Review Dapr Workflow — Determinism
Overview
Scans the bodies of Dapr Workflow classes/functions for code that is not safe to run during replay. Read-only: this skill never modifies source files. Activity bodies, management endpoints, and configuration are out of scope and are covered by review-workflow-activity and review-workflow-management.
Execution Order
You MUST follow these phases in strict order. Do not load files outside the agreed scope, and do not write or edit any files.
- Resolve scope — Read
../shared/review-scope-prompt.md and follow it to set scope_root.
- Detect target — Read
../shared/review-detect-target.md and follow it to produce language and workflow_files. If workflow_files is empty, emit a single critical finding (no workflow files found) and stop.
- Load checklist — Based on
language, read exactly one of:
- Scan — For each workflow file in scope, apply every rule from the loaded checklist using
Grep and Read. For each match, capture file:line, the rule id, and a short evidence snippet. Confirm the match is inside workflow scope (see "Cross-reference" in each checklist) before promoting it from "Please verify" to a graded severity.
- Report — Format every finding using the canonical template from
../shared/review-report-format.md. Group by severity, then rule id, then file path.
- Show final message — Your last output is the report. Do not append a summary, follow-up question, or next-action prompt other than the
## Next steps block defined by the report format.
Prerequisites
- Read access to the project directory.
- No build, compile, or run step is required — this skill is fully static.
Allowed tools
Read, Grep, Glob only. The skill MUST NOT call Bash, Write, or Edit.
Rules
The full rule list, including detection patterns, severities, and suggested fixes, lives in the loaded language checklist:
Rule ids are stable across releases. New rules append; deprecated rule ids are reserved.
Show final message
The last thing you emit MUST be the report from step 5, including the ## Next steps section. The ## Next steps block should suggest:
- Run
review-workflow-activity next if any activity files exist.
- Run
review-workflow-management next if any management files exist.
- Re-run this skill after fixes if any critical findings were reported.
Do not add any text after the report.
1---2name: review-workflow-determinism3description: This skill reviews Dapr Workflow code for non-determinism hazards that would cause stuck workflows on replay. Use this skill when the user asks to "review workflow for determinism", "check non-determinism in workflow", "audit Dapr workflow replay safety", or similar.4---56# Review Dapr Workflow — Determinism78## Overview910Scans the bodies of Dapr Workflow classes/functions for code that is not safe to run during replay. Read-only: this skill never modifies source files. Activity bodies, management endpoints, and configuration are out of scope and are covered by `review-workflow-activity` and `review-workflow-management`.1112## Execution Order1314You MUST follow these phases in strict order. Do not load files outside the agreed scope, and do not write or edit any files.15161. **Resolve scope** — Read [`../shared/review-scope-prompt.md`](../shared/review-scope-prompt.md) and follow it to set `scope_root`.172. **Detect target** — Read [`../shared/review-detect-target.md`](../shared/review-detect-target.md) and follow it to produce `language` and `workflow_files`. If `workflow_files` is empty, emit a single critical finding (no workflow files found) and stop.183. **Load checklist** — Based on `language`, read exactly one of:19 - `dotnet` or `aspire` → [`../shared/review-determinism-dotnet.md`](../shared/review-determinism-dotnet.md)20 - `python` → [`../shared/review-determinism-python.md`](../shared/review-determinism-python.md)214. **Scan** — For each workflow file in scope, apply every rule from the loaded checklist using `Grep` and `Read`. For each match, capture `file:line`, the rule id, and a short evidence snippet. Confirm the match is inside workflow scope (see "Cross-reference" in each checklist) before promoting it from "Please verify" to a graded severity.225. **Report** — Format every finding using the canonical template from [`../shared/review-report-format.md`](../shared/review-report-format.md). Group by severity, then rule id, then file path.236. **Show final message** — Your last output is the report. Do not append a summary, follow-up question, or next-action prompt other than the `## Next steps` block defined by the report format.2425## Prerequisites2627- Read access to the project directory.28- No build, compile, or run step is required — this skill is fully static.2930## Allowed tools3132`Read`, `Grep`, `Glob` only. The skill MUST NOT call `Bash`, `Write`, or `Edit`.3334## Rules3536The full rule list, including detection patterns, severities, and suggested fixes, lives in the loaded language checklist:3738- [.NET / Aspire rules](../shared/review-determinism-dotnet.md) — `DWF-DET-001` … `DWF-DET-015`39- [Python rules](../shared/review-determinism-python.md) — `DWF-DET-001` … `DWF-DET-015`4041Rule ids are stable across releases. New rules append; deprecated rule ids are reserved.4243## Show final message4445The last thing you emit MUST be the report from step 5, including the `## Next steps` section. The `## Next steps` block should suggest:4647- Run `review-workflow-activity` next if any activity files exist.48- Run `review-workflow-management` next if any management files exist.49- Re-run this skill after fixes if any critical findings were reported.5051Do not add any text after the report.
diagrid-labs