grace-refactor-3908ca — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited grace-refactor-3908ca (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Refactor a GRACE project without letting architecture or verification drift.
Do not use this skill for greenfield implementation. Use $grace-plan, $grace-execute, or $grace-multiagent-execute for new work.
docs/development-plan.xml must existdocs/knowledge-graph.xml must existdocs/verification-plan.xml should existdocs/operational-packets.xml exists, use its canonical packet and delta shapesA GRACE refactor is not just a code move.
It is an atomic migration across:
docs/development-plan.xmldocs/knowledge-graph.xmldocs/verification-plan.xmlThe refactor is not done until all six agree again.
Identify the exact refactor type:
renamemovesplitmergeextractinterface-tightenpath-onlyFor the requested change, capture:
If the change affects behavior, public contracts, or architecture boundaries, present the planned deltas and wait for approval.
Before editing, prepare a controller-owned packet containing:
When docs/operational-packets.xml exists, align the packet, graph delta, verification delta, and failure handoff to those canonical templates.
Work in the safest order for the refactor type.
Always:
[Module][function][BLOCK_NAME] markers when critical branches moveFor split and merge refactors:
Shared-doc rule:
After the code refactor, update the shared artifacts in one coherent pass.
Update docs/development-plan.xml for:
Update docs/knowledge-graph.xml for:
Update docs/verification-plan.xml for:
V-M-xxx entriesIf IDs changed, update every reference atomically. Do not leave temporary stale IDs unless the user explicitly requires compatibility handling.
Run verification at the smallest level that still protects correctness:
If the refactor causes failures, produce a structured failure handoff using the canonical FailurePacket shape when available.
Before declaring success:
$grace-reviewer pass on the changed files and shared-artifact deltas$grace-refresh on the touched modules and dependency surfaces~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.