verify-the-premise — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited verify-the-premise (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Never assume. Decide, suggest, and act on data — observed behavior, real code, actual output — not on what you or anyone expects to be true.
This is a behavior, not a step you do once. Before you act on a belief, ask: do I know this, or am I assuming it? If assuming, verify first.
NEVER ACT ON AN ASSUMPTION — READ IT, RUN IT, OR TRACE IT FIRST.
A premise and a conclusion can each be independently right or wrong. A correct conclusion drawn from a wrong premise is luck; a wrong conclusion from a correct premise is a missed fix. Check the premise and the conclusion against reality before acting on either.
Say so. State the assumption explicitly, what would confirm it, and the risk if it's wrong — then let the decision account for the uncertainty. An unverifiable premise that is flagged is safe; an unverified premise acted on silently is the failure.
| Thought | Reality |
|---|---|
| "I'm pretty sure this function does X" | Pretty sure is a guess. Read it. |
| "The docs/comment say it works this way" | Docs drift from code. Trust the code. |
| "The lower layer already handles it" | Confirm which layer, on THIS path, before relying on it. |
| "This branch is obviously dead" | Confirm what this source actually emits before deleting it. |
| "It worked last time, so it works now" | Last time is not this time. Observe it. |
Pairs with: bardak:blind-review and bardak:pipeline-verification (verify each finding and the real path before acting), and bardak:no-silent-errors (confirm a fault path is real, not assumed).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.