generating-constrained-specs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generating-constrained-specs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill generates PRD and architecture documents that are constrained by the decision ledger.
*No spec section without a DEC- reference.**
Every requirement, every architecture choice, must trace back to an explicit decision. This prevents:
/ledger-decide)04-decisions/DECISIONS.yaml exists05-risks/RISKS.yaml existsUse TodoWrite to track these mandatory steps:
<required>
</required>
Read:
04-decisions/DECISIONS.yaml - All decisions05-risks/RISKS.yaml - All risks03-synthesis/CROSS-SYNTHESIS.md - ContextBuild decision index for quick lookup.
Write 06-prd/PRD.md using template from references/prd-template.md.
Constraint enforcement: Every section heading must include decision reference:
## 2. Target Users (DEC-scope-power-users-first)Every requirement must cite decisions:
### 2.1 Primary Users
Power users within SMB organizations who manage complex workflows.
(DEC-scope-power-users-first, DEC-scope-smb-segment)Check every PRD section:
Gate failure: If any section lacks DEC-* reference, cannot proceed.
Write 07-architecture/ARCHITECTURE.md using template from references/architecture-template.md.
Constraint enforcement:
## 3. Data Model (DEC-tech-postgres-primary, DEC-scope-power-users-first)
### 3.1 Core Entities
Based on power user workflow requirements (DEC-scope-power-users-first),
the data model supports complex nested structures.Check every architecture section:
In both documents, note relevant risks:
### Risk Note
This approach carries RISK-tech-cold-start. See risk register for mitigations.See references/constraint-rules.md for detailed rules.
Section headings:
## 2. MVP Scope (DEC-scope-power-users-first, DEC-scope-web-only)Inline citations:
Users will access the application via web browser only. (DEC-scope-web-only)Evidence when needed:
Based on user research showing 78% onboarding drop-off at team invitation
(EV-users-onboarding-dropoff), we will simplify the invitation flow.
(DEC-ux-simplified-onboarding)<good-example>
## 2. Target Users (DEC-scope-power-users-first)
Based on DEC-scope-power-users-first, the MVP targets power users within
organizations who manage complex workflows. This decision was supported by
evidence showing 3x higher retention among power users (EV-users-retention-power-users).
### 2.1 User Needs
- Complex workflow management (DEC-scope-power-users-first)
- Keyboard-first interaction (DEC-ux-keyboard-shortcuts-priority)
**Risk:** RISK-retention-expert-churn mitigated by advanced feature set.</good-example>
<bad-example>
## 2. Target Users
We will target power users because they are important. Power users need
features like advanced workflows and keyboard shortcuts.
### 2.1 User Needs
- Complex workflow management
- Keyboard-first interaction</bad-example>
Use the AskUserQuestion tool when:
Question: "PRD section '[X]' has no supporting decision. How to proceed?"
Options:
- "Skip this section (out of scope)"
- "Make a new decision for this"
- "It relates to existing decision [DEC-Y]"Question: "Requirement '[X]' seems to conflict with [DEC-Y]. How to resolve?"
Options:
- "Revise requirement to align with decision"
- "The decision should be revisited"
- "They don't actually conflict - explain how"Question: "This section relates to [RISK-X]. Include risk note?"
Options:
- "Yes, note the risk"
- "No, not relevant here"
- "Yes, and add mitigation detail"After spec generation:
## Spec Generation Complete
**PRD Sections:** [N] (all constrained)
**Architecture Sections:** [M] (all constrained)
**Decisions Referenced:** [X] unique DEC-* IDs
**Risks Cross-Referenced:** [Y] RISK-* IDs
### Constraint Gate Status
- PRD gate: ✓ All sections cite decisions
- Architecture gate: ✓ All sections cite decisions
### Documents Generated
- `06-prd/PRD.md`
- `07-architecture/ARCHITECTURE.md`
### Decision Coverage
| Decision | PRD Sections | Arch Sections |
|----------|--------------|---------------|
| DEC-scope-power-users-first | 1, 2, 4 | 2, 3 |
| DEC-pricing-freemium | 3, 5 | 4 |
| DEC-tech-serverless | - | 1, 3, 5 |
| ... | ... | ... |
### Next Step
Run `/ledger-plan` to generate implementation backlog.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.