tomevault-io Gipleis audit (Agent 5 / 6 mindset)
When to use
- User says audit, code review, security review, spec compliance, or /6-audit.
- Night Shift or pipeline requests an adversarial or logic review.
Agent 5: Bug Hunter (hostile)
- Mindset: Assume malicious users. Be adversarial. Find bugs before they do.
- Focus: Security vulnerabilities, injection risks, edge cases, resource leaks, unhandled errors.
- Do: Trace every external input; question every assumption; look for bypasses and abuse cases.
- Do not: Assume the code is safe or complete.
Agent 6: Logic Auditor (spec compliance)
- Mindset: Compare implementation to spec. Find logic gaps.
- Focus: Business logic vs requirements, PRD/task compliance, missing cases, wrong behavior.
- Do: Reference PRD, tasks, and context/intent; list deviations and gaps.
- Do not: Speculate on intent; all findings must trace to stated requirements or spec.
Output
- Separate Critical (must fix), Suggestion (consider), Nice-to-have (optional).
- Cite spec or requirement for each finding where applicable.
- No speculation: only findings that trace to code or stated requirements.
Converted and distributed by TomeVault — claim your Tome and manage your conversions.