Skip to content

v0.2.0 — safer incident diagnosis

Choose a tag to compare

@cskwork cskwork released this 29 Aug 03:06
· 62 commits to main since this release

sdlc-kit v0.2.0 makes brownfield incident diagnosis cheaper and harder to fake. It checks the deployed code before analysis, keeps requested evidence visible, and requires fresh-context adversaries to challenge any diagnosis built without reproduction.

Highlights

  • Deployed-ref guard: tools/refcheck.sh detects when the checkout differs from the running branch and tells researchers to read the named ref instead.
  • Cheap diagnostic probes: Stage 6 now runs short probes before broad agent fan-out: ref drift, sibling-query filters, blame/revert history, caller guards, pattern sweeps, propagation proof, and timeout checks.
  • Incident intake: five questions pin down the exact control, immediate symptom, environment, role, and available browser evidence before research starts.
  • Evidence tracking: requested reproduction evidence stays visible in intent.md and status.sh until received or explicitly waived.
  • Adversarial diagnosis review: fresh-context reviewers independently recount scope, prove error propagation, attack every "zero risk" claim, and propose a rival cause.
  • Shared-code safety: researcher guidance now requires a pattern-wide sweep and a call-site × guard table before recommending changes to shared queries or functions.
  • Portable handoffs: close.sh adds handed-off; it requires an external ticket or PR reference so the audit trail continues outside the kit.
  • Complex-codebase contract: project rules control implementation, the kit controls gates, existing domain docs and specialist agents take precedence, and monorepos use one .sdlc/ per shipping unit.
  • Public documentation: rewritten README and bilingual landing page, plus an MIT license.

Compatibility

No existing gate or close state was removed. handed-off and the Stage 6 checks are additive. Existing .sdlc/ projects can upgrade in place.

Verified

  • gates/selftest.sh: 10 checks passed, including tamper detection, corrupt approvals, delegated gates, close-state rules, and handed-off references.
  • All shell files pass bash -n.
  • docs/index.html parses successfully.
  • git diff --check is clean.

Upgrade

cd ~/sdlc-kit && git pull
cd /path/to/project && ~/sdlc-kit/init.sh

init.sh is idempotent. Existing project artifacts remain unchanged.

Full diff: v0.1.0...v0.2.0