verification-gate SKILL.md skillA
verification-gate from cat-xierluo/legal-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cat-xierluo/legal-skills/verification-gate@v1.3.0Pins v1.3.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cat-xierluo/legal-skills
- Path
skills/verification-gate/SKILL.md- Versions recorded
- 5
- Latest version
- v1.3.0, committed Sep 5, 2026
- First version recorded
- Aug 5, 2026
- Size
- 18,038 bytes
- Repository stars
- 775
- License
- none declared
代码改完后的分层验证执行与证据记录。完成 feature / 重大变更 / 创建 PR / 重构 / 声称「修完」前使用——按项目运行 build、unit、e2e、真机等代表性阶段并记录真实结果（编译过 ≠ 功能可用）。覆盖 Tauri 桌面 / Web / 服务 / Skill 四类分支，可把已执行事实转换为 production-engineering-audit staged receipt；完成等级与发布结论由 production-engineering-audit 裁决。不要用于：业务领域验证、Skill 质量审查（用 skill-lint）、纯文档变更、一次性脚本。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Verification Gate（代码改完后的验证门禁） 本 skill 是「代码改完 → 声称完成 / 提交 PR」之间的**验证执行与证据记录层**。核心解决一个问题：**编译过 ≠ 功能可用**。 它负责真实运行适用阶段、观察功能终态并保留阶段事实；`production-engineering-audit`（PEA）是完成 层级的唯一裁决者。需要机器可消费的分层证据时，读取 [`references/staged-receipt.md`](references/staged-receipt.md)，用确定性转换器生成 staged receipt， 再交给 PEA。不要在本 Skill 内另造 READY / RELEASED 判决。 > 直接教训：改完 reader worker 加载，`typecheck` / build / lint / 单测全过，就声称「修完」，实机却「文字层未知」（`textLayerStatus` 卡 unknown）崩——编译层根本抓不到运行时功能问题。这类坑的唯一解是 **e2e（功能验证）+ 真机**。 ## 工作原则 - **先编译层（1-4），再功能层（5-6）**：编译层是前置门禁，但**不充分**；功能层（e2e + 真机）才是完成线。 - **e2e/真机失败必须如实记录**：5/6 不过就不能作为对应完成声明的通过证据，无论 1-4 多干净； 是否达到项目要求的完成层级交给 PEA 按项目契约裁决。 - **断言功能结果，非「存在元素」**：教用户写 e2e 时断言「canvas 像素非空 / textLayerStatus ≠ unknown / 点击后面板真的弹出」，而非「存在 canvas / 存在按钮」（防伪渲染 / 假成功）。 - **Bug 修复必须新增复现测试**（回归规范）：修完一个 bug，加一条能复现该 bug 的 e2e/单测，防止回归。 - **套件悬挂 = 未通过**：`npm test` 永不退出（summary 不打印 / 进程不退）按 P0 基础设施缺陷处理，诊断 playbook 见 `references/lessons-from-practice.md` 教训 12；用子集绕开只能是登记过任务的临时态——悬挂会掩盖真实失败（教训 11：修复当日暴露 3 条被藏数周的失败）。 - **不采信生产者（worker/PM 自己）自报 PASS**：跑实际命令，看实际输出。 - **按项目类型选验证命令**：Tauri 桌面 / Web / 服务 / Skill，命令不同（见 §项目类型分支）。 ## 8 阶段验证 | # | 阶段 | 门禁 | 完成线 | CI | |---|---|---|---|---| …
Read the whole file at its exact version.
How to install
mdr add cat-xierluo/legal-skills/verification-gate@sha256:44d59189d8726a3dThe line at the top of this page pins the label v1.3.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_d4llmnen5fv4qyrk)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Aug 5, 2026 and Sep 5, 2026, about one every 8 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.3.0 latest | 2026-09-05 | 161c66a | 18,038 B | A | view · diff |
| v1.2.0 | 2026-08-14 | ff5abd8 | 16,601 B | A | view · diff |
| v1.1.1 | 2026-08-14 | bddc9ba | 16,258 B | A | view · diff |
| v1.1.0 | 2026-08-14 | 971022f | 15,909 B | A | view · diff |
| v1.0.2 | 2026-08-05 | 2283226 | 14,587 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (18038 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cat-xierluo/legal-skills · 775 stars · license none declared · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_d4llmnen5fv4qyrk GET https://markdownregistry.com/api/v1/resolve?ref=cat-xierluo/legal-skills/verification-gate GET https://markdownregistry.com/api/v1/blob/44d59189d8726a3de077107edbfcfd5ae6a45a8f6ea0dbc209808c25436daf33
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from cat-xierluo/legal-skills
Every file in cat-xierluo/legal-skills