pipeline-evolution — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pipeline-evolution (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Systematically extract lessons from a completed (or partially completed) pipeline run and promote them into the pipeline's persistent "DNA" — control plane files, phase prompts, and orchestrator checks — so the next run benefits automatically.
reset-all (harvest insights before scratchpad gets wiped)Read ALL of the following. Skip any that don't exist yet.
| Source | What it contains |
|---|---|
99_scratchpad/pipeline_memory.md | Operational log per phase — [FIX], [WARN], [NOTE] entries |
99_scratchpad/discovered_facts.md | Domain knowledge discovered during execution |
99_scratchpad/phase_handoff_notes.md | Phase-to-phase context, especially "Surprises" and "Watch out for" |
.cursor/napkin.md | Agent-level memory: mistakes, corrections, surprises, preferences |
10_battle_test/battle_test_summary.md | Battle test verdict and must-fix list |
09_reviews_and_qa/*/review_findings.md | Expert reviewer findings |
pipeline/phase_log.md | Phase completion timestamps and issue counts |
pipeline/evolution/promotion_history.md | Previously promoted insights (dedup check) |
pipeline/evolution/evolution_log.md | Prior evolution session summaries (context for what was already done) |
Evolution ONLY modifies pipeline DNA files. It never touches source documents, generated content, requirements engine outputs, or research evidence.
| Insight Type | Target File |
|---|---|
| Claim correction | 00_control_plane/claim_validation_rules.md |
| Style / writing rule | 00_control_plane/response_style_guide.md |
| Architecture decision | 00_control_plane/technology_stack_decisions.md |
| Process improvement | pipeline/prompts/phase*.md (relevant phase) |
| QA check to add | pipeline/prompts/phase5_qa.md |
| Orchestrator verification | pipeline/orchestrate.sh (check functions) |
| Agent behavior only | .cursor/napkin.md (stays there, not promoted) |
Execute these steps in order. Do not skip steps.
Read every insight source listed above. For each actionable item, extract:
bug_fix, style_rule, claim_correction, architecture_decision, process_improvement, performance_insightcritical, high, medium, lowCheck each item against pipeline/evolution/promotion_history.md. If the same insight (or a substantially similar one) was already promoted, skip it.
Write all NEW items to pipeline/evolution/pending_insights.md under the current date heading, using this format:
## YYYY-MM-DD Harvest
| # | Type | Severity | Source | Raw Insight |
|---|---|---|---|---|
| 1 | bug_fix | critical | pipeline_memory.md Phase 3 | [FIX] PostgreSQL version corrected: PG 17 → PG 18... |
| 2 | process_improvement | high | phase_handoff_notes.md P4→P5 | Consistency check needed: parallel subagents may use inconsistent terminology... |Report the harvest count to the user: "Harvested N new insights (X critical, Y high, Z medium, W low). M duplicates skipped."
Group related pending insights into evolution candidates. Multiple insights about the same issue become a single candidate.
For each candidate, determine:
auto (safe mechanical change — typo fix, adding a known-good check) or review (judgment call — changing architecture defaults, modifying style rules, altering QA criteria)Write candidates to pipeline/evolution/pending_insights.md under a ### Candidates sub-heading:
### Candidates
| # | Title | Insights | Target | Confidence |
|---|---|---|---|---|
| C1 | Add PG version verification to Phase 2 | 1, 7 | pipeline/prompts/phase2_research.md | auto |
| C2 | Enforce CL2-CL3 async replication terminology | 3, 4, 9 | claim_validation_rules.md, phase5_qa.md | auto |
| C3 | Soften CL0 SLA from 99.99% to 99.95% | 5 | technology_stack_decisions.md | review |Present candidates to the user in two groups:
Auto-apply candidates (confidence = auto): Show a numbered summary table. State: "I will apply these unless you object. Reply 'skip N' to exclude any."
Review candidates (confidence = review): For each, show:
Wait for user confirmation before proceeding. The user may approve all, approve selectively, or reject.
If the user does not respond or says "go ahead" / "apply all" / "looks good", proceed with all approved candidates.
For each approved candidate:
pipeline/evolution/promotion_history.md:### YYYY-MM-DD — [Candidate Title]
- **Source insights**: [list of harvest items]
- **Target**: [file path]
- **Change**: [one-line summary of what was edited]
- **Confidence**: auto|reviewpipeline/evolution/ledger.md):- YYYY-MM-DD | [Candidate Title] | [target file] | [one-line summary]pending_insights.md (remove the harvest rows and candidate rows that were applied; leave any unapplied ones for next time)pipeline/evolution/evolution_log.md:## Run N — YYYY-MM-DD
- **Pipeline run harvested from**: Phases 1-6 completed YYYY-MM-DD (or partial: Phases 1-5)
- **Insights harvested**: X total (A critical, B high, C medium, D low)
- **Duplicates skipped**: M
- **Candidates formed**: Y
- **Candidates applied**: Z (list titles)
- **Candidates deferred/skipped**: W (list titles and reason — user rejected, deferred to next run, etc.)
- **Files modified**: [list of target files that were edited]
- **User decisions**: [any notable approvals, rejections, or modifications the user requested]After all edits, report to the user:
review-confidence candidate without user approvalpromotion_history.mdpipeline/evolution/ directory or its files don't exist, create them with the seed templates before starting~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.