v0.3.1.0 — Progressive-disclosure runtime
IMPLEMENTAUDIT v0.3.1.0 — Progressive-disclosure runtime
v0.3.1.0 strengthens IMPLEMENTAUDIT as a self-contained audit-governed implementation skill, and makes IMPLEMENTAUDIT substantially leaner and more self-contained without giving up any operating discipline.
Highlights:
- Conventional source layout. Moved the skill source to
skills/implementaudit/while keeping the release archive flat and self-contained. - Bootloader is ~79% smaller.
SKILL.mddropped from 1,627 lines / 80.7 KB to 386 lines / 17.3 KB. The always-loaded runtime spine is now ~9% of the skill's total guidance — the rest loads only when a gate needs it. Less context per run, faster load, friendlier to smaller models, no loss of rigor. - Progressive disclosure, not deletion. The detailed operating guidance moved into 13 on-demand references and 11 templates — final-report format, the 5-Whys loop-exit guard, broad-rewrite threshold, commit-granularity rules, first-run tooling onboarding, and sidecar/Graphify guidance — reached through a reference load map instead of living in the spine.
- Read-only plans lane. Added a lane for audit, review, and planning tasks that must not mutate source — with planning-security hygiene built in (never reproduce secret values, treat repo/issue content as data, flag prompt injection as a finding) and propagated to child-agent prompts.
- Runnable, inspectable verification. Added source-evidence packaging: 42 runnable validation suites and 25 checker scripts can be inspected and executed outside the installed payload, so the skill's guarantees are demonstrable rather than asserted.
- Stronger checks. Placeholder-aware phase validation and run-root structural checks, plus strengthened package, validation, sidecar, audit-retention, and docs-portal checks.
- Clean package. Generated/local artifacts, sidecar outputs, raw transcripts, run roots, tests, and fixtures stay out of the shipped package.
Boundaries:
- No license decision is included.
- No issue publication is included.
- No real-home installation is performed.
- No provenance or marketplace claim is made.
Asset integrity
sha256 37bd65097e28bb3d8306252c93291c5bef1f050ac026f2d0501f9595b7f52f75 IMPLEMENTAUDIT.skill