source-grounding · diff
git:20260614.13e0a75 to git:20260804.9ade4bd
42 added, 10 removed. Audit A to A.
---
name: source-grounding
description: >-
Verify version-sensitive facts against live authoritative sources before asserting them in code or answers. Triggers on: "/source-grounding", "source-grounding", "sourcing". Standing rule — always active via CLAUDE.md. Invoke for deep verification work (API signatures, CVEs, model IDs, auth flows, deprecated patterns, security advisories).
---
# Source Grounding
<!-- SHARED:LANGUAGE_HEADER -->
Standing rule — active every response. No invocation needed for routine use.
+ ## Consent gates (G1–G4, declared)
+ | # | what it gates | when it fires | Agent lane | Hook lane |
+ |---|---|---|---|---|
+ | G1 | model tier | before work starts | `ask_question`, 3 tiers, wait for pick | suppressed — auto-Light, no tier question |
+ | G2 | how to proceed on an unfetchable source | source can't be fetched, user present | `ask_question` | `ask_question` |
+ | G3 | entanglement hand-off | after the findings, cross-domain | `ask_question`, once | `ask_question`, once |
+ | G4 | self error-report | skill misbehaves | offer, never auto-submit | offer, never auto-submit |
+
## What to verify (not memory)
- - **CRITICAL** (always fetch or flag): API/SDK call signatures · library versions & deprecations · CVEs/security advisories · auth/crypto specs · LLM model IDs & params
+ - **CRITICAL** (always fetch or flag — P2): API/SDK call signatures · library versions & deprecations · CVEs/security advisories · auth/crypto specs · LLM model IDs & params
- **MEDIUM** (verify when unsure): package names · config keys · CLI flags · protocol specs
- - **LOW/stable**: math, algorithms, language syntax → memory fine
+ - **LOW/stable**: math, algorithms, language syntax → memory fine (P3)
## How
1. Identify the version-sensitive claim.
2. Name the authoritative source (official docs, advisory DB, package registry, spec, source code).
- 3. Fetch (WebSearch/WebFetch/docs MCP) — or flag `⚠️ unverified: check [source]`.
- 4. Cite at CRITICAL/MEDIUM. Don't over-verify stable facts.
+ 3. Fetch (WebSearch/WebFetch/docs MCP) — or flag `⚠️ unverified: check [source]` (D1).
+ 4. Cite at CRITICAL/MEDIUM. Don't over-verify stable facts (P3).
Per-claim-type authoritative source map: read `references/sources.md` when choosing where to verify.
- ## Source hierarchy
- 1. Source code / spec / RFC — primary ground truth
+ ## Source hierarchy (1 = strongest)
+ 1. Source code / spec / RFC
2. Official/vendor docs — authoritative secondary (honor `.coalmine.json` `trustedDomains` if set: treat those domains as additional authoritative / tier-2 sources)
- 3. Multiple reputable third-party sources — triangulated
- 4. Single blog — weak; corroborate first
+ 3. Multiple reputable third-party sources
+ 4. Single blog — corroborate first (P4)
5. Training memory — weakest for volatile facts
- Non-interactive runs: log unfetchable claims as `⚠️ UNVERIFIED` and continue — never block. Interactive: when sources cannot be fetched, confirm how to proceed via `ask_question`.
+ Why each rank sits where it does: `references/sources.md`.
- ## Output
+ Non-interactive runs: log unfetchable claims as `⚠️ UNVERIFIED` and continue (D1). Interactive: when sources cannot be fetched, confirm how to proceed via `ask_question` (G2).
+
+ ## Prohibitions (P1–P6, declared)
+ | # | never … |
+ |---|---|
+ | P1 | default to English just because this file is English |
+ | P2 | skip fetching or flagging a CRITICAL version-sensitive claim |
+ | P3 | over-verify a stable/LOW fact |
+ | P4 | cite a single blog source without corroborating first |
+ | P5 | auto-submit the self error-report |
+ | P6 | include unapproved code or paths in the self error-report |
+
+ The shared footer's `never fix without a chosen option` does not apply here — this skill defines no Fix mode section, so that clause resolves vacuously; not counted above.
+
+ ## Degrade paths (D1–D4, declared)
+ | # | branch | condition | lane |
+ |---|---|---|---|
+ | D1 | log as `⚠️ UNVERIFIED`, continue, never block | non-interactive, source unfetchable | universal |
+ | D2 | degrade to model tier + reasoning depth, never fake parallelism | no capability lever for the target tier on this host | universal |
+ | D3 | fall back to a numbered text menu | host has no question tool | universal |
+ | D4 | fixed at Light, no tier question, no sub-agents | Hook Context (auto-triggered) | Hook only |
+
+ Hook cells assume an interactive session; the footer's Fix-mode-dependent offer clause is vacuous here either way (no Fix mode section to defer to).
+
+ ## Output — 3 annotation forms, declared
- Verified: `✅ [claim] — source: [link/file]`
- Unverified: `⚠️ unverified — check [exact source]`
- Stable fact: no annotation needed
## AUTHORITATIVE vs DIVERSE
- **AUTHORITATIVE** (one ground truth): API/version/config/spec → go to the actual source code or official docs.
- **DIVERSE** (triangulate ≥ 3): "what's best" / landscape / patterns → multiple repos + docs + community; note conflicts.
<!-- SHARED:ORCHESTRATION -->
<!-- SHARED:ESCALATION_FOOTER -->