pattern-retrospective — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pattern-retrospective (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You're producing a study / blog post / handoff / spec / retrospective that draws conclusions from Bryce's past Claude sessions. Apply this rigor before publishing.
The chat-arch v2 Rev 3 plan describes the substrate that will eventually automate this. Until that ships (the chat-arch repo's _planning/chat-arch-v2-rev3-plan.md), you are the curator, falsifier, and substrate. The outputs you write become the seed data when chat-arch's automation lands — write them so they're machine-readable later.
Before specifying any external system's requirements, audit that system first.
If you're writing a "handoff to X" / "spec for X" / "improvements to X" / "what X should do" document, spend 30 minutes reading X's code, locked spec, and CLAUDE.md before writing. Lead the document with a "Context: what already exists in X" section. If you can't write that section, you can't write the document.
This applies recursively. When you cite a fact about an external system, verify it the same way you'd verify any other agent's cited claim. "X already does Y" is a falsifiable claim — falsify it before relying on it.
Why this rule exists: the May 2026 handoff to chat-arch failed this check. Roughly 60% of its proposed "chat-arch requirements" already existed in the chat-arch codebase — Phase 1's log-location discovery, Phase 3's false-positive filter, Phase 6's external verification, Phase 7's aggregate metrics, and the "MVP pattern-retrospective view" overlap with the Playbook page. None had been audited. See the chat-arch repo's _planning/handoff-feedback-2026-05-22.md for the full critique. Don't repeat that.
Bryce's transcripts live in two corpora. Searching only one misses ~10× the data.
Corpus 1 — Claude Code CLI:
~/.claude/projects/<encoded-cwd>/<sessionId>.jsonl (main sessions)~/.claude/projects/<encoded-cwd>/<sessionId>/subagents/agent-*.jsonl (subagent transcripts — sibling to parent, NOT at the same level)Corpus 2 — Cowork (Claude Desktop local-agent-mode):
%AppData%\Claude\local-agent-mode-sessions\<org>\<user>\<sessionId>\agent\local_ditto_<sessionId>\audit.jsonl (top-level audit)<local_cwd>/audit.jsonl (per-cwd audit — PRIMARY user-prompt source)<local_cwd>/.claude/projects/-sessions-<processName>/<cliSessionId>.jsonl (CLI subprocess sessions)<local_cwd>/.claude/projects/<encoded-output-path>/<sessionId>.jsonl (output queue — CANONICAL source for typed text via queue-operation enqueue events)<local_cwd>/.claude/projects/.../subagents/agent-*.jsonl (subagent transcripts)macOS path swap: ~/Library/Application Support/Claude/.... The Cowork directory is migrating to claude-code-sessions; both names may coexist.
Five shapes appear in type:"user" lines. Misclassifying the wrong ones is the primary source of false positives.
KEEP — typed user prompt (CLI shape, content is an array):
{type:"user", message:{role:"user", content:[{type:"text", text:"..."}]}, timestamp}
KEEP — typed user prompt (Cowork audit shape, content is a string):
{type:"user", message:{role:"user", content:"..."}, _audit_timestamp}
KEEP — queue-enqueue event (Cowork output, CANONICAL):
{type:"queue-operation", operation:"enqueue", content:"...", timestamp}
DROP — tool result wrapped as user (assistant's tool output):
{type:"user", message:{role:"user", content:[{tool_use_id:"...", type:"tool_result"}]}}
DROP — task-notification wrapper (subagent task descriptor, NOT user-typed):
{type:"user", message:{role:"user", content:[{type:"text", text:"<task-notification>..."}]}}Also drop: text starting <task-notification>; cat-n format output (\n 1\t...); top-level type:"attachment"; type:"system"; isSidechain:true; isApiErrorMessage:true; subagent transcript root files (first line is the task description TO the subagent, not user text).
Without this filter, the term "adversarial" returned 217 hits across Cowork; with it, ~71 real user-typed deploys. Both numbers are correct — they're counting different things. Use the right one.
Cowork transcripts can hit 18MB; subagent files run 250KB × 5–40 per session. Loading whole files into LLM context will fail (this is what broke 11 of 12 sessions in the May 2026 study).
Read line-by-line. Capture only:
A streaming extractor produces a complete 5-tuple per session in seconds at any file size. Reference Python: extract_cowork_5tuple_v2.py in scripts/.tmp/adv-study/ if one was committed there.
Critically: this is an LLM-context-window problem, not a Node-heap problem. Don't conflate the two when writing about it for other systems.
For each pattern invocation:
{
dispatch: { promptText, sessionId, timestamp, cwd },
findings: [{ sourceSubagentId, findingNumber, description, severity?, domain? }],
validations: [{ findingNumber, verdict: confirmed|rejected|ambiguous|no_validation,
userMessageRef?, inferredFromAction? }],
actions: [{ type: commit|edit|pr_comment|ignored, targetFinding, detail, timestamp? }],
outcome: { state: converged|abandoned|hit_cap|continued,
iterationsRun, finalUserSentiment?, shippedArtifact? }
}Tag every field with provenance at write-time:
deterministic — parsing-rule extraction (timestamps, sessionIds, action types, commit hashes from tool calls)llm-derived — read-and-classify (description, severity, sentiment, validation verdict)inferred-from-action — implicit (user moved on without explicit yes/no; treat as weak signal)falsifier-verified — passed an independent verification pass against ground truthThis is the discipline that distinguishes a real retrospective from a credulous one.
| Claim type | Verification | |
|---|---|---|
| Commit hash | `git -C <repo> log --oneline \ | grep <hash>` — exists or not |
| PR number | gh pr view <num> — exists, state matches claim | |
| URL | WebFetch or curl -s <url> — page exists, content matches the citation | |
| File:line reference | Read the file — line says what's claimed | |
| External fact | Web search or fetch authoritative source | |
| Math claim | Recompute from source numbers | |
| Claim about external system | Read the system's spec, CLAUDE.md, key source files. Don't speculate. |
The May 2026 adversarial-subagent study found:
1e00c87, b91ced — neither in repo, dropped)Without falsification, all four would have shipped as fact.
Apply the same rigor to your own document. "X already does Y" is the most-skipped category — the May handoff cited several "chat-arch already does Z" claims that weren't checked. They turned out to be wrong about the existing state of chat-arch.
When summarizing patterns across sessions:
confidence = supporting / (supporting + contradicting + 2)| Evidence | Confidence | Interpretation |
|---|---|---|
| 1 supporting / 0 contradicting | 0.33 | Candidate — NOT "always" |
| 2 / 0 | 0.50 | Pattern emerging |
| 6 / 0 | 0.75 | Validated — eligible for proposed-rule status |
| 6 / 1 | 0.67 | Validated stays just below the promote threshold |
| 12 / 1 | 0.80 | Strong evidence |
Never write "X always happens" from a single observation. The +2 smoothing prevents the overclaim. Match writeup confidence to the evidence smoothing.
When a pattern correlates with good outcomes:
Every retrospective document carries:
[deterministic] / [llm-derived] / [falsifier-verified] / [user-confirmed] near every load-bearing number or claim.Progressive disclosure for high-count example lists: "Show 3 of 61 examples" pattern. Don't flood the page.
Don't ship the document until every answer is "yes":
If any answer is "no," the document isn't ready. The recursive falsifier-on-self is item 7 — it's the discipline that would have caught the May handoff.
Save outputs into structured locations so they're addressable when chat-arch's automation lands:
research/studies/YYYY-MM-DD_<topic>.md_planning/<topic>.md (in the repo of the target system, not this one)research/studies/_data/<study-id>/5-tuples/<timestamp>_<sessionId>.jsonresearch/studies/_data/<study-id>/inventory.csv or .jsonWhen chat-arch v2 Rev 3 ships, these become seed data. Keep them machine-readable.
If a document feels like it's writing itself faster than you can verify its claims, you're probably being credulous. Symptoms:
Slow down. Run §6 falsifier on your own draft. Audit any external systems mentioned in §1. Re-check the math. Confident-and-clean is not the same as correct.
This workflow is what chat-arch v2 Rev 3 (the chat-arch repo's _planning/chat-arch-v2-rev3-plan.md) will eventually automate. Until that ships:
When chat-arch v2 Rev 3 lands, the curator-agent + falsifier-agent + provenance-tagged Narrative entity will absorb these responsibilities. Until then, the discipline is yours to enforce manually. Write outputs in a shape that maps cleanly to the future substrate (the 5-tuple structure in §5 was designed for this).
lib/cowork_filter.py helper (shipped with this skill). Mirrors chat-history-search's §3 filter rules; iterates Cowork + CLI corpora; yields parseable prompts. (chat-history-search itself currently outputs human-readable markdown only; the helper is the programmatic-consumption answer until chat-history-search adds --output-format jsonl — separate proposal.)/review-loop against the commit that landed the report. Pattern-retrospective does NOT automate this invocation; the skill's workflow ends with "Report drafted at <path>; commit and run /review-loop for adversarial review." Do NOT copy review-loop's agent definitions into this skill — drifts toward Option B merge (user rejected).lib/repeat_detector.py).<project-root>/research/studies/<study-id>/_methodology.md. Pre-register 2-3 expected patterns. python ~/.claude/skills/pattern-retrospective/lib/follow_up_check.py \
--project-root <path-to-project>Review pending findings; update follow_up_status before proceeding. A finding that a later row supersedes is treated as closed and is not listed (the registry is append-only, so the superseded row itself keeps whatever status it was written with). The summary line counts what was hidden; add --include-superseded to see those rows. Everything else fails open: an unrecognized follow_up_status counts as OPEN and is listed with a warning, never dropped, because losing an open finding is worse than showing a stale one.
python ~/.claude/skills/pattern-retrospective/lib/repeat_detector.py \
--new-claim "<text>" \
--scope this-project \
--project-root <path>Optionally rerun with --scope all for cross-project repeats.
python ~/.claude/skills/pattern-retrospective/lib/register_finding.py \
--project-root <path> \
--retro-path <path-to-retro.md> \
--project <slug> \
--category <tag> \
--claim "<text>" \
--evidence-supporting 5 --evidence-contradicting 0 \
--proposed-action "<text>" \
--target-date 2026-06-30--confidence is optional and is best omitted, so it is computed from the counts by the §7 formula. If you pass it, it must agree with the counts or registration is refused: a row whose confidence contradicts the evidence stored beside it overstates that evidence to every later reader. When the finding resolves or corrects an earlier one, add --supersedes <finding-id>; that link is what closes the older row. Commit the registry after registering. If it is git-tracked, the new row is uncommitted until you do, and a git restore or branch switch throws it away without a word. The script prints the exact commit command; run it.
Requires ANTHROPIC_API_KEY env var. Use --dry-run-no-api to smoke-test without calling the API.
python ~/.claude/skills/pattern-retrospective/lib/dual_llm_coder.py \
--items <subsample.jsonl> --coding-prompt "<text>"Block publish at α<0.80; mark exploratory at 0.67-0.79; publish at ≥0.80.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.