plan-implementation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited plan-implementation (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
find . -maxdepth 1 -name "CLAUDE.md" -type ffind . -maxdepth 3 -name "project-discovery.md" -type f## Deferred (YAGNI) section in feature-implementation-plan.md with the reopening trigger named; items where a strictly simpler implementation satisfies the same evidence get the simpler implementation recorded as the decision and the larger version under Rejected alternatives:. The Sentry-runbook-on-staging-only-Sentry pattern is the named project precedent — operational machinery shipped before the system that drives it actually produces the data, traffic, or failures it covers is YAGNI by default. Every committed implementation item is ongoing maintenance and a pattern future agents will copy.feature-implementation-plan.md is the primary plan and lives at the root of {folder}/; implementation-decision-log.md records every decision and implementation-iteration-history.md records each round of discussion — both companion artifacts live in {folder}/artifacts/ to keep the planning folder uncluttered. The main plan cites decisions with inline ([D-N](artifacts/implementation-decision-log.md#...)) links for non-obvious claims. The decision log and iteration history cross-link through Driven by rounds: / Decisions produced: fields (they sit as siblings inside artifacts/), and both link back into the plan through Referenced in plan: / Changed in plan: fields using ../feature-implementation-plan.md. Any edit to one file requires updating the matching fields in the others.Read the user's argument and conversation context to identify the source artifact. The expected input is a feature-specification.md produced by the plan-a-feature skill, but any document describing what the feature should do is acceptable (PRD, design doc, product brief).
Resolve the source path:
feature-specification.md under docs/features/, docs/plans/, or other documentation roots discovered via CLAUDE.md or project-discovery.md. If multiple candidates exist, ask the user which one.plan-a-feature first.Three files will be written. The primary plan lives at the root of {same-folder-as-source}/; the two companion artifacts live in {same-folder-as-source}/artifacts/ (which may already exist if the source spec came from plan-a-feature — share the same subfolder rather than creating a second one):
{same-folder-as-source}/feature-implementation-plan.md — the primary plan.{same-folder-as-source}/artifacts/implementation-decision-log.md — every committed implementation decision with rationale, evidence, and rejected alternatives.{same-folder-as-source}/artifacts/implementation-iteration-history.md — round-by-round record of specialists engaged, questions raised, and how each was resolved.Create the artifacts/ subfolder before writing the companion files if it does not already exist.
The three files cross-reference each other. The main plan cites decisions with inline parenthetical links like ([D-3](artifacts/implementation-decision-log.md#d-3-rollout-strategy)); the decision log and iteration history cross-link through Driven by rounds: / Decisions produced: fields (siblings inside artifacts/), and both link back into the plan through Referenced in plan: / Changed in plan: fields via ../feature-implementation-plan.md.
If any of the three files already exist, ask the user whether to overwrite or append iteration notes before proceeding.
Read the full specification into context. If the specification is a feature-specification.md produced by plan-a-feature, also read its companion decision-log.md, team-findings.md, and feature-technical-notes.md if it exists — these live in {same-folder-as-source}/artifacts/ (the same subfolder this skill will write to). Fall back to reading them from {same-folder-as-source}/ directly for spec folders produced before the artifacts layout was introduced. The feature-technical-notes.md file is lazily created by plan-a-feature — its absence means no load-bearing mechanics were captured at spec time, not that the spec is incomplete. Note the decisions already settled, any open items the spec flagged, the review team findings, and any committed technical mechanics the plan must honor.
Detect tech-notes presence once, here. Record whether feature-technical-notes.md exists. If it does NOT exist, omit every T#-related sentence from agent briefs (Step 4), the spec-maturity tag set (Step 5), and the synthesis inputs (Step 8) — do not add boilerplate qualifiers like "if it exists" to those briefs. The T#-contradiction spec-maturity classification simply does not apply when there are no T# notes, so the spec-maturity gate reduces to the spec-level threshold alone.
Before launching the team, gather the context specialists will need to produce evidence-backed recommendations. Use Glob and Grep to find:
docs/adr/ or docs/architecture/decisions/ — architectural decisions the implementation must respect.docs/coding-standards/ or .github/CODING_STANDARDS.md — rules the implementation must follow.git log --since="90 days ago" --name-only --pretty=format:"" on the directories the feature will touch to surface churn and recent precedent.Write the result to `{same-folder-as-source}/artifacts/.discovery-notes.md` as a structured summary: tech stack, ADRs found (paths + one-line summary each), coding standards found (paths + one-line summary each), code touch points (paths + one-line summary), recent-activity churn, and explicitly enumerated gaps (what was searched for and not found). Missing standards or ADRs are themselves findings the team should note.
The discovery notes file is the single source of truth for project context across the team. Specialists in Step 4 are instructed to read `.discovery-notes.md` first and not to re-grep for what has already been found — they may search further for what their domain specifically needs that the discovery notes do not cover, but they must not duplicate what is already there.
Default to small. Start the classification at small and only escalate to medium or large when the signals below clearly require it. When a signal is borderline, stay at the smaller band. Use the spec's coordinations, T# count, security/PII surface, integration boundaries, and the user's framing:
Size override. If $size is non-empty (the user passed small, medium, or large as the first argument), use that value as the size and skip the signal-based classification above; the team cap and round cap still scale to the chosen size. State the chosen size, the recommended team, and the reason for the size choice to the user in one short message before launching agents (e.g., "Medium: two subsystems, small auth surface" or "Medium: passed via $size"). If the user disagrees, accept the override (size, specific specialists, or both) and proceed.
The team always includes:
han-core:project-manager — coordinator and final synthesizer.han-core:junior-developer — generalist stress-tester and reframer.Select additional specialists up to the team cap based on what the feature actually touches. Err toward including a specialist rather than discovering a gap late. Unless the user specified a team composition, draw from:
han-core:user-experience-designer — any user-facing flow, UI, or interaction model.han-core:adversarial-security-analyst — authentication, authorization, PII, untrusted input, secrets, supply chain.han-core:devops-engineer — deployment, observability, rollout, feature flags, scale, SLO impact, cost.han-core:on-call-engineer — application-source resilience patterns the plan introduces: timeouts and deadline propagation, retry logic with backoff and jitter, idempotency-key wiring, queue and buffer handling, async / blocking-I/O patterns, bulkhead boundaries, correlation-id propagation, kill-switch wiring, observability-of-the-failure-path at the application source line. Hard boundary against han-core:devops-engineer: infrastructure, IaC, pipelines, and observability platform configuration stay there.han-core:structural-analyst — module boundaries, coupling, where the implementation fits in the system.han-core:behavioral-analyst — runtime behavior, data flow, error propagation, state transitions.han-core:concurrency-analyst — concurrent access, race conditions, async coordination, ordering.han-core:software-architect — intra-codebase architectural recommendations, module/class/interface sketches, SOLID-grounded refactoring paths. Include when the feature is mostly internal to one codebase or one bounded context.han-core:system-architect — cross-service / bounded-context topology, context-map relationships, integration patterns (sync vs. async, saga, ACL, OHS), data ownership across services, failure-domain containment. Include when the feature crosses a service boundary, introduces a new integration, changes a context-map relationship, or shifts data ownership. Include both when the feature does both.han-core:risk-analyst — prioritization of architectural and delivery risks.han-core:test-engineer — observable-behavior test planning and test doubles.han-core:edge-case-explorer — boundary values, input messiness, state-dependent failures.han-core:data-engineer — schema changes, migrations, data movement, analytics implications.If the user specified which agents to include, honor that. Otherwise, state the proposed team composition to the user briefly before launching — one line per specialist with the reason they were selected — and proceed.
Launch every non-han-core:project-manager specialist in parallel in a single message. Use domain-scoped briefs — do not hand every agent the full set of artifacts. Pass each agent only the spec sections relevant to its domain plus pointers, and instruct it to read further on demand only if its domain needs it. Default mapping:
| Specialist | Spec sections to include in brief |
|---|---|
han-core:user-experience-designer | Outcome, Primary Flow, User Interactions, Edge Cases (UX-relevant rows only) |
han-core:adversarial-security-analyst | Outcome, Coordinations, Edge Cases, sections touching auth/PII/secrets/supply-chain |
han-core:devops-engineer | Outcome, Coordinations, Out of Scope, Open Items |
han-core:on-call-engineer | Sections naming outbound calls, retry behavior, queue or buffer handling, async work, error handling on failure paths, schema migrations, idempotency, kill switches, and observability of new code paths |
han-core:structural-analyst | Sections naming module boundaries, coupling, dependency direction |
han-core:behavioral-analyst | Sections describing runtime behavior, data flow, error propagation, state |
han-core:concurrency-analyst | Sections touching concurrent access, race conditions, async coordination |
han-core:software-architect / han-core:system-architect | Architecture / topology / context-map sections |
han-core:risk-analyst | Architectural and delivery risks; depends on upstream specialist findings |
han-core:test-engineer / han-core:edge-case-explorer | Outcome, Primary Flow, Alternate Flows, Edge Cases |
han-core:data-engineer | Sections touching schema, migration, data movement, analytics |
han-core:junior-developer | Outcome + first paragraph of every section (plain-language overview) |
Give each agent:
artifacts/decision-log.md, artifacts/team-findings.md, and artifacts/feature-technical-notes.md paths if they exist (fall back to the spec folder root for legacy layouts) — as paths only, not contents, so the agent can read on demand.artifacts/.discovery-notes.md from Step 2, with a directive: read the discovery notes first; do not re-grep for what is already there. Search further only for what your domain specifically needs that the discovery notes do not cover.han-core:software-architect, han-core:system-architect, han-core:devops-engineer, han-core:data-engineer, han-core:on-call-engineer — already encode this rule in their definitions; honor it.T# entries in feature-technical-notes.md as committed mechanics the plan must honor — not open questions to re-debate. If the specialist disagrees with a T# note, they must raise it as a "`T#` contradiction" finding that cites the specific T# ID, describes the behavioral conflict, and names the alternative mechanic they recommend. The plan will route such findings through the facilitation loop (Step 5) and, if necessary, reopen the spec-stage decision — a specialist may not silently override a committed T#.feature-specification.md#primary-flow, or a specific D# in the spec's artifacts/decision-log.md, or T3 in the spec's artifacts/feature-technical-notes.md — so the han-core:project-manager can cross-reference them precisely during synthesis.Collect every agent's verbatim output. If an agent returns "no concerns from my side," that is a valid answer — record it.
han-core:project-manager is NOT called per-round in facilitation mode. The mechanical work of consolidating specialist findings into a claim ledger, classifying spec-maturity, and choosing a next-step recommendation is performed deterministically by this skill itself. PM is reserved for two specific calls only: the final synthesis in Step 8, and a single facilitation pass when the spec-maturity gate trips (see below).
Aggregate the verbatim specialist outputs from Step 4 into the round-1 entry of artifacts/implementation-iteration-history.md using these rules:
Build the claim ledger. Group findings by category (assumption-refuted, overlap, ambiguity, edge-case, security, mechanic-leak, T#-contradiction, YAGNI-candidate). For each finding, mark its state:
Evidenced — the finding cites a file path with line number, an ADR ID, a coding-standard section, or another concrete artifact that resolves the claim.Anecdotal — the finding asserts but does not cite an artifact.Disputed — two or more specialists made conflicting claims on the same point.When two specialists raise the same claim, consolidate into a single ledger row that names every supporting specialist.
Tag spec-maturity. Tag every finding as:
plan-level — resolvable inside plan-implementation by evidence, reframing, or user input.spec-level — requires a behavioral decision the spec never committed to (e.g., "the spec doesn't say what happens when two users invite the same email simultaneously"). Cannot be resolved in the plan stage without fabricating behavior.T#-contradiction — the specialist recommends a mechanic that conflicts with a committed T# note. Load-bearing by construction.Use simple text rules: a finding that names a spec section and says "the spec is silent" / "not specified" / "undefined behavior" is spec-level. A finding that names a T# ID and proposes a different mechanic is T#-contradiction. Everything else is plan-level.
Compute the spec-maturity gate. The gate trips when either condition holds:
T# notes — need not be the same one), orA single T#-contradiction does NOT trip the gate on its own — it routes through the normal Open Questions loop (Step 6) and the user decides. One specialist raising many findings also does not trip the gate — one detailed reviewer is not a spec-immaturity signal.
Build the Open Questions list. Any finding that cannot be settled deterministically (claim is Anecdotal, two specialists Disputed, or the finding is tagged spec-level / T#-contradiction and was not user-deferred) becomes an OQ-N entry. Open Questions are first-class output and feed into Step 6.
Pick the next-step recommendation deterministically:
pause and sharpen the spec.continue iterating (with the named handoffs).plan-level and unresolved → continue iterating (use Step 6 to resolve via evidence or han-core:junior-developer reframing).go to synthesis.Write the round entry to artifacts/implementation-iteration-history.md using implementation-iteration-history-template.md. Populate the claim ledger, Open Questions, spec-maturity tags, and next-step recommendation fields directly from this aggregation.
If the spec-maturity gate tripped, this skill makes the one and only PM facilitation call in the round: launch han-core:project-manager in facilitation mode with the verbatim specialist outputs, the deterministic aggregation, and a directive to confirm or refine the gate-trip assessment and surface anything the deterministic aggregator might have missed before the user is asked to pause spec-stage work. Pass the directive: do NOT write a facilitation-summary file to disk. Return the facilitation output verbatim. Append PM's verbatim output to the round entry under a Project-manager review (gate-trip pass): field.
Then surface the tripping findings to the user with:
spec-level findings and T#-contradictions that tripped the gate, grouped by the spec section they affect.han-planning:iterative-plan-review on the source spec (for mechanic-leak cleanup and gap filling) or re-enter han-planning:plan-a-feature (for structural gaps where whole sections are missing).plan-implementation proceeds, and the tripping findings are documented in the round entry, noting the user's override and the reasoning provided.If the user overrides, the plan ships with the spec accepted as-is; if the user chooses to pause, stop the skill and hand control back to spec-stage work.
Repeat this loop until the deterministic next-step recommendation is go to synthesis or blocked pending user input and all blocking questions have been escalated.
For each iteration:
han-core:junior-developer in conversational mode with the question, the specialist input that raised it, and a directive to restate the issue in plain language and surface the clarifying questions a three-to-five-year generalist would ask. The reframing often exposes an unstated assumption or a simpler question the specialists can answer among themselves.R# ID, specialists engaged, new input provided, claim ledger, Open Questions raised, spec-maturity tags, resolution source per question, and the deterministic next-step recommendation. Leave Decisions produced: and Changed in plan: as — for now; both fields are backfilled by the han-core:project-manager in Step 8 once decisions are committed and the plan is written.spec-level).Otherwise, continue with another iteration.
The round cap from Step 3 sets the upper bound: small = 1 round, medium = 2 rounds, large = 3 rounds. Never exceed the size cap. If the team is still iterating at the cap, surface the remaining Open Questions to the user with recommendations and a note that the team has reached a facilitation plateau.
Before synthesis, ensure every Open Question that cannot be resolved by evidence or han-core:junior-developer reframing has been surfaced to the user and answered. Do not guess the user's answers. If any are still pending and the user has indicated they want to defer, record them as open items the plan will ship with.
Before synthesis, walk every committed item the iterative loop has produced and run the YAGNI rule from ../../references/yagni-rule.md. Items in scope: every recommendation captured in artifacts/implementation-iteration-history.md's claim ledgers across all rounds, every Open Question that proposes adding an artifact, and every specialist recommendation that survived the loop without explicit deferral.
For each in-scope item, apply the two gates:
Apply the named anti-patterns from the rule doc as auto-flags — runbooks for never-fired alerts, observability for non-flowing telemetry, SLOs for absent traffic, single-implementation interfaces, configuration knobs no caller sets, multi-region for unproven workloads, indexes for unrun queries, audit columns nobody reads, tests for code paths that don't exist yet.
For every item the sweep flags, record a YAGNI ledger entry that PM will absorb into synthesis:
R# and claim-ledger entry.If the sweep produces YAGNI items that would change a behavior the spec committed to, surface them to the user before synthesis with a recommended resolution and the option to override. The user always wins; the rule's job is to make the cost of including the item visible.
The YAGNI ledger is a synthesis input — pass it to PM in Step 8 alongside the round entries and resolutions.
Launch han-core:project-manager in synthesis mode — this is the one call in this skill that runs on the han-core:project-manager's default model; pass no model override. Provide it with:
artifacts/decision-log.md, artifacts/team-findings.md, and artifacts/feature-technical-notes.md paths if they exist (falling back to the spec folder root for legacy layouts).artifacts/implementation-iteration-history.md (claim ledger, Open Questions, spec-maturity tags, next-step recommendations). These are the deterministic-aggregation summaries that replaced per-round PM facilitation; PM did not facilitate per round, so there are no separate facilitation summaries to read.{same-folder-as-source}/feature-implementation-plan.md, {same-folder-as-source}/artifacts/implementation-decision-log.md, and {same-folder-as-source}/artifacts/implementation-iteration-history.md (the latter already populated with round entries from Step 6, awaiting backfill).Ask the han-core:project-manager to produce the final synthesis across all three files:
## Full decisions with the structured fields (rationale, evidence, rejected alternatives, specialist owner, revisit criterion, dissent, Driven by rounds:, Dependent decisions:, Referenced in plan:). Trivial decisions go under ## Trivial decisions as a one-line bullet (D-N: {title} — {outcome}. — Referenced in plan: {sections}.). The D-N counter is shared across both sections, and every plan inline link still resolves to a D-N whether full or trivial.RAID Log (include only the sub-tables that have entries; omit the section when all four are empty), Security Posture (only when there is a threat surface or han-core:adversarial-security-analyst contributed), Operational Readiness (only when there is an operational surface or han-core:devops-engineer contributed), On-Call Resilience Posture (only when there is a resilience surface or han-core:on-call-engineer contributed), and Deferred (YAGNI) (only if at least one item was deferred under the YAGNI rule, per Step 7.5's ledger and PM's own application of the rule during synthesis). Omitting a lazy section records the judgment that the surface is genuinely absent, not a skipped concern — confirm before omitting. This keeps a small plan proportionate: sizing already caps the team and rounds, and lazy sections stop a small plan from carrying empty operational scaffolding. For each deferred item, record: the item, why deferred (which gate failed), the reopening trigger, and the source (specialist or round that proposed it). For every claim that embodies a non-obvious decision, append an inline parenthetical link to the decision, e.g. ([D-3](artifacts/implementation-decision-log.md#d-3-rollout-strategy)). Link only non-obvious claims. Do not inline rationale or rejected alternatives. Do not repeat round-by-round history.R# entry already present from Step 6, populate Decisions produced: with the D# IDs added or changed that round and Changed in plan: with the plan sections updated that round.D# in artifacts/implementation-decision-log.md lists its Driven by rounds: (R# IDs), Dependent decisions: (D# IDs), and Referenced in plan: (plan section headings).R# in artifacts/implementation-iteration-history.md lists its Decisions produced: (D# IDs) and Changed in plan: (plan section headings).feature-implementation-plan.md has its inline ([D-N](artifacts/implementation-decision-log.md#...)) link.Resolution source: in artifacts/implementation-iteration-history.md as `PM synthesis (Step 8 evidence)` — not bare evidence — so the audit record distinguishes a loop-stage resolution from a synthesis-stage one.plan-a-feature's synthesis carries ("any leak the han-core:project-manager finds is rewritten in place"). During synthesis, audit and fix:D-3 carrying D-1's title) is rewritten to describe its own decision.The `Source Specification` section of `feature-implementation-plan.md` must be populated. If a feature specification file was provided, the han-core:project-manager must include a relative markdown link to it (typically [feature-specification.md](feature-specification.md) since both files live in the same folder). If the spec's decision-log.md, team-findings.md, and/or feature-technical-notes.md also exist (in artifacts/ for the current layout, or at the folder root for legacy layouts), list them under Source Specification with the correct relative path. The feature-technical-notes.md entry is present only when the file exists — its absence is not a gap. If no file was provided and the plan was built from conversational context only, the section must state that explicitly and summarize what context was used.
The han-core:project-manager's synthesis is authoritative.
Summarize for the user:
feature-implementation-plan.md, artifacts/implementation-decision-log.md, artifacts/implementation-iteration-history.md.artifacts/implementation-iteration-history.md for per-round detail.artifacts/implementation-iteration-history.md.artifacts/implementation-decision-log.md.feature-implementation-plan.md's ## Deferred (YAGNI) section (omit this line if the section was not written because nothing qualified).feature-implementation-plan.md.Ask whether the user wants to iterate on specific sections or consider the plan ready for implementation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.