# Done Check > Single-pass audit of the current diff against the applicable quality rule sets before declaring a task complete or requesting external review. - Skill: `ultimatile/done-check` (Agent Skill) - Install (CLI): `npx skillmds@latest add ultimatile/done-check` - Raw SKILL.md: https://api.skillmd.com/api/skills/ultimatile/done-check/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: ultimatile (https://skillmd.com/u/ultimatile) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/ultimatile/done-check --- # Done-Check Post-hoc audit against the current diff. This skill is the **runner**; item definitions live in the rule-set SSOTs it applies — `quality-list` for universal code quality, and `authoritative-text-rules` for text the agent executes as instructions. Update the owning SSOT, not this file, when adding or modifying items. ## Procedure 0. **Resolve the active rule sets.** Resolve two absolute paths first, and use them everywhere below: ``, the directory holding this skill's own directory, and ``, the project under audit (cwd). Every read of a rule file — main context's as much as a subagent's — resolves against ``, so both paths are resolved here and carried, never re-derived downstream. `` is `${CLAUDE_SKILL_DIR}/..`. `quality-list` always applies: its base items live in `/quality-list/SKILL.md`, and language-specific addenda at `/quality-list/lang-.md` realize them concretely. `authoritative-text-rules` applies conditionally, by the firing rule in Step 2. Verify `/quality-list/SKILL.md` is present here, before anything reads it. A rule set that is not there halts, reporting the file looked for and the directory looked in, so that whoever reads the halt can tell a wrong `` from a rule set that is not installed. `authoritative-text-rules` gets the same check in Step 2, where its firing rule has been evaluated and its presence first matters. Detect language from `/CLAUDE.md`'s `Language:` declaration — the target's, never one found beside the rule files; otherwise auto-detect from diff file extensions (`.rs` → rust, `.cpp`/`.cc`/`.cxx`/`.h`/`.hpp` → cpp, `.py` → python, `.ts`/`.tsx` → typescript, `.go` → go, etc.). Multi-language projects detect every present language; each matching addendum applies. Missing addendum → base rules only for that language (not a concern). Step 0 only **detects** the language(s); it routes nothing. Each consumer that applies `quality-list` — the Step 2 mechanical subagent and the Step 3 contextual pass — loads every matching addendum file itself. 1. **Identify the diff under audit.** The caller supplies the **root** on `diff-root`'s consumer contract; apply it here, halt included, and build the committed half by that skill's per-command conversion. Cover all four sources so recently-added implementation files are not missed: ```bash git log --oneline ..HEAD # committed git diff ...HEAD # committed content git diff --cached # staged git diff # unstaged git ls-files --others --exclude-standard # untracked paths ``` Read the contents of any untracked file relevant to the audit (paths alone do not let you check anything). 2. **Spawn the fresh-context auditors.** Authors read intent; a fresh-context subagent reads literal text — removes the doc-vs-code drift blindspot. One auditor always runs, for `quality-list`'s mechanical / literal items. A second runs conditionally, for `authoritative-text-rules`, per the firing rule at the end of this step. **This audit MUST NOT load a purely-mechanical `quality-list` item body into main context, and MUST NOT load any `authoritative-text-rules` item body there** — whether or not an earlier phase of the same session already did. Each subagent reads its own SSOT's index and the bodies it needs in its own fresh context, deriving its item set from that index; main only composes the prompts (diff + resolved paths) and dispatches. Main reads the contextual-lane `quality-list` bodies it audits in Step 3, and may read either SSOT's index — that is how Step 3 selects contextual items and how Step 4 predicts each auditor's row set. Both prompts below carry the two absolute paths Step 0 resolved; a subagent needs both. **Auditor 1 — `quality-list` mechanical lane.** Always dispatched. Use the `Agent` tool with `subagent_type: "general-purpose"` and a prompt of the following shape: ``` You are auditing a diff under the `quality-list` quality rules. You have NO access to the conversation history that produced this diff and MUST NOT speculate about author intent. Judge purely from: - the literal text of the diff (provided below) - the literal text of the relevant `quality-list` item files (read them yourself from the paths below) - the literal text of the codebase at you can read with your tools First read /quality-list/SKILL.md and consult its Items index. Select every item whose lane is `mechanical`, including the mechanical half of any dual-lane item (an entry tagged `mechanical (+ contextual half)`, e.g. ported-code-attribution). Read each selected item's /quality-list/items/.md in full and audit it. Also load every language addendum at /quality-list/lang-.md that exists for a detected project language — a multi-language diff has one per present language, and you must load them all (see Step 0 of done-check for the detection rule). Where an item body or addendum spells a detection command containing ``, substitute the revision form `diff-root` derives from the root given below, not the root itself. Return one verdict per item, from the three defined in Step 4 of /done-check/SKILL.md; read that step's verdict sentence, which states what backs each of the three. On a concern, add one thing that sentence does not ask for: the clause of the item you are applying, quoted. Whoever triages your rows may not open a purely-mechanical item's body, so an unquoted rule leaves the concern unjudgeable. Pay particular attention to `paired-artifact-drift`'s "new-comment claim sweep" and "cold-read pass" sub-rules: extract every numeric literal, identifier, property claim, and behavioral guarantee (never-raises / always-returns / totality) from new / modified comments, and verify each against the code — for a guarantee, trace every exception or non-conforming-return source in the function body, not just one representative case. Do not assume an inconsistency was "intended" — if the literal text says one thing and the code does another, that is a ⚠. For `ported-code-attribution`, grep the diff for textual signals — "ported from", "derived from", "based on", "adapted from", "from $project", and any external project name in new comments — and verify that any such signal is matched by an attribution comment naming source URL, upstream copyright, and license. If a NOTICE / THIRD_PARTY-style file is added or modified, follow the upstream URL it cites and confirm the upstream actually has the file the derivative claims to mirror. Report concisely, aiming under 600 words. Completeness of the row set outranks that: never drop or merge a row to fit, since Step 4 checks the returned slugs against the set the index predicts. - one row per item, labelled with that item's slug exactly as the Items index spells it, carrying Result + Evidence + Note - a final list of any cross-cutting concerns spanning multiple items ``` Embed only the diff, the root Step 1 was given, and the two resolved absolute paths in the prompt. The diff is all four sources Step 1 identified — committed, staged, unstaged, and the contents of every relevant untracked file. The root is what an item body's or addendum's detection command needs to name a range. **Do not embed item body text** — the subagent reads the item files itself, keeping the main context free of the rule text. **Firing rule for auditor 2.** Dispatch the authoritative-text auditor when any path in the diff could be text an agent executes as instructions — markdown paths are the usual case. **Dispatch when unsure.** The rule approximates because it has to: `authoritative-text-rules`' membership predicate is a property of a file's *content*, while a dispatch decision is available only over the diff's *paths*. No path-level test is exact, so the only real choice is which way it errs. It errs toward dispatching: a missed dispatch is an audit that silently did not happen, while a needless one costs one subagent that returns `⊘ N/A` rows. Deciding authoritatively which files qualify is that SSOT's Scope section, applied to file contents inside the subagent — main decides only whether to ask. **Auditor 2 — `authoritative-text-rules`.** Dispatched only when the firing rule fires. Verify `/authoritative-text-rules/SKILL.md` is present before dispatching, on the same terms Step 0 verified `quality-list`: absent halts the same way. Step 0 having found `quality-list` under this `` narrows the cause — the directory is the right one, so what is missing is the rule set itself. Same tool and `subagent_type`, with a prompt of the following shape: ``` You are auditing a diff under the `authoritative-text-rules` rules. You have NO access to the conversation history that produced this diff and MUST NOT speculate about author intent. Judge purely from: - the literal text of the diff (provided below) - the literal text of the `authoritative-text-rules` item files (read them yourself from the paths below) - the literal text of the codebase at you can read with your tools, including any file the audited text references as rule content First read /authoritative-text-rules/SKILL.md. Consult its Items index; the items you must return a row for are exactly the ones listed there. Then apply its Scope section to every path in the diff and keep the files that qualify as authoritative text. If none qualify, return one ⊘ N/A row per indexed item and stop. Otherwise read each indexed item's /authoritative-text-rules/items/.md in full before auditing it. Audit only the qualifying files. A diff that also carries code is audited for that code under a separate rule set you are not running here; do not report on it. Return one verdict per item, from the three defined in Step 4 of /done-check/SKILL.md; read that step's verdict sentence, which states what backs each of the three. On a concern, add one thing that sentence does not ask for: the clause of the item you are applying, quoted. Each item's Sweep is a procedure, not a description: run it and report what it turned up. Where an item states a tie-break against a sibling item, apply it rather than reporting the same defect twice. Report concisely, aiming under 600 words. Completeness of the row set outranks that: never drop or merge a row to fit, since Step 4 checks the returned slugs against the set the index predicts. - one row per item, labelled with that item's slug exactly as the Items index spells it, carrying Result + Evidence + Note - a final list of any cross-cutting concerns spanning multiple items ``` Embed the same four-source diff and the same two resolved paths. **Do not embed item body text.** Each dispatched subagent runs in parallel with main-context step 3 below; do not block waiting on any of them unless step 4 requires the result. 3. **Audit the contextual items in main context.** Read `/quality-list/SKILL.md`'s Items index and select every item whose lane is `contextual`, including the contextual half of dual-lane items (an index entry tagged `mechanical (+ contextual half)`, e.g. ported-code-attribution). These need information the subagent does not have — plan / intent / review history, or actual command execution against the working tree. The groupings below are non-exhaustive illustration; the index is the authoritative set: - `invariant-derivation`, `purpose-verification`, `scope-discipline`, `discovery-surfacing` — need plan / intent / review history - `escape-hatch-necessity` — needs design intent and codebase context to judge whether a direct fix could replace the workaround (a workaround's *presence* may be grep-visible, but its *necessity* is not literal-text-decidable) - `test-execution`, `completion-hygiene` — need actual command execution against the working tree - `pattern-audit` — needs awareness of which patterns were consciously copied vs independently reinvented - `docstring-drift` — needs the diff's behavior-change context plus an execution probe when the changed behavior is library-owned For each selected contextual item, `Read` the corresponding `/quality-list/items/.md` file; if a detected language has an addendum section for that item (per Step 0 — e.g. `escape-hatch-necessity`'s Rust realization in `lang-.md` carries the concrete trigger / detection / mitigation guidance), read every such section too; this contextual pass self-loads every matching addendum itself, one per detected language (Step 0 only detects the languages). Which bodies this pass may open is Step 2's prohibition, stated there and not restated here. `ported-code-attribution` is dual-lane: the subagent handles the *declared* case (literal grep for "ported from" / "derived from" / external project names → verify attribution); main context handles the *undeclared* case where the conversation history shows research surfaced an external implementation that the diff structurally mirrors but no comment names. If research identified an upstream reference and the diff looks like it followed it, demand attribution even if no comment marks the port. Read `/quality-list/items/ported-code-attribution.md` for both halves. Mark each as **✅ pass**, **⚠ concern**, or **⊘ N/A** with evidence as in step 4 below. 4. **Merge results.** When each dispatched subagent (step 2) returns, check its coverage first — the merge below runs only on returns that passed. Then integrate three row sources into a single table: auditor 1's `quality-list` mechanical-lane rows, main-context's contextual-lane rows, and — when auditor 2 was dispatched — its `authoritative-text-rules` rows. One row per item; dual-lane items render once with both half-results merged. **Coverage check on the returned rows.** Run it for each auditor that was dispatched, against the slug set that auditor's own SSOT index predicts: for auditor 1, every `mechanical`-lane slug in `/quality-list/SKILL.md`'s Items index, including the mechanical half of a dual-lane entry; for auditor 2, every slug in `/authoritative-text-rules/SKILL.md`'s Items index. Read each set from its index at run time — the index, never an item body, and never a slug list written into this file. A return that is exactly one row per predicted slug and no others passes. Any other return — a slug missing, duplicated, or outside the set — gets one re-dispatch of that auditor with its prompt unchanged. If the second return still does not match, surface to the user, naming the offending slugs; do not proceed with that lane incomplete, and do not emit the table. However it failed to match, the return is not the row set the domain needs: a missing slug leaves the domain unfillable outright, and a duplicated or out-of-set row says the auditor worked some set other than the one predicted, so none of what it returned is known to cover that set. Main context's contextual-lane rows take no such check. The check compares a returned set against one main predicted, and main's own rows arrive by no return — it selects them from the very index a prediction would be read from, so there is nothing for the comparison to hold apart. That holds whatever the report shape, delta runs included. For each ⚠ from either subagent, decide — this is the `finding-triage` SSOT's `actionable` / `false-positive` split applied to a fresh-context audit concern: - **True positive** (`actionable`) — fix before proceeding (same as a main-context ⚠). - **False positive due to missing context** — note explicitly why (e.g., "user explicitly approved the boundary deferral in conversation"); the subagent's literal interpretation is wrong because it lacked context, but this should be rare and worth paper-trailing. Per `finding-triage`, do NOT silently override — false-positive classification is itself a triage step that the user can challenge. The rule clause a subagent row quotes is what main context judges the ⚠ against, and in step 5 what it fixes against, for every row whose body step 2 forbids this audit to load into main context. `ported-code-attribution` falls outside that: step 3 opens its body here. When a row that needs a quoted clause carries none, re-dispatch that auditor once with its prompt unchanged; its return replaces the first, as an unmatched coverage check's does. If the replacing return raises the same ⚠ and still quotes no clause, leave the row ⚠ with that noted, and close it through step 5 like any other. **The verdicts.** Every result, whatever its source, is exactly one of **✅ pass** (concrete evidence that the rule is satisfied), **⚠ concern** (the location and the literal text that violates the rule), or **⊘ N/A** (the item's own N/A criterion as stated). This sentence is the only definition; Step 2's prompts send subagents here rather than restating it. Evidence cell records the basis (command run, manual check, `file:line`, or `not run: `). **Cross-cutting concerns.** Each auditor also returns concerns spanning several items. They are not rows and do not enter the row domain, but step 5 binds them exactly as it binds a ⚠ row: each must be resolved, waived, or closed as a recorded deferral before proceeding. Report them under the table. 5. If any ⚠ remains, fix before proceeding. State concretely what will change. Do not proceed until each concern is resolved, explicitly waived by the user with reasoning, or closed as a recorded deferral per `finding-triage`'s `defer` — a follow-up issue filed with the user's approval. A deferral closes the concern's handling, not its verdict: the row stays ⚠ with the deferral recorded in its Note. 6. Report the audit table, followed by any cross-cutting concerns and their triage. Only a run that reaches this step emits a table at all: every halt above — a rule set that is not under ``, a coverage check still unmatched after its re-dispatch — ends the run without one, however many such halts the steps above come to hold. Delta mode narrows this report rather than removing it (below). ## Output format ``` self-audit: | Item | Result | Evidence | Note | |-------------------------------|--------|-----------------------------------------|------------------------------------------------| | invariant-derivation | ⚠ | read: src/foo.rs:42 | | | behavior-coverage | ✅ | cargo test (incl. error_path tests) | | | test-execution | ✅ | cargo test: 84 passed, 0 failed | | | docstring-drift | ⊘ N/A | | diff is text-only; no behavior change | | ported-code-attribution | ⊘ N/A | | no external code ported | ``` The table's row domain is every item in the `/quality-list/SKILL.md` Items index, in index order, followed — when step 2's firing rule dispatched auditor 2 — by every item in the `/authoritative-text-rules/SKILL.md` Items index, in that index's order. One row per item, and no rows outside the two domains. The rows above illustrate the format and the result vocabulary (✅ pass / ⚠ concern / ⊘ N/A), not the full set. Dual-lane items render once with both half-results merged. Each block is generated from its own index, never maintained as an independent list. That domain is the full report's. Delta mode renders a subset of it, per the exception below, and a halted run renders none of it, on the terms step 6 states. ## Delta mode A caller may ask for the audit in **delta mode**. The narrowing is of the report, not of the audit: every step above runs in full, and the step 5 gate binds every ⚠ and every cross-cutting concern this audit produced, reported or not. The baseline is an input, not a memory. This skill records nothing between runs, so the caller asking for delta mode supplies the earlier audit's rows and concerns with the request — it holds them, having received them. Asked for delta mode with no baseline, the run reports in full. Against that baseline, report: - every row whose verdict differs from it, - every ⚠ this audit raised that the baseline does not carry, - every cross-cutting concern this audit returned. This is the exception to the row domain above: a delta report carries only these rows, not one per indexed item. A disposition the baseline records carries forward only when the concern is the same one — the item, the location, and the literal text cited as violating the rule all unchanged. Anything else is a new ⚠ and takes fresh triage, however the verdict reads. Keying on the verdict alone would let a fresh concern inherit a deferral granted to a different one.