architecture-foundation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited architecture-foundation (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to turn an architecture discussion into explicit boundaries, contracts, validation gates, and a small execution plan. The goal is not to copy an admired project, but to identify the project's shape and choose the minimum architecture that keeps ownership, effects, errors, and tests clear. For large existing repos, first explain the architecture they already have, then decide whether the work is boundary creation, boundary completion, or boundary deletion.
"make a complete spec", "design the runtime", or "compare good libraries".
rendering, schedulers, persistence, or cross-module contracts.
on one architecture.
workflow definitions, or docs that may disagree about the source of truth.
before implementation.
Do not use this for small, local fixes where the existing architecture is obvious and no boundary decision is needed.
public APIs, open issues/PRs, and tests before proposing new structure.
before treating it as evidence.
background workers, cron jobs, adapters, and the largest files/tests.
provider adapters, billing/settlement, observability.
runtime hooks, rollback, shutdown, and test harness.
queue/backpressure, worker/reconciler, retry, and drain.
reload order, rollback, cleanup, and plugin host interfaces.
headless tests.
middleware, error-to-response boundary.
replay/test harness.
reconciliation systems.
product/app: entrypoints, user workflows, product-specific orchestration.core/domain: pure models, invariants, decisions, typed errors, no IO.runtime/application: lifecycle, scheduling, event dispatch, state mutation.adapters/backends: OS, renderer, provider, filesystem, network, database.plugins/components: optional capabilities behind explicit contracts.testing/headless: deterministic drivers, fake adapters, contract tests.SQL seed, JSON/YAML config, generated docs, or external provider contract.
intentional bridge, legacy compatibility, oraccidental fork; require an exit condition for compatibility paths.
architecture is directionally correct but half migrated.
them authoritative.
messages, mutate projections, or only emit effects for another layer.
databases, or providers.
converted at a boundary.
references/spec-template.md when the user needs a durable artifact.borrow from do_not_copy; borrowboundary contracts, not scale artifacts, global registries, generated machinery, historical migrations, or domain-specific complexity.
to own that runtime.
compile-time isolation, independent tests, or real reuse.
duplicated source-of-truth, an unfinished migration, or missing closed-loop tests.
database clients, HTTP requests, process spawning, and environment reads.
runtime state or a scoped resource.
config/permissions when relevant, lifecycle, errors, and tests.
unsupported error, diagnostic, or blank result according to the contract.
For quick answers, return:
verdict:
chosen_shape:
state_owner:
boundaries:
contracts:
migration_debt:
validation:
risks:
next_steps:For durable planning, create or update an architecture spec with:
objective
current evidence
reference models considered
chosen architecture
boundary map
source-of-truth map
contract matrix
compatibility/deletion plan
issue/PR map
validation matrix
P0/P1/P2 roadmap
open questionsstartup, lifecycle, or tests.
same product contract.
condition.
references/rust-architecture-patterns.md when designing Rust crates,runtimes, UI frameworks, app shells, schedulers, services, or developer tools.
references/go-architecture-patterns.md when designing Go modules,packages, services, ports/adapters, context-aware APIs, or concurrency flows.
references/spec-template.md when producing a repo-facing spec.agents/openai.yaml only when a separate architecture review agent isneeded for cross-checking the chosen boundaries or migration plan.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.