long-task-continuation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited long-task-continuation (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Keep long work checkpointed, resumable, drift-aware, and evidence-gated. This protocol does not execute plans, dispatch subagents, run tests, or grant completion authority.
The Method Pack owns continuation discipline only. It does not own the parent plan, host retry/watchdog behavior, authoritative GateDecision, evidence sufficiency, requirement acceptance, or completion.
Use this skill when the work has meaningful phases, may be compacted/resumed or handed off, uses subagents, or explicitly needs continuity and drift control. Architecture, contract, shared-workflow, and verification-gate changes also benefit from it. Do not force it onto a short answer or one-command check.
Choose exactly one state carrier:
work/ record formedium/high work, or for work of any complexity that actually crosses sessions, needs handoff, or requires resumable state;
Multi-step, todo-driven, possible-compaction, and subagent use do not force durable records for low-complexity work by themselves. Do not create both carriers or a record per slice.
A durable task has one process trail under docs/aegis/work/YYYY-MM-DD-<slug>/. It keeps logical intent/baseline state, the latest todo/checkpoint/resume state, terminal evidence/drift state, and a completion reflection when warranted. These are TaskIntentDraft, BaselineReadSetHint, BaselineUsageDraft, ImpactStatementDraft, TodoCheckpointDraft, ResumeStateHint, DriftCheckDraft, and EvidenceBundleDraft views—not authoritative runtime records or separate plan owners.
Read only the lifecycle-matched section of durable-work-guidance.md:
## Required Artifact Layout and ## Create A Durable Work Record for a new durable work record;## Update A Slice when an existing helper-backed record needs sidecar updates;## Retry Convergence Detail for retry/attempt bookkeeping;## Pause, Handoff, And Completion Bundle when preparing a pause, handoff, or completion bundle; and## Expanded State Fields only when natural checkpoint prose is ambiguous.The reference owns artifact layout and <aegis-workspace-helper> command detail; this file owns carrier selection, resume order, drift decisions, and stop conditions.
An Execution Readiness View may be kept in the intent or active checkpoint for medium/high, handoff-prone, long-running, subagent-driven, architecture, contract, compatibility, or retirement-sensitive work. It renders existing intent, scope, baseline, owner, test, review, and drift constraints; it is not a new JSON artifact or completion authority.
Planless Slice Lane:
current checkpoint. For a no-parent direct bounded request with no new durable or unclear verification boundary, use an inline checkpoint.
Slice Card: Goal, Parent plan/spec (ornone — direct bounded request), Files, Boundary, Verification, and Stop.
or direct bounded request through verification-before-completion.
create per-slice plans/specs or work records.
migration, persistence, security/permission, distribution/release surface, unclear verification boundary, or mismatch with parent scope or acceptance appears.
When durable architecture decisions are in scope, these work records are the preferred ADR Auto Backfill source. Preserve decision signals, source refs, alternatives, compatibility, retirement, drift, and baseline-sync questions.
Before execution:
evidence, and stop states (done | blocked | needs-verification | scope-exceeded).
refs. Missing authority pauses in needs-baseline-readback.
completed slices/evidence, blockers, next step, and current branch/HEAD.
Execution Readiness View exists, retain its intent lock, scopefence, baseline lock, compatibility/retirement boundary, tests, reviews, evidence, and rewind rules.
durable-work-guidance.md to create andstructurally check it before implementation.
A failed verification is another attempt in the current slice, not a new slice. Keep failed-attempt telemetry out of terminal evidence and normal commits. Only evidence-finalized, blocked, or abandoned is terminal. When retry state reaches process-artifact-pressure, stop auto-retry and route to systematic-debugging or verification-before-completion. Load the durable reference only when the attempt/evidence commands or sidecar rules are needed.
Before each slice, state the current goal/todo, intended edits, explicit non-edits, verification, and readiness alignment. A bounded parent-plan or no-parent slice uses the compact Slice Card rather than a new plan/spec.
After each slice, update completed todos, evidence refs, newly used baseline refs, blockers, next step, and drift decision. When an active helper-backed work record exists, read durable-work-guidance.md and update that same record; never create another workstream for bookkeeping.
When patch-shape/ripple triage, an H-class finding, or a bounded compatibility mitigation fired, a locally green result does not clear the direction. Retain PatchShape, CanonicalOwner, UpwardDrillSignal, latest outcome, and one bounded evidence ref; do not copy raw logs or full diffs. If no fresh evidence exists, the state is needs-verification or partial. For repairs or optimization, retain the causal scope, evidence references, unresolved influences that could change the solution, and verification coverage in the same checkpoint. Compression must not turn one confirmed cause into a complete root claim or erase counterevidence; recheck these unknowns before resuming retained changes. Do not add a parallel causal record.
Resume in this order:
Reconcile current user instructions: continuation, amendment, pause, or replacement. Preserve outstanding deliverables; update authorized scope before treating a valid amendment as drift. Internal milestones are not substitutes for the user's delivered result.
CONTEXT.md language.Execution Readiness View when present.with the current worktree. Treat inherited completion claims as unverified until the worktree confirms them. Correct contradictions in the checkpoint, disclose them in the final report, and do not republish stale claims as current. Preserve the claim's subject, scope and resume-time state; distinguish that from later repair and from historical execution you cannot verify. One accurate correction may cover related claims. The record must adopt it, without elsewhere denying it or assigning it to another scope. A reviewer's classification is contestable: if material disagreement remains unresolved after checking evidence, retain needs-verification without forcing assent. If evidence resolves it, retain the supported conclusion and verify normally.
compatibility/retirement boundary, tests, reviews, and non-goals.
Any disagreement among plan, checkpoint, baseline, context, readiness view, or worktree pauses execution. A semantic conflict routes to establishing-project-context; an unplanned repair re-reads the retained invariant, owner seam, patch shape, and causal topology, then route comparison to systematic-debugging. A new carrier name alone does not prove a new direction. Never resume from memory alone.
Check original intent and stop condition, parent scope/acceptance, compatibility, new owners/fallbacks/adapters/branches, retirement, evidence freshness, and any readiness locks. Allowed decisions are continue, pause-for-user, needs-baseline-readback, needs-verification, and blocked.
Never emit gate-passed, completion-granted, or authoritatively-safe.
Before a completion claim:
aegis:verification-before-completion.covers acceptance, and drift has no blocking state.
durable-work-guidance.md for the completionbundle and structural workspace check.
to verification for ADR Backfill Check.
Generated packs are future-runtime inputs only. Method Pack output remains verified evidence and advisory judgment, not authoritative completion.
Report naturally and omit empty structures. Keep these semantic slots visible: Aegis Visibility; current todo/active/completed/next; baseline usage decision; readiness state when present; fresh evidence; inherited-claim corrections when a resumed record overstated its state; retry/convergence state when relevant; drift decision; risk/unknown; and the next smallest safe action.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.