Audit Repository
Repository continuity composition
For repository-scoped work, compose maintain-repository-continuity in
Resume mode before selecting work. This skill is continuity read-only: do
not create, refresh, or otherwise mutate CONTINUITY.md unless a separate
authorized repository-changing workflow takes ownership of that handoff.
- Contribute: Audit scope, observed findings, confidence, evidence gaps, and executed checks
- Never claim: Permission to modify CONTINUITY.md, apply fixes, or convert recommendations into completed work
Purpose
Execute the reusable procedure governed by auditor.
Primary question:
What does observable repository evidence show about quality, alignment, risk, and strengths?
Required Inputs
Resolve:
- governing specification and version
- current source or repository state
- scope and constraints
- upstream architecture or evidence
- output location
- validation expectations
- unresolved decisions
Missing evidence must remain visible.
Workflow
- resolve request, defaults, scope, and read-only constraints
- inspect repository context in the required order
- inspect historical audits
- gather evidence within scope
- classify findings and positive observations
- assign severity, confidence, status, effort, and impact
- record uncertainty and uninspected areas
- propose bounded validation and candidate issues
- write and validate the immutable report
Output Contract
Primary output:
audits/{audit-name}-{utc-timestamp}.md
Also report assumptions, evidence gaps, validation status, unresolved questions, and downstream actions requiring separate authorization.
Constraints
- Follow the governing specification.
- Preserve provenance and uncertainty.
- Do not invent authority, evidence, or current behavior.
- Do not silently expand scope.
- Do not claim completion when required validation is missing.
- Keep proposed downstream work separate from authorized execution.
Completion Criteria
- Governing specification is resolved.
- Scope and constraints are explicit.
- Required evidence was inspected.
- The primary output was created.
- Validation was executed or its absence documented.
- Open questions and authorization needs are visible.
Staged Variant
A staged candidate at .staging/skills/repository-audit/ covers similar
ground under the name repository-audit. The canonical skill is named
audit-repository and is governed by the auditor specification.
Issue 016 should compare the two and extract any unique findings workflow, output format, or severity taxonomy from the staged copy before retiring it. Do not copy the staged file wholesale into canonical source.