name: aoa-invariant-coverage-audit
scope: core
status: canonical
summary: Audit whether existing validation or proof surfaces actually cover the stable invariants that matter, and identify the smallest bounded gaps that still leave example-only coverage too thin.
invocation_mode: explicit-preferred
technique_dependencies:
- AOA-T-0017
aoa-invariant-coverage-audit
Intent
Use invariant-oriented coverage to judge whether an existing validation or proof surface really constrains the stable truth, and turn that judgment into a bounded audit package instead of a loose example review.
Trigger boundary
Use this skill when:
- an existing test, check, schema, fixture, generated/export parity check, report, receipt, or proof surface needs a review for invariant strength
- the question is whether current checks really constrain the stable rule
- you need to turn a loose example set into a bounded coverage audit
- you want an audit result that names the gap, not just the invariant
- a validation surface may look broad, but its claim limits and blind spots need review
Do not use this skill when:
- the main problem is defining the invariant itself rather than auditing coverage; use
aoa-property-invariants first - the invariant itself is still unknown and you need discovery work first
- the task is mostly about presentation details or a narrow snapshot
- you need a full boundary contract review rather than a coverage audit
- target rule or stable truth
- current tests, checks, schemas, fixtures, reports, generated parity checks, proof reports, or examples
- known edge cases and stress cases
- the input space or states that matter most
- known claim limits or downstream surfaces that rely on the invariant
Outputs
- invariant coverage map
- gap list for weak or missing checks
- bounded follow-up checks or revisions
- concise verification summary
- audit verdict on whether coverage is strong enough for the current stable truth
- claim-limit notes that say what the current validation surface does not prove
Procedure
- name the stable truth in plain language
- map each existing check to the invariant it constrains
- when the validation surface is not an ordinary test suite, choose the smallest useful shape from
references/coverage-audit-shapes.md - mark weak, redundant, or missing coverage
- add only bounded cases that strengthen the weakest invariant first
- separate the audit result from any invariant-authoring work that should happen elsewhere
- report what the suite or validation surface now proves and what it still does not
Contracts
- every claimed invariant must be traceable to at least one check
- the audit should distinguish real constraint from mere example repetition
- schema, report, generated, fixture, and proof surfaces should be audited by the stable claim they constrain, not by how complete they look
- the result should stay reviewable without sprawling into a full test strategy
- the skill should stay an audit package rather than a general testing doctrine
- the output should make the next coverage move obvious
- claim limits should remain visible when downstream readers may over-trust the surface
Risks and anti-patterns
- counting examples as if they were invariants
- letting random data hide thin coverage
- treating schema validity, report completeness, or generated freshness as proof of the underlying invariant
- widening into generic test design or full suite architecture
- making the audit so abstract that no one can act on it
- drifting into invariant authoring when the task is really coverage review
- turning the audit into a generic quality sermon instead of a bounded package
Verification
- confirm each core invariant is named and mapped to a check
- confirm the coverage gap list is specific and bounded
- confirm non-test validation surfaces are judged by their constrained claim and claim limit
- confirm another human can follow why the existing surface is or is not sufficient
- confirm the result names the next bounded follow-up, if one is needed
- confirm the skill reads like an operational audit rather than a plain technique lift
Technique traceability
Manifest-backed techniques:
- AOA-T-0017 from
8Dionysus/aoa-techniques at fbead87e01b82df6c56e3d92a074cd7515131847 using path techniques/proof/skill-support/property-invariants/TECHNIQUE.md and sections: Intent, When to use, When not to use, Inputs, Outputs, Core procedure, Contracts, Risks, Validation
Adaptation points
Project overlays should add:
- local test or check commands
- domain-specific invariants and edge cases
- local schemas, generated parity checks, proof reports, receipts, or fixture families that should be audited through
references/coverage-audit-shapes.md - notes on where coverage gaps are recorded
- rules for when a coverage audit should escalate into a deeper review