Skip to content

v0.3.1.0 — Progressive-disclosure runtime

Choose a tag to compare

@theislampill theislampill released this 14 Jun 16:47
· 679 commits to main since this release

IMPLEMENTAUDIT v0.3.1.0 — Progressive-disclosure runtime

v0.3.1.0 strengthens IMPLEMENTAUDIT as a self-contained audit-governed implementation skill, and makes IMPLEMENTAUDIT substantially leaner and more self-contained without giving up any operating discipline.

Highlights:

  • Conventional source layout. Moved the skill source to skills/implementaudit/ while keeping the release archive flat and self-contained.
  • Bootloader is ~79% smaller. SKILL.md dropped from 1,627 lines / 80.7 KB to 386 lines / 17.3 KB. The always-loaded runtime spine is now ~9% of the skill's total guidance — the rest loads only when a gate needs it. Less context per run, faster load, friendlier to smaller models, no loss of rigor.
  • Progressive disclosure, not deletion. The detailed operating guidance moved into 13 on-demand references and 11 templates — final-report format, the 5-Whys loop-exit guard, broad-rewrite threshold, commit-granularity rules, first-run tooling onboarding, and sidecar/Graphify guidance — reached through a reference load map instead of living in the spine.
  • Read-only plans lane. Added a lane for audit, review, and planning tasks that must not mutate source — with planning-security hygiene built in (never reproduce secret values, treat repo/issue content as data, flag prompt injection as a finding) and propagated to child-agent prompts.
  • Runnable, inspectable verification. Added source-evidence packaging: 42 runnable validation suites and 25 checker scripts can be inspected and executed outside the installed payload, so the skill's guarantees are demonstrable rather than asserted.
  • Stronger checks. Placeholder-aware phase validation and run-root structural checks, plus strengthened package, validation, sidecar, audit-retention, and docs-portal checks.
  • Clean package. Generated/local artifacts, sidecar outputs, raw transcripts, run roots, tests, and fixtures stay out of the shipped package.

Boundaries:

  • No license decision is included.
  • No issue publication is included.
  • No real-home installation is performed.
  • No provenance or marketplace claim is made.

Asset integrity

sha256  37bd65097e28bb3d8306252c93291c5bef1f050ac026f2d0501f9595b7f52f75  IMPLEMENTAUDIT.skill