Change Tracking Write Entry

Change Tracking: Write Entry

Project wiring (the parent library's instantiation; adopters substitute their own)

Portable procedure, concrete names. In the parent GRC library this skill runs with:

• Detailed mirror: the detailed change-log mirror in the consuming project's working state, paired with the root CHANGELOG.md under the two-file split the canonical rule describes.
• Terse-entry scope directories: the internal-tooling and assistant-guidance tree is .claude/, and the working-state ledgers live in the consuming project's working-state tree; changes confined to those trees are the canonical terse-entry candidates.
• Delta gate: the PR-time CHANGELOG-delta check D1, alongside the link-coverage gate and the version-monotonicity audit.

An adopting project maps each bullet to its own detailed-mirror location, ancillary-scope directories, and enforcing gates; the procedure below refers to them generically.

Overview

A CHANGELOG entry is the cheapest form of long-term institutional memory a project has. This skill runs the entry-writing workflow from the canonical rule governance/change-tracking.md so an entry that satisfies the rule's contract (and the gates that enforce it) is composed in one pass rather than refined through CI failures.

The rule is the source of truth for normative content (what counts as user-visible content, what the terse-entry convention allows for ancillary changes, what the CI gates require, what exception-handling looks like). This skill is the workflow wrapper: when to invoke the protocol, in what order to execute each step, and how to verify the entry before commit.

When to Use

• Before composing the commit message and PR description that close out any PR. Every PR carries an entry; the skill applies regardless of substantive scope.
• Before pushing a PR that touches the project's document corpus, schema files, public-facing prose, or any artefact a downstream reader cites (substantive entry).
• Before pushing a PR that touches only internal tooling, assistant-guidance trees, working-state ledgers, or other ancillary surfaces (terse entry; the parent library's concrete directories are named in the project wiring above).
• When CI's delta gate, link-coverage gate, or version-monotonicity audit flags a missing or malformed entry. The fix is to write or correct the entry, not to weaken the gate.
• When opening a multi-PR rollout where each PR will land its own entry with phase context that connects them.

Process

The entry-writing workflow from the canonical rule, executed in order:

1. Classify the change shape. Substantive entry, or terse entry? Every PR gets one of the two; there is no skip path.

   • Substantive entry when the change adds, removes, or alters a public artefact; could surprise a downstream consumer; ships behaviour change; carries a discipline lesson worth recording; or will be cited later in answering "when did this happen?" / "why does this work this way?". Use the full date-and-version header plus structured Keep a Changelog sections.
   • Terse entry when the change is internal tooling invisible to adopters (changes under the assistant-guidance tree, working-state-only edits under the working-state ledgers; the project wiring above names the parent library's directories), a pure refactor with no behavioural change, or a typo fix in a non-citable string. Use the date-and-version header plus a single sentence describing what was accomplished.
   • When in doubt, write the substantive entry. The cost of an unnecessarily detailed entry is small; the cost of a thin entry on a change that turns out to matter compounds.

2. Choose the date and version. Use the project's existing convention (CalVer, SemVer, monotonic integer). The version must strictly increase over the prior entry; merge-conflict resolutions that drop a version bump are the failure mode the version-monotonicity audit catches. The date pins the entry to wall-clock time.

3. Write the title sentence. Plain language, summarizing the change in one sentence a future reader can act on. "Phase 2: add the gate-discipline rule to the governance pack" is a title; "Updates" is not.

4. Pick the Keep a Changelog section(s) that most accurately classify the change: Added, Changed, Removed, Fixed, Security. A single entry may use multiple sections. Do not bury a removed-public-API event under Changed; misclassification is a documentation failure downstream consumers will pay for.

5. Wrap every file reference as a markdown link. The link-coverage gate scans for bare path-shaped code spans (text inside backticks that looks like a relative path) and fails on any not wrapped. The required form is a markdown link whose display text is the path in backticks and whose target is the same path; convert at draft time, not after the gate fails.

6. Record the "why", not only the "what". The diff already records what changed. The entry records why. "Bumped the version" is a what; "bumped the version because a downstream consumer needed v1.7 to ship Phase 3" is a why.

7. Attach verification evidence for any non-trivial change. Which gates ran, which passed, which were intentionally skipped (and why). "All N audit gates pass standalone" is verification evidence; "looks good" is not.

8. Add phase context when the entry is one PR in a multi-PR rollout. Which phase this is, what is still ahead. Readers landing mid-rollout need the table of contents.

9. Re-read the entry once before committing. Catch the stale claims now: a file mentioned in the title that the diff did not touch; a version number that does not match the heading; a section heading that misclassifies the change.

When the project runs the detailed mirror under a current-period model (completed periods swept to an archive; see the canonical rule's current-period-model section), the write path here is unchanged: new detailed entries still prepend to the in-repo mirror, and the completed-period sweep is a separate close-out step, not part of writing the entry. The compact root-entry format (for example **YYYY-MM-DD | X.Y.Z | PR #N** - one-sentence summary, a plain hyphen, no em-dash or en-dash) applies only once the project has adopted it in a root-reformat step; until then the root line keeps the header-plus-lead-paragraph form above.

Terse Entry Discipline

When the change qualifies for the terse form, the entry is the date-and-version header followed by a single sentence describing what was accomplished. No structured sections, no file links, no verification block.

Terse-entry shape (the compact one-line root form):

**YYYY-MM-DD | X.Y.Z | PR #N** - [scope]: [one sentence on what was accomplished].

Example: **YYYY-MM-DD | X.Y.Z | PR #N** - .claude/ change: added a `## Version-bump discipline` section to CLAUDE.md codifying when each version surface bumps across a multi-commit PR.

Reviewers who see a terse entry on a behaviour-changing PR are expected to reject it and require the substantive form. Terse is the floor for ancillary changes, not the ceiling: when a discipline lesson is worth recording, escalate to substantive even when the surface scope is small.

Where the adopting project configures paired primary and detailed change records, the split applies regardless of shape: write the terse entry to both configured surfaces and keep their shapes aligned.

Red Flags

• Vague titles ("Misc fixes", "various improvements", "general cleanup", "minor updates", "housekeeping"). If the work spans multiple unrelated changes, write multiple bullets, one per change.
• Bare file path references in code spans that are not wrapped as markdown links. The link-coverage gate will fail; fix at draft time.
• A BREAKING change classified under Changed to soften its appearance. Misclassification is a documentation failure.
• Copying the commit message verbatim into the entry. The audiences are different: the commit message is for the reviewer; the entry is for everyone who reads the project later.
• "I'll add the entry in a follow-up PR." The discipline is per-PR; follow-up entries decouple the change from its description and erode the audit trail.
• Bypassing the delta gate with git commit --no-verify. See the gate-discipline rule: never weaken a gate to silence a failure.
• Using a terse entry on a behaviour-changing PR. The terse form is for ancillary changes (internal tooling, working-state housekeeping, pure refactors); behaviour change demands the substantive form so the discipline lesson and verification evidence are recorded.
• Adding a Changelog: skip trailer to any PR. The rule no longer sanctions the skip pattern; the terse-entry convention replaces it.

Verification

The entry is ready when:

• Date and version header are present; the version strictly increases over the prior entry.
• Title sentence summarizes the change in plain language.
• Keep a Changelog section(s) classify the change accurately, including a BREAKING callout when relevant.
• Every file referenced in the entry text is wrapped as a markdown link.
• The "why" is captured, not only the "what".
• Verification evidence is named: which gates ran, which passed.
• Phase context is attached for multi-PR rollouts.
• A re-read has found no stale claims.

For terse-entry PRs the verification is shorter: the date-and-version header is present; one sentence describes what was accomplished; every configured paired change-record surface carries the entry; and the reviewer has confirmed terse is appropriate for the change class.

Common Rationalizations

See Also

• Canonical rule governance/change-tracking.md: the full discipline, the three CI gates that implement it (delta gate, link-coverage gate, version-monotonicity gate), monorepo coordination, generated-CHANGELOG workflows, document-corpus conventions, framework alignment (NIST SSDF PO.5 / RV.2 / PS.1 / RV.1, CSA CCM CCC-01 to 03 / LOG-02 / LOG-04 / LOG-10 / CCC-04, ISO 27001 Annex A.5.4 / A.8.32 / A.8.15 / A.8.27), and the exception-handling protocol for embargoed or deferred entries.
• Related skill gate-discipline-diagnose: when the delta gate, link-coverage gate, or version-monotonicity audit fails, diagnose-then-fix the entry; do not weaken the gate.
• Related skill evidence-grounded-completion: the verification-evidence section of an entry is itself a state assertion. Quote the gate output, do not paraphrase it.
• Related skill artefact-discipline-check: generated artefacts are never hand-edited; if the CHANGELOG is generated by a tool (release-please, towncrier), the generated file is checked into the repository and the entry is reviewable in the PR diff.
• Related skill skill-authoring-discipline: adding a new skill is a tracked change; its CHANGELOG entry follows this skill's discipline (the new skill addition is itself a "Added" line that satisfies the delta gate and link-coverage gate).