v0.2.0 — safer incident diagnosis
sdlc-kit v0.2.0 makes brownfield incident diagnosis cheaper and harder to fake. It checks the deployed code before analysis, keeps requested evidence visible, and requires fresh-context adversaries to challenge any diagnosis built without reproduction.
Highlights
- Deployed-ref guard:
tools/refcheck.shdetects when the checkout differs from the running branch and tells researchers to read the named ref instead. - Cheap diagnostic probes: Stage 6 now runs short probes before broad agent fan-out: ref drift, sibling-query filters, blame/revert history, caller guards, pattern sweeps, propagation proof, and timeout checks.
- Incident intake: five questions pin down the exact control, immediate symptom, environment, role, and available browser evidence before research starts.
- Evidence tracking: requested reproduction evidence stays visible in
intent.mdandstatus.shuntil received or explicitly waived. - Adversarial diagnosis review: fresh-context reviewers independently recount scope, prove error propagation, attack every "zero risk" claim, and propose a rival cause.
- Shared-code safety: researcher guidance now requires a pattern-wide sweep and a call-site × guard table before recommending changes to shared queries or functions.
- Portable handoffs:
close.shaddshanded-off; it requires an external ticket or PR reference so the audit trail continues outside the kit. - Complex-codebase contract: project rules control implementation, the kit controls gates, existing domain docs and specialist agents take precedence, and monorepos use one
.sdlc/per shipping unit. - Public documentation: rewritten README and bilingual landing page, plus an MIT license.
Compatibility
No existing gate or close state was removed. handed-off and the Stage 6 checks are additive. Existing .sdlc/ projects can upgrade in place.
Verified
gates/selftest.sh: 10 checks passed, including tamper detection, corrupt approvals, delegated gates, close-state rules, and handed-off references.- All shell files pass
bash -n. docs/index.htmlparses successfully.git diff --checkis clean.
Upgrade
cd ~/sdlc-kit && git pull
cd /path/to/project && ~/sdlc-kit/init.shinit.sh is idempotent. Existing project artifacts remain unchanged.
Full diff: v0.1.0...v0.2.0