Home / ccoalm / ccl-skills · GitHub

requirement-scope SKILL.md skillA

requirement-scope from ccoalm/ccl-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add ccoalm/ccl-skills/requirement-scope@git:20260906.d46c77e

Pins git:20260906.d46c77e in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: ccoalm/ccl-skills
Path: skills/requirement-scope/SKILL.md
Versions recorded: 3
Latest version: git:20260906.d46c77e, committed Sep 6, 2026
First version recorded: Aug 12, 2026
Size: 8,564 bytes
Repository stars: 6
License: Apache-2.0

改动范围 / 影响范围 / scope / 需求拆分 / MVP 边界 / 非目标 / 版本切片 / 兼容·回滚降级边界 / 变更影响 / appetite / timebox —— 交付物是**变更边界**：in/out scope、受影响对象、依赖、MVP 与后续切片、appetite 与砍项、每个切片的验收范围。前提是方向已定。Skip 方向还没定、要先弄清「到底要什么」→ requirement-intent；要的是现状清单（现在怎么运作、有什么能力）→ requirement-baseline；风险定级与要哪些 gate → feature-risk-router；实现/发布计划 → product-rd-workflow；测试范围 → testing-strategy。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Requirement Scope

方向已定之后，把它界定成变更边界：本轮改哪些、不改哪些、影响谁、依赖什么、切几版、愿意花多少。哪些对象受影响、哪些先不做时进入本技能。

## 硬约束（先读，全程适用）

1. **P0 核心 in/out 由 `human-decision` 关闭。** agent 不得自行决定，也不得决定产品目标、核心路径、成本级别或验收承诺。
2. **as-is 证据不裁决 should-be 范围。** 代码、数据、架构等描述性证据不能自行决定本轮改不改。
3. **边界要可审查。** in/out 写成行为边界，不用「优化体验」这类不可判定的模糊标签。
4. **先判 appetite 是否适用，再记录投入与取舍。** [Shape Up 的 appetite](https://basecamp.com/shapeup/1.2-chapter-03) 用于在固定投入下调整范围；它不是每张影响范围表的必填前提。
   - 任务要求投入决策，或已有适用的投入上限时，记录已确认上限和超出时可调整的范围。取舍未定就保留已知上限，把未知子项标 `open`，继续交付其余字段；不得自行砍掉核心范围、降低既有验收要求或承诺按期完成。
   - 人工兜底只在业务连续性、降级或已批准决策确实需要时填写；不需要时写明依据，不为填表虚构人工接管。
   - 仅做影响范围盘点、未涉及投入决策时，可按任务边界记 `not-applicable`。用户要求省略展示细节时遵从该要求，已确认约束和未决事项保留在关闭表中；省略展示不等于撤销既有约束或关闭未决承诺。
5. **关闭表只补自己那部分。** 唯一 canonical 是 `requirement-doc-writer/references/requirement-closure-contract.md`。本技能按复合字段子项补版本、范围、appetite、依赖和验收，逐项记录推导、决策权和决策证据；只能自动填写单个低风险、可逆的非核心展示/表达细节（decision_authority 记 `bounded-agent-policy`，且须有可引用的已批准 policy），**任一适用子项 open 时复合字段和整行保持 open/blocked**。
6. **「非目标」在这里是变更级**——本轮明确不改、延后、保持兼容、无需迁移的对象。意图级的「本轮不追求什么目标」属 `requirement-intent`。同理「验收」在这里是每个切片的验收边界与不验收项，不是功能点 pass/fail。

### 安全 4 问（命中即阻断）
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add ccoalm/ccl-skills/requirement-scope@sha256:31f46a35743b8da3

The line at the top of this page pins the label git:20260906.d46c77e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_m2glyrchxlubafno.svg)](https://markdownregistry.com/a/art_m2glyrchxlubafno)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Aug 12, 2026 and Sep 6, 2026, about one every 13 days.

version	committed	commit	size	audit
git:20260906.d46c77e latest	2026-09-06	d46c77e	8,564 B	A	view · diff
git:20260905.260c603	2026-09-05	260c603	7,880 B	A	view · diff
git:20260812.206facb	2026-08-12	206facb	7,851 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (8564 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

ccoalm/ccl-skills · 6 stars · license Apache-2.0 · pushed 2026-11-05 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_m2glyrchxlubafno
GET https://markdownregistry.com/api/v1/resolve?ref=ccoalm/ccl-skills/requirement-scope
GET https://markdownregistry.com/api/v1/blob/31f46a35743b8da351f5a517a3d15a0cbe92ca4f0b778d21aec6d0b5574a9546

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.