product-brief — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited product-brief (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A brief exists to get people aligned before the work starts — what we're building and why (PRD), or how we propose to build it (RFC). Its job is to surface disagreement early while it's cheap, give everyone one source of truth, and produce a reviewed decision engineering can execute against.
A brief is not a novel. A two-page PRD with clear metrics beats a forty-page doc nobody reads. A RFC with honest alternatives beats a design that pretends the chosen path is the only path.
Define phase chain: [[idea-shaping]] (is it worth it?) → product-brief (align stakeholders) → [[spec-first]] (testable engineering spec) → [[work-planning]] (tasks). Record settled decisions in [[decision-docs]].
Product brief / PRD — the what and why:
Technical RFC — the how:
Both — large initiatives: PRD for user outcomes + RFC for technical approach (can be one doc with clear sections).
Skip when [[idea-shaping]] hasn't confirmed pursue — don't PRD a idea still fuzzy. Skip RFC for small changes with one obvious approach inside one team — go to [[spec-first]].
| Situation | Artifact |
|---|---|
| User-facing feature, unclear scope | PRD |
| Platform change, no new UX | RFC |
| Big initiative (marketplace, new billing) | PRD + RFC |
| Small API addition, one team | [[spec-first]] may suffice |
| Exec said "build X" | [[idea-shaping]] first, then PRD |
Name the author, reviewers, and decision date at the top — accountability matters.
Ground in evidence from [[idea-shaping]] when available — don't restart from a solution slogan.
Template:
# [Feature name] — Product Brief
Status: Draft | In review | Approved
Author: … | Reviewers: … | Target release: …
## Problem & audience
Who has the pain? What do they do today? Evidence (data, quotes, support volume) — not assertion.
## Why now
Strategic fit, market, regulation, competitive pressure, technical enabler.
## Goals & success metrics
Primary metric + target (e.g. publish rate +10% in 90 days).
Guardrail metrics (don't harm conversion, latency, support volume).
## Scope — in
Must-have behaviors for this release (bullet list).
## Scope — out
Explicitly deferred (prevents scope creep in review).
## User stories / requirements (prioritized)
Must / should / could — each testable:
- As a seller, I see a suggested price range when listing, so I can publish confidently.
## Dependencies
Teams, APIs, legal, design, data, third parties.
## Risks & mitigations
| Risk | Mitigation |
|------|------------|
## Open questions
| Question | Owner | Due |
|----------|-------|-----|
## Non-goals
What we are deliberately not solving.Requirements must be testable — "fast checkout" fails; "guest checkout completes in < 3 steps" passes (hand detailed criteria to [[spec-first]]).
Success metrics need baseline + target + measurement method ([[observability]] hooks planned).
For how we'll build after (or alongside) product alignment:
# RFC: [Title]
Status: Draft | In review | Accepted | Superseded
Author: … | Reviewers: …
## Context & problem
Current system, constraints, scale, why change now. Link PRD if user-driven.
## Goals & non-goals
Technical outcomes (latency, reliability, cost) — not duplicate entire PRD.
## Proposed design
Architecture diagram (simple), components, data flow, key interfaces ([[interface-design]]).
Migration impact if any ([[migration-path]]).
## Alternatives considered
| Option | Pros | Cons | Why not |
|--------|------|------|---------|
| A — chosen | … | … | |
| B | … | … | rejected because … |
| C — do nothing | … | … | |
## Trade-offs & impact
Performance, security ([[hardening]]), operability, cost, team ownership, timeline.
## Rollout plan
Phases, flags, backward compatibility ([[launch-readiness]], [[incremental-delivery]]).
## Open questions
| Question | Owner | Due |
## Appendix
Diagrams, spike results, benchmarks ([[perf-budget]]).Alternatives section is mandatory — reviewers trust RFCs that show roads not taken ([[decision-docs]]).
Before "Approved":
Feedback types:
| Type | Action |
|---|---|
| Clarification | Edit doc |
| Scope change | Update in/out; re-review if large |
| Technical blocker | RFC amendment or spike ticket |
| Disagreement on approach | Escalate with alternatives table; decision recorded |
Approval means: stakeholders accept scope, metrics, and approach — not "everyone loves it."
Do not start [[work-planning]] / [[incremental-delivery]] while:
Allowed parallel work: spikes time-boxed to answer open questions ([[idea-shaping]] validation), design exploration — not production feature code on contested scope.
| From brief | To | What transfers |
|---|---|---|
| Approved PRD | [[spec-first]] | Testable requirements, edge cases, done definition |
| Approved RFC | [[spec-first]] + [[interface-design]] | Contracts, migration steps |
| Either | [[work-planning]] | Ordered tasks, estimates |
| Significant choice | [[decision-docs]] | ADR extracted from RFC alternatives |
| Launch | [[launch-readiness]] | Rollout from RFC; metrics from PRD |
Spec-first is narrower than PRD — engineering contract for one team sprint, not stakeholder alignment.
Update brief status to Approved with date; link spec/ADR in header.
Briefs are living during Define/Plan, frozen at Approved for that release slice.
When scope or approach changes materially:
Post-ship retrospective: did metrics move? Feed [[idea-shaping]] for v2.
New user-facing feature
Idea-shaping → PRD draft → design review → eng review → approved → spec-first → build.
Platform migration (no UX)
RFC with alternatives → spike for risky unknown → approved → migration-path plan → incremental delivery.
Executive priority drop
Shape problem in 1-pager → PRD scope minimal v1 → explicit out-of-scope → fast review with named approver.
Cross-team API initiative
RFC interfaces first → partner teams comment → contract frozen → PRDs per consumer if needed.
Customer-driven one-off
Evidence it's representative segment → PRD or explicit "custom exception" with sunset → decision-doc.
PRD without eng review
Risk: unbuildable scope — always include eng reviewer for feasibility and dependencies.
RFC without product context
Risk: solves technical elegance not user outcome — link PRD or problem statement.
Brief after code started
Retrospective doc only — mark as retrospective; don't call it alignment.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.