orchestrating-software-dev — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited orchestrating-software-dev (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill is the orchestrator's handbook for running software projects using rageatc-code-oss. It defines which tier to select, which agents and skills to invoke at each lifecycle stage, and how to respond to every decision point along the way.
The orchestrator coordinates; agents execute. How agents do their work is in their preloaded skills and agent definitions — never restated here.
Four stages are executed directly by the orchestrator rather than delegated to agents:
These are deliberate exceptions to the "orchestrator coordinates, agents produce" default. The justification is context fidelity: these artefacts depend on holding the full project picture simultaneously, and delegating them would mean either duplicating massive context or risking the agent missing connections. If context window limits become a constraint, session resumption via project files (ORCHESTRATION-PLAN.md, ORCHESTRATION-LOG.md) is the safety net.
This skill covers:
This skill does NOT cover:
Select the tier before invoking any agent. It governs depth at every subsequent stage.
| Tier | Use when |
|---|---|
| Quick | Bug fix, small isolated change, 1-3 files, no new architectural decisions |
| Standard | New feature, moderate complexity — this is the default |
| Thorough | Greenfield project, cross-cutting change, complex system, multiple components |
Default is Standard. Choose Quick or Thorough only when the project characteristics clearly match. When in doubt, start Standard and note the choice in the orchestration log.
Signals for Quick: Single component, reversible, no new dependencies, scope is clear without upstream work.
Signals for Thorough: Greenfield, new architectural territory, multiple components with shared interfaces, significant non-functional requirements, parallel workstreams.
Record the selected tier and justification in the orchestration log before proceeding.
rageatc-code-oss sits downstream of rageatc-core-oss's thinking pipeline. The handoff point is when solutioning determines the solution is a software product.
/shaping (rageatc-core-oss) — ideating → understanding-the-ask → solutioning — before Stage 1. Output is concept_v1.md with a decision record./shaping when direction is unclear. Skip if the user arrives with a specific, bounded request.Apply the managing-product skill. This is an interactive orchestrator-led dialogue — not a task to delegate.
Gate: Present PRD.md to the human for approval before proceeding. Do not advance without explicit confirmation. Log the approval.
Output: Confirmed PRD.md in project root.
Tier calibration: Pass the workflow tier to the managing-product skill — it calibrates PRD depth accordingly.
Standard and Thorough only. Apply the scaffolding-project skill (orchestrator-led).
Apply the scaffolding-project skill to create the project file structure.
Quick: Skip — project structure already exists for bug fixes.
Invoke architect-agent. Provide: PRD.md path, output directory. Add existing codebase path for brownfield projects.
Gate: Present ARCHITECTURE.md (and any ADRs) to the human for approval. Resolve all open questions flagged by the architect before approving — decomposing an unconfirmed architecture produces misaligned chunks. Log the approval.
Output: Confirmed ARCHITECTURE.md. ADRs in docs/decisions/ for Thorough tier.
Tier calibration: Pass the workflow tier to architect-agent — its preloaded architecting-software skill calibrates depth accordingly.
Conditional: only when the project has a UI. Skip for pure APIs, CLIs, libraries, or backend-only changes.
Standard and Thorough only. Apply the designing-interfaces skill (rageatc-design-oss plugin, orchestrator-led). This is a dialogic stage — explore the product's domain with the user to establish design direction, token architecture, and visual system.
Detection: After Stage 3, check ARCHITECTURE.md for frontend components, web interface, or UI framework references. If present, run this stage. If absent, skip and note the skip in the orchestration log.
Greenfield: Run the full exploration workflow — intent, domain, direction proposal, token architecture, self-critique, confirmation.
Brownfield: If .interface-design/system.md already exists, confirm it is still current. If the project's UI direction has changed, run the brownfield entry path (extract → refine → update).
Gate: Present .interface-design/system.md to the human for approval before proceeding to decomposition. Log the approval.
Output: Confirmed .interface-design/system.md at the project root.
Quick: Skip — scope is too small for design system work. If system.md already exists, the developer uses it.
Invoke breakdown-agent. Provide: ARCHITECTURE.md path, project root path. Add existing codebase path for brownfield.
Gate: Review the proposed ROADMAP.md before the agent writes it — check that chunk structure and dependencies look right. Confirm or request revisions. Log the approval once confirmed.
Output: Confirmed ROADMAP.md (structural — chunks, phases, dependencies, file sets).
Tier calibration: Pass the workflow tier to breakdown-agent — its preloaded decomposing-work skill calibrates depth accordingly.
Standard and Thorough only. Apply the enriching-roadmap skill (orchestrator-led). Provide: ROADMAP.md path, ARCHITECTURE.md path, PRD.md path, workflow tier. If .interface-design/system.md exists, provide it as an additional input — enrichment derives design-specific acceptance criteria for UI chunks.
Apply the enriching-roadmap skill. The enriched roadmap becomes the developer's brief — no separate briefing step is needed.
Gate: Present the enriched ROADMAP.md to the human for approval. Log the approval.
Quick: Skip — chunks are simple enough that the developer works directly from the chunk description.
Apply the planning-software skill (orchestrator-led). Provide: enriched ROADMAP.md path, workflow tier, project name.
This produces ORCHESTRATION-PLAN.md (the workflow contract) and initialises ORCHESTRATION-LOG.md.
Output: ORCHESTRATION-PLAN.md and ORCHESTRATION-LOG.md in project root.
For each chunk in ORCHESTRATION-PLAN.md (in dependency order), run the per-chunk execution protocol. See Per-Chunk Execution Protocol section below.
Standard and Thorough only. When all chunks are marked complete in ORCHESTRATION-PLAN.md:
1. Whole-project code review. Invoke reviewer-agent with the whole-project perspective (from reviewing-code). Provide: PRD.md path, project root, all source files.
2. User emulation. Once the code review passes, invoke user-emulation-agent with the running product. Provide: PRD.md path, running app URL (or CLI command), and system.md path if the project has a design system. The agent evaluates the product as a real user would — catching broken integrations, confused flows, missing states, and PRD gaps that only surface through actual use.
Quick: Skip — scope is too small to warrant whole-project review or user emulation.
Only when something noteworthy happened. Invoke learner-agent (rageatc-core-oss) with the ORCHESTRATION-LOG.md, ORCHESTRATION-PLAN.md, and any artefact versions that illustrate the learning. Set the output path to the project root LEARNINGS.md — the learner appends structured analysis below any raw observations already captured there. Pass the output to the human for approval — no skill or agent changes without human review.
Do not run learner-agent after every project. Reserve it for projects that surfaced meaningful workflow improvements.
Every major artefact follows the same gate:
Skill or agent produces artefact → Critic reviews (optional) → Human approvesApplied after: PRD (Stage 1), architecture (Stage 3), design system (Stage 4, if applicable), roadmap structure (Stage 5), enriched roadmap (Stage 6).
If the human requests changes → revise and repeat. Do not advance past a gate without explicit approval. Log every gate approval in ORCHESTRATION-LOG.md.
Read ORCHESTRATION-PLAN.md and select the next chunk whose dependencies are met. Provide developer-agent with:
Apply the using-worktrees skill — do not restate its mechanics here. Each chunk runs in an isolated git worktree. Use the worktree path as the codebase path for all subsequent steps within that chunk.
Invoke developer-agent. Provide: PRD.md path, chunk section from ROADMAP.md, ARCHITECTURE.md path, worktree path. Add CLAUDE.md path if present. For UI chunks: add .interface-design/system.md path if it exists.
Developer-agent preloads test-driven-development and verifying-work. TDD methodology and verification discipline live in those skills — do not restate them here.
The developer reports a status code on completion (codes defined in developer-agent). Orchestrator responds:
For iterations (2+), provide the previous review path alongside the worktree path. Do not use worktree isolation again — the developer continues in the existing worktree.
Invoke reviewer-agent. Provide: project context, ROADMAP.md chunk section, ARCHITECTURE.md path, worktree path, changed files list (via git diff --name-only main in the worktree). For re-reviews, add the previous review path.
Select perspectives per the reviewing-code skill's tier defaults (defined in its Perspective Model section). Override when chunk characteristics warrant it (e.g., load security for a Quick auth fix, load design-compliance for UI chunks when system.md exists). Tell reviewer-agent which perspective names to apply (e.g., "apply spec-compliance, code-quality, and design-compliance").
Decision:
3-iteration cap. If iteration 3 produces a revise decision, do not invoke developer-agent a fourth time. Escalate to the human: provide the chunk, the final review, the worktree path, and the specific unresolved issues. Persistent failure after 3 rounds signals a brief problem, an architecture gap, or a complexity mismatch — not a developer failure. Human decides whether to revise the brief, adjust scope, or accept the output with known issues.
[x])New orchestrator session on an in-progress project:
[~] or [ ] entry in Build Progress[~]), check ORCHESTRATION-LOG.md for the last completed step within itDo not rely on conversation history — project root files are the authoritative record.
Follow the orchestrating-work skill (rageatc-core-oss) for entry format.
Software-specific events to log:
Create ORCHESTRATION-LOG.md at the project root when running planning-software (Stage 7). The file is initialised by the planning-software skill — append only after that point.
If the developer or reviewer discovers a fundamental architecture gap during the build stage:
Do not patch around architectural problems at the implementation level. Log the re-entry decision with the specific gap identified.
Chunks annotated as parallelisable in ROADMAP.md (non-overlapping file sets) can be dispatched concurrently. Provide each developer-agent with its own worktree. Merge each worktree individually before starting dependent chunks. Resolve any conflicts before moving to the next phase.
Context: User reports the login form accepts empty email addresses. Fix is isolated to one component.
Tier selected: Quick — single component, reversible, clear scope.
Context: User wants to add recipe management to an existing API (CRUD + search). Existing codebase, 5-6 chunks anticipated.
Tier selected: Standard — new feature, follows existing patterns, bounded scope.
Context: User wants to build a real-time notification service. New system, multiple components (producer, consumer, delivery layer), cross-cutting concerns.
Tier selected: Thorough — greenfield, cross-cutting, new architectural territory.
Orchestration is effective when:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.