polish — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited polish (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
"검증 없이 완료 선언하지 않는다." A short, hard gate to run before saying done / 완료 / passed. If any row is ✗, fix it; do not declare completion.
If invoked bare (no scope hint), ask: "What are you about to declare complete? e.g. `feat/foo branch`, `UI refactor`, `migration 0042` — name the scope so the checklist evidence makes sense."
This is the discipline-gate version. For the full quality-improvement loop (6-axis inspection × N + e2e + PR doc), use oh-my-borory:polish.
Cheap reads only — no full-file scans.
git status --short
git diff --stat
git branch --show-current
git log -1 --pretty='%h %s'Note the baseline branch + SHA explicitly — the checklist below references it.
Output exactly the following table. Every row must resolve to ✓ or ✗ — no n/a, no pending. If a row genuinely does not apply (e.g. no UI changes → testid row), mark it ✓ with evidence: scope-not-applicable.
| Check | Status | Evidence |
|----------------------------------------------------------------|--------|-------------------------------------------|
| Branch is feature/* (not main/master/release/*) | ✓/✗ | `git branch --show-current` |
| Pre-commit hooks ran successfully | ✓/✗ | last hook exit code (or `.husky/pre-commit` ran) |
| Baseline branch + SHA explicitly stated for comparisons | ✓/✗ | quote the SHA |
| No `withTimeout`, defensive `{ timeout }`, or silent try/catch | ✓/✗ | `rg 'withTimeout\|timeout:\s*\d+' diff` |
| No hardcoded version field names (`v1.*`, `schema_v2`) | ✓/✗ | `rg 'v\d+\.\w+\|schema_v\d' diff` |
| testid constants are UPPER_SNAKE_CASE | ✓/✗ | `rg 'data-testid="[a-z]' diff` |
| No raw px values outside design tokens | ✓/✗ | manual diff inspection / tokens file |
| Long reports (>30 lines) written to docs/reports/ not chat | ✓/✗ | inspect last chat output |
| Pixel-delta table present when claim is UI work | ✓/✗ | path to pixel-delta artifact (or scope-not-applicable) |
| Locale separation respected (en/ko/jp files do not mix) | ✓/✗ | `rg -l '[가-힣]\|[ぁ-ヿ]' *.md` filtered |After the table:
tmp/polish-handoff-<ts>.md and STOP. Wait for an explicit "continue".polish gate clean: {commit-hash} ready. That is the only form of completion claim allowed.oh-my-borory:polish or harnish:ralphi)galmuri:self-audit (which audits Claude's own session actions across all axes, not just completion claims)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.