lesson — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited lesson (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
After fixing a bug, resolving an incident, or discovering an important pattern, record it for future sessions.
memory/pipeline-ops.mdmemory/data-quality.mdmemory/ui-navigation.mdmemory/mcp-server.mdmemory/lessons-learned.mdMEMORY.md (keep under 200 lines)Before picking a doc tier at all, ask whether this should be a CHECK. A doc only works if the next person reads it at the moment it applies, and that is a weak bet: measured 2026-08-21, three of four findings in one session were classes where the doc already existed and the thing recurred anyway (#4163, #4190). If you can name the file or symbol that must hold the property, prefer a sweeping test, a detector that files what it finds, or a constructor that throws — and let the doc be one line pointing at it. Run the negative control first (invariants/tests-that-are-not-guards.md): delete the guarded line, watch it go red, restore it. Keep prose for lessons about judgment, which cannot be asserted.
If it rises to an invariant — a rule whose violation already cost real damage — pick the tier deliberately:
CLAUDE.md (budget: ~5,500 wordsby wc -w; over it, demote something to invariants/ first).
.claude/docs/invariants/<name>.md, plus a one-line trigger entry in CLAUDE.md's routing table. If you can name the file or subsystem that triggers the rule, it belongs here — this is the common case.
- **Short description (YYYY-MM-DD):** What happened, what the fix was, and the general rule to follow going forward.(verify).(snapshot, may be stale) if not already marked.Good entry:
- **Lambda timeout on large books (2026-03-13):** Books with >500 pages can exceed Lambda 15min timeout. Split into chunks of 400 pages max. See `src/lib/lambda-queue.ts:128`.Bad entry (no date, no rule):
- Fixed the Lambda timeout issue.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.