Auditing Release Readiness
Use this skill whenever your session added or edited tracked files in this repository and you are about to hand off or say the task is done—not only “release” workflows. Read-only Q&A with no writes can skip it.
Workflow
- Run the pre-push quality gate.
- Capture failing stage logs and iterate fixes.
- Re-run until all required checks pass.
- Return a short readiness summary.
Commands
task qa:prepushtask qa:prepush:loop -- 3(optional bounded retry loop)
Output Contract
Return:
- pass/fail status by stage (including
security_sync/security_audit/security_banditwhen triggered) - unresolved blockers (if any)
- push readiness recommendation
Security in the gate is context-aware: lockfile changes run uv sync --frozen --all-extras + pip-audit + bandit; src/ changes run pip-audit + bandit; docs-only diffs skip security. Use task security:scan for a full manual run.
Safety
- Do not claim readiness unless checks are actually green.