vaultspec-core
Review a feature implementationLink to Review a feature implementation
Review the implementation against its approved scope, any governing architecture decision records (ADRs), and test evidence. Define which changes the review covers.
Check records separatelyLink to Check records separately
Run the workspace and record checks to find metadata and link problems. Passing these checks doesn’t prove the code behaves correctly or that someone reviewed the feature.
For hook activation and setup choices, see project integration settings.
Review the changeLink to Review the change
For planned work, ask your agent to use vaultspec-code-review. Give it the
implementation scope and the feature’s documents. It compares the integrated result with
the plan and any governing ADRs, consulting supporting evidence as needed. Record scope,
findings, and recommendations in the feature’s rolling audit. A change without a plan is
reviewed in the reply and does not require an audit record.
For planned work, review at each Phase close, at plan close, and before handoff for merge or completion. Combine coincident reviews. An L1 plan has no Phases, so it has no Phase-close gate. Tests and local checks still run with each Step.
Trace the affected workflow across its components: do the interfaces agree, do failure paths behave as intended, and do the tests cover the promised result? For documentation or framework changes, read the pages and instructions together for conflicting advice. Separate file reviews alone do not establish that the whole workflow works.
To scaffold the feature’s first audit manually, run:
Command
vaultspec-core vault add audit --feature payment-retries
Replace payment-retries with your feature’s tag. This creates a template, not a
completed review. Record the reviewed scope and result even when no problems are found;
append later reviews and resolutions to the same audit.
Act on findingsLink to Act on findings
The review skill directs the agent to report problems without fixing code during the review. Execution handles fixes within the approved scope through the implementation plan, then reruns relevant tests and record checks. Critical or high findings reopen affected Steps and must be fixed before continuing. New scope or uncovered decisions require authorization. Append review outcomes and resolutions without erasing earlier findings.
Before accepting the feature, review its assumptions, test evidence, and responses to the findings. Resolve uncertainty that could change your acceptance decision.
Proving a guard can failLink to Proving a guard can fail
Verify that a test detects the defect it targets:
Run the focused test and confirm it passes. For pytest, use
pytest path/to/test_file.py::test_name.In an isolated copy of the code being tested, temporarily introduce that defect. For a negative-timeout check, make the loader accept a negative timeout without changing the test.
Run the test against the modified copy. Confirm it fails at the assertion for that defect, not from an unrelated error. Investigate any other result before treating the test as verified.
Undo only your temporary edit. Compare against the pre-test state to confirm that you preserved the implementation and any unrelated changes.
Rerun the test and confirm it passes again.
Remove the temporary defect before pausing or handing off the work. Record the failing and passing commands and results with the step’s verification evidence.
What the ledger containsLink to What the ledger contains
Log the files changed by a Step, then close the Step separately. Checking a Step does not record its file changes.
Use the execution log reference for the command, supported evidence fields, and ledger format. Keep verification results with the work they check; a file-change record alone does not show that tests ran.
What to run before you call something doneLink to What to run before you call something done
Run the project’s tests, linting, and type checks.
Review the implementation against the approved scope and any governing decisions using the review step. Address findings and rerun affected checks.
Review the final diff before committing.