enriching-roadmap — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited enriching-roadmap (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Enriches a confirmed structural roadmap so every chunk becomes self-contained enough for a developer-agent to begin work — adding acceptance criteria, pattern references, and contextual notes without modifying any structural field decomposing-work produced.
Position: decomposing-work (ROADMAP.md structural) → enriching-roadmap (acceptance criteria, pattern refs, notes) → planning-software (orchestration plan).
Inputs: confirmed ROADMAP.md; approved ARCHITECTURE.md (source for pattern references and component context); PRD.md (source of testable success criteria); workflow tier; optionally .interface-design/system.md — if present, derive design-specific acceptance criteria for UI chunks. If the tier was not specified, infer from the roadmap (1-3 chunks = Quick, 4-8 = Standard, 9+ or phased DAG = Thorough), state the inference, and proceed.
Output: the same ROADMAP.md, modified in place — three fields appended to each chunk (Acceptance criteria, Pattern references, Contextual notes). Do not alter existing fields (Type, Component, Status, Size, Depends on, Files, Description). Present the enriched roadmap for human review before treating it as the working baseline.
Not covered: chunk structure and dependencies (decomposing-work), plan creation (planning-software), technology-specific implementation guidance (developer-agent skills).
Read PRD.md, ARCHITECTURE.md, and ROADMAP.md fully before writing anything. Build a working map of: PRD success criteria; architecture components and their responsibilities; what chunk-001 (walking skeleton) established (the primary pattern reference for all subsequent chunks); and, Thorough only, which ADRs constrain which chunks.
One tier across the entire roadmap — never mixed per chunk.
| Tier | Acceptance criteria | Pattern references | Contextual notes |
|---|---|---|---|
| Quick | Not invoked — orchestrating-software-dev skips enrichment for Quick. If invoked directly, 1-2 per chunk | Not invoked | Not invoked |
| Standard | 2-4 per chunk — full coverage of chunk scope | Required — point to walking skeleton or prior chunks | Reference relevant ARCHITECTURE.md section |
| Thorough | 3-5 per chunk — coverage + edge cases and error paths | Required — point to walking skeleton or most relevant prior chunk | ARCHITECTURE.md section + ADR references + cross-chunk integration notes where chunks interact |
Process in roadmap order (Phase 0 first).
Acceptance criteria:
Pattern references (Standard and Thorough):
src/api/handlers/health.ts"Contextual notes (Standard and Thorough):
Fix gaps, then present to the human.
Append after the existing Description field — never between existing fields.
Standard tier:
**Acceptance criteria:**
- <Primary testable outcome>
- <Error path or boundary condition>
- <Integration assertion where relevant>
**Pattern references:**
- Follow the handler pattern at `<path>` (established in chunk-001)
**Contextual notes:**
- See ARCHITECTURE.md > <Section name>Thorough tier:
**Acceptance criteria:**
- <Primary testable outcome>
- <Error path — invalid input or external failure>
- <Boundary condition>
- <Integration assertion>
**Pattern references:**
- Follow the adapter pattern at `<path>` (established in chunk-00N)
**Contextual notes:**
- See ARCHITECTURE.md > <Section name>
- Constrained by ADR-00N (<decision title>)
- Integrates with chunk-00N (<chunk title>) — <specific integration point to verify>Walking skeleton has no prior patterns: write "No existing pattern — chunk-001 establishes the foundational pattern. Subsequent chunks follow this structure." Acceptance criteria focus on the end-to-end traversal the skeleton must prove.
PRD lacks success criteria for a chunk's scope: derive from that component's architecture constraints and note the source: "Derived from ARCHITECTURE.md > \<Section\> (no direct PRD criterion)."
Cross-cutting concern chunk (logging, error handling): assert observable system-level behaviour, not implementation detail — "All unhandled exceptions produce a structured log entry with request ID", not "Logger is wired to the exception handler."
Thorough tier, no ADRs exist: omit ADR references — never fabricate them.
Brownfield with competing patterns: point to the architecture's designated target pattern and flag the legacy: "Follow the pattern at <new path>. Existing code at <legacy path> uses the old pattern — do not replicate it."
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.