commit-convention — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited commit-convention (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
All commits to the Lorekeeper repo are enforced by .git/hooks/commit-msg (installed via scripts/lorekeeper-setup.sh).
| Role | user.name | user.email |
|---|---|---|
| PM (Akane) | Akane (PM) | [email protected] |
| Dev | Dev | [email protected] |
| Engineer (Diana) | Diana | [email protected] |
Set locally in the repo (not globally, to avoid polluting other projects):
# PM
git config --local user.name "Akane (PM)"
git config --local user.email "[email protected]"
# Dev
git config --local user.name "Dev"
git config --local user.email "[email protected]"
# Diana
git config --local user.name "Diana"
git config --local user.email "[email protected]"[LKPR-N] type: short imperative title| Tag | When to use |
|---|---|
[LKPR-N] | Work tied to a specific ticket (feature, fix, refactor, test) |
[LKPR-0] | Housekeeping with no ticket — chore, backlog edits, moving tickets, changing status, updating skills, docs-only |
feat, fix, docs, refactor, test, chore, perf
[LKPR-6] feat: add iterative search with relevance cutoff
[LKPR-19] fix: enable FK constraints via PRAGMA foreign_keys=ON
[LKPR-0] chore: add LKPR-21 entity-resolution backlog ticket
[LKPR-0] docs: update README scoring formula
[LKPR-0] chore: move LKPR-15 to done/Merge commits (branch → main) are exempt from the hook — detected by the presence of MERGE_HEAD or a title starting with Merge branch.
Do not bypass. No excuse.
The hook lives at scripts/hooks/commit-msg and is installed by setup:
./scripts/setup.shRe-run this after cloning the repo on a new machine.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.