evaluation separation, safety regression slices, provider94 availability, and a rollback plan before they are eligible.959. Do not turn a route choice into a release decision. A selected route still96 needs implementation evidence, evaluation evidence, product-control97 evidence, and deployment or pilot evidence at their own layers.9810. For high-impact decisions, external actions, access, money, customer99 records, or irreversible state, keep human approval and reconciliation100 outside the model's route choice.10111. Preserve a last-known-good baseline and a way to narrow exposure, disable102 the candidate, remove unauthorized data, restore the prior configuration,103 or hand the job to a person.10412. Record freshness and version identity. A route that was available when a105 proposal was written may be unavailable or changed when it is executed.106107## Workflow108109### 1. Frame the decision110111Write one sentence:112113> Decide which improvement route should be tested first for `user job` on114> `surface` because `observed gap`, within `quality, trust, cost, latency,115> privacy, and recovery boundaries`.116117Record:118119- decision owner and approver;120- current workaround and last-known-good configuration;121- exposure, segment, observation window, and freshness;122- primary outcome oracle and guardrail or negative oracles;123- what is known, inferred, supplied, fictional, and missing.124125If the gap, user job, or oracle is missing, stop at `Need evidence`.126127### 2. Build an evidence ledger128129Use stable IDs such as `G-001` for the gap, `B-001` for the baseline, `S-001`130for a source, and `E-001` for an evaluation slice. Record:131132| Field | Required record |133| --- | --- |134| Gap | observable behavior, affected job, severity, segment, and freshness |135| Baseline | prompt/context/retrieval/tools/model/data/UX versions or `Not provided` |136| Evidence | source, owner, timestamp, method, denominator, and confidence |137| Outcome | task success, completeness, required evidence, user correction, or safe abstention |138| Resources | tokens, calls, latency, cost, retries, and failure rate when relevant |139| Boundary | data purpose, permission, tenant, region, side-effect, and retention status |140| Missingness | what cannot be concluded and what would change the decision |141142Do not infer prevalence from a single trace. Do not use a dashboard count as a143user outcome without exposure and denominator.144145### 3. Localize the likely failure layer146147Use the smallest evidence-supported hypothesis, then list one alternative:148149| Layer | Diagnostic question | Candidate route |150| --- | --- | --- |151| Input or intent | Did the system understand the job and ambiguity? | clarify, classify, or narrow the product entry point |152| Context | Did the model see the right instructions, state, memory, and knowledge? | context contract, selection, compaction, or source boundary |153| Retrieval or grounding | Were eligible, current, authoritative sources found and supportable? | query, ranking, source policy, citation, or abstention |154| Prompt or instruction | Is a measured behavior gap in the instruction or output contract? | versioned prompt or schema change |155| Tool or orchestration | Did a tool, transition, retry, or delegation create the failure? | tool contract, bounded workflow, validator, or handoff |156| Model or effort | Is the task eligible for a different capability or reasoning budget? | model, snapshot, provider, tier, or effort route |157| Data or training | Is a stable behavior gap justified by permitted, representative data? | data repair, supervised tuning, preference route, or distillation |158| Product control or UX | Is the model output acceptable but the user cannot inspect, edit, approve, or recover? | preview, explanation, approval, fallback, or manual route |159| Operations | Is the observed issue caused by latency, quota, outage, drift, or missing telemetry? | budget, availability, observability, or incident route |160161Localization is a hypothesis until an ablation, trace, controlled comparison,162or domain review supports it.163164### 4. Apply hard eligibility gates165166Before comparing upside, mark each route `Eligible`, `Blocked`, `Unknown`, or167`Not applicable` for:168169- user job and required capability;170- data purpose, permission, minimization, retention, and provider egress;171- safety, policy, privacy, cross-tenant, and side-effect boundary;172- model or tool identity, version, modality, context/output limits, region,173 quota, reliability, and current provider availability;174- baseline availability, representative slices, evaluator, denominator, and175 success oracle;176- owner, approval boundary, exposure, rollback, and recovery.177178Any critical `Blocked` or unresolved high-impact `Unknown` keeps the decision179at `Hold` or `Need evidence`. Do not rank an ineligible route against eligible180ones.181182### 5. Form a route shortlist183184For each eligible route, record:185186| Field | Question |187| --- | --- |188| Mechanism hypothesis | What failure should this route change, and why? |189| Smallest candidate | What is the narrowest reversible test? |190| Required evidence | What baseline, slice, oracle, and owner are needed? |191| Expected benefit | Which user outcome or guardrail could improve? |192| Trade-off | What might worsen: safety, evidence, cost, latency, privacy, or control? |193| Disconfirming signal | What result would rule this route out? |194| Rollback | How is the baseline restored and who owns it? |195| Route status | `Eligible`, `Blocked`, `Unknown`, or `Not applicable` |196197Do not prescribe a prompt change when the evidence points to missing authority,198stale sources, a broken tool contract, or an unclear user decision boundary.199200### 6. Treat model and training routes as higher-evidence candidates201202For a model, effort, provider, fine-tuning, or distillation candidate, freeze:203204- provider, model ID, snapshot or alias, endpoint/region, serving tier, and205 source date;206- input/output contract, tools, context, retries, evaluator, budget, and207 safety configuration;208- training or distillation data origin, purpose, permission, redaction,209 retention, labeling, contamination, and quality review;210- baseline and candidate evaluation sets, including out-of-domain and211 high-severity negative slices;212- expected cost, latency, quota, availability, and rollback behavior.213214Fine-tuning or distillation is not a substitute for fixing stale knowledge,215missing permission, wrong routing, or a broken user-control state. A small216model that is cheaper is not an improvement if the completed user job, evidence217quality, or safety boundary regresses.218219### 7. Define the smallest paired experiment220221Use the same representative task slices for baseline and candidate. At minimum222state:223224- sample and slice IDs, expected behavior, negative behavior, oracle, reviewer,225 and denominator;226- the single changed surface and all held-constant surfaces;227- quality, completeness, required evidence, abstention, safety, privacy,228 cost, latency, reliability, and user-control observations as applicable;229- exposure, observation window, stopping rule, and whether human review is230 required;231- the rollback trigger and the owner who can apply it.232233Do not move a threshold after seeing results. Do not collapse high-severity234failures into an average. If the candidate cannot be tested without real235customer data or irreversible actions, keep the route at `Need evidence` and236design a safe fixture or supervised pilot first.237238### 8. Make the route decision239240Return exactly one primary status:241242- `Ship`: the route is already implemented and its stated release evidence is243 present; this skill alone cannot grant that status.244- `Pilot`: the route and controls are defined, but product-surface or user245 evidence is deliberately bounded and still pending.246- `Iterate`: the route is eligible but the smallest test or evidence needs247 revision.248- `Hold`: a critical safety, privacy, permission, authority, data, or rollback249 boundary is unresolved.250- `Rollback`: the candidate has a verified harmful regression or unsafe state;251 restore the baseline and hand off to the owner.252- `Need evidence`: a required input or evaluation layer is missing.253- `Not applicable`: the route does not address the named job or gap.254255The packet must name one primary next action and one explicit reason not to256take the strongest rejected alternative.257258### 9. Hand off and write back259260Route the packet to the smallest next owner:261262- prompt, context, retrieval, tool, orchestration, model, migration, data,263 evaluation, security, privacy, UX, reliability, or incident contract;264- issue or decision log with stable IDs and a review date;265- redacted eval slice or regression case, never raw customer content.266267Write back the chosen route, rejected alternative, evidence gap, baseline268identity, owner, expiry, and rollback receipt. A route decision expires when269the model/provider, data policy, user job, or product surface changes materially.270271## Output contract272273Return these sections in order. Keep unsupported values explicitly labelled:274275### Improvement decision276277State the user job, observed gap, primary route, status, owner, and one next278action in five lines or fewer.279280### Problem frame and evidence ledger281282Include the decision sentence, baseline identity, source IDs, observation283window, outcome oracle, guardrails, denominator, and missing evidence.284285### Failure localization286287Show the primary layer, evidence, alternative hypothesis, confidence, and288what would disconfirm it.289290### Route shortlist291292Use a table with route status, smallest candidate, expected benefit, trade-off,293required evidence, and rollback. Keep hard blockers visible.294295### Paired evaluation and release gate296297Name slices, baseline/candidate, held-constant surfaces, oracles, reviewer,298denominator, cost/latency observations, stopping rule, and the exact condition299for `Ship`, `Pilot`, `Iterate`, `Hold`, `Rollback`, or `Need evidence`.300301### Data, permission, and trust boundary302303State what data may enter which stage, who may approve it, what is redacted,304what is retained, which provider or external system is eligible, and what is305blocked. For fine-tuning or distillation, include training/evaluation306separation and safety regression coverage.307308### Rollout, recovery, and writeback309310State exposure, manual approval, user-visible degraded state, owner, rollback311trigger, last-known-good configuration, recovery path, expiry, and next review.312313### Not covered314315List every unrun provider call, unverified score, unavailable source, real-user316claim, production claim, security/legal/accessibility review, adoption claim,317and other evidence layer this packet does not establish.318319### Review ask320321End with one choice: `Run smallest test`, `Collect evidence`, `Route to owner`,322`Hold`, or `Rollback`, plus the missing receipt needed for the next review.323324## Edge cases325326- **A prompt edit looks cheapest:** compare it with context, retrieval, tool,327 and UX hypotheses; cost is not the user outcome.328- **A larger model scores higher:** keep quality, evidence, safety, latency,329 cost, and completed-job denominators separate; a single score does not330 authorize migration.331- **Fine-tuning has many examples:** more examples do not establish permission,332 representativeness, contamination safety, or generalization.333- **Distillation copies a strong model:** inspect whether the teacher output is334 correct, permitted, current, and safe; teacher output is not ground truth.335- **Lower latency comes from skipping evidence:** block the route if required336 source support, review, or user control is lost.337- **The route touches a side effect:** require approval, idempotency,338 reconciliation, and postcondition evidence; do not blindly retry through a339 different model or provider.340- **The signal is only a user complaint:** preserve it as a lead, define a341 safe reproduction or research slice, and avoid converting it into342 prevalence or release evidence.343- **Provider guidance conflicts with product evidence:** keep both source IDs,344 lower confidence, and use the product's declared oracle and controls.345346## Final check347348Before handing off, confirm:349350- the route starts from a user job and an observable gap;351- the primary layer and alternative are evidence-labelled;352- ineligible or unknown routes are not ranked as if eligible;353- the smallest candidate changes one surface and has a paired baseline;354- quality, safety, privacy, cost, latency, evidence, and user control are not355 hidden in one score;356- fine-tuning/distillation has data purpose, permission, safety, provider, and357 rollback gates;358- first-time, empty, error, recovery, approval, and manual fallback states are359 represented where relevant;360- the status is truthful and `## Not covered` contains every unsupported361 claim;362- the next owner, review date, and rollback receipt are explicit.