verify

Prompt file imported from ShadyBad/margin_invest (.claude/commands/verify.md). Fill in {{arguments}} before use. Copyright stays with the author.

/verify — Evidence Pack + Done Gate

You are running Phase 10 of the GSD Workflow Engine.

Run ID: {{arguments}}

Step 1: Load State

Read:

• runs/{{arguments}}/intake/track_decision.json — determine Lite vs Full
• runs/{{arguments}}/intake/acceptance_criteria.md
• runs/{{arguments}}/execute/criteria_status.md

Write audit event:

{"event": "verify_started", "run_id": "{{arguments}}", "timestamp": "<ISO8601>"}

Create evidence directory: runs/{{arguments}}/final/evidence/

Step 2: Run Verification Suite

Execute these commands and capture ALL output to log files:

# Lint
npm run lint > runs/{{arguments}}/final/lint.log 2>&1
echo "LINT_EXIT=$?" >> runs/{{arguments}}/final/lint.log

# Type check
npm run type-check > runs/{{arguments}}/final/typecheck.log 2>&1  
echo "TYPECHECK_EXIT=$?" >> runs/{{arguments}}/final/typecheck.log

# Unit tests
npm test > runs/{{arguments}}/final/unit_tests.log 2>&1
echo "UNIT_EXIT=$?" >> runs/{{arguments}}/final/unit_tests.log

Adapt commands to your actual project toolchain.

If a command doesn't exist, document why in a <step>_waiver.md file.

Step 3: Secrets Scan

Scan all artifacts and source for leaked secrets:

# Scan for common secret patterns
grep -r "sk-[a-zA-Z0-9]\+" runs/{{arguments}}/ src/ --include="*.json" --include="*.log" --include="*.md" | grep -v "[REDACTED]" > /tmp/secret_scan.txt 2>&1
grep -r "password=" runs/{{arguments}}/ src/ >> /tmp/secret_scan.txt 2>&1
grep -r "token=" runs/{{arguments}}/ src/ >> /tmp/secret_scan.txt 2>&1
grep -r "api_key" runs/{{arguments}}/ src/ >> /tmp/secret_scan.txt 2>&1

Write results to runs/{{arguments}}/final/redaction_scan.json:

{
  "findings": [],
  "clean": true,
  "scanned_paths": ["runs/{{arguments}}/", "src/"],
  "timestamp": "<ISO8601>"
}

If findings > 0: STOP. Redact before proceeding.

Step 4: Build Evidence Pack

Collect proof for every Done Gate check.

Write runs/{{arguments}}/final/verification.md:

# Verification Report

## Run ID: {{arguments}}
## Track: LITE | FULL
## Timestamp: <ISO8601>

## Gate Results

| Gate | Status | Proof |
|---|---|---|
| Scope locked | ✓ PASS / ✗ FAIL | runs/.../intake/scope.md |
| Acceptance criteria | ✓ PASS / ✗ FAIL | runs/.../intake/acceptance_criteria.md |
| Lint | ✓ PASS / ✗ FAIL | runs/.../final/lint.log |
| Type check | ✓ PASS / ✗ FAIL | runs/.../final/typecheck.log |
| Unit tests | ✓ PASS / ✗ FAIL | runs/.../final/unit_tests.log |
| No secrets | ✓ PASS / ✗ FAIL | runs/.../final/redaction_scan.json |
| Audit trail | ✓ PASS / ✗ FAIL | runs/.../audit/events.jsonl |
| Scope changes tracked | ✓ PASS / N/A | docs/scope-changes/ |
<FULL track gates if applicable>

## Acceptance Criteria
<paste from criteria_status.md>

Step 5: FULL Track — Integration Tests

If FULL track:

npm run test:integration > runs/{{arguments}}/final/integration_tests.log 2>&1
echo "INTEGRATION_EXIT=$?" >> runs/{{arguments}}/final/integration_tests.log

If integration tests don't exist yet: create runs/{{arguments}}/final/integration_test_waiver.md explaining why and when they'll be added.

Step 6: Done Gate Evaluation

Read done_gate.yaml. Evaluate every gate against evidence collected.

Write runs/{{arguments}}/final/done_gate.json:

{
  "run_id": "{{arguments}}",
  "track": "LITE | FULL",
  "timestamp": "<ISO8601>",
  "status": "DONE | NOT_DONE",
  "gates": {
    "scope_locked": {"status": "PASS | FAIL", "proof": "<path>"},
    "acceptance_criteria": {"status": "PASS | FAIL", "proof": "<path>"},
    "lint_pass": {"status": "PASS | FAIL", "exit_code": 0},
    "type_check_pass": {"status": "PASS | FAIL", "exit_code": 0},
    "unit_tests_pass": {"status": "PASS | FAIL", "exit_code": 0},
    "no_secrets_in_artifacts": {"status": "PASS | FAIL", "findings": 0},
    "audit_trail_exists": {"status": "PASS | FAIL", "proof": "<path>"}
  },
  "failed_gates": [],
  "next_actions": []
}

Step 7: Final Output

If DONE:

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✓ DONE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Run ID:  {{arguments}}
Track:   LITE | FULL
Gates:   <N>/<N> passed

Evidence: runs/{{arguments}}/final/
Audit:    runs/{{arguments}}/audit/events.jsonl

Ready to commit / ship.
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

If NOT_DONE:

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✗ NOT DONE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Run ID:  {{arguments}}

FAILED GATES (ranked by blocking priority):
1. <gate> — <what to do>
2. <gate> — <what to do>

Fix blockers and re-run: /verify {{arguments}}
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Write final audit event:

{"event": "verify_complete", "run_id": "{{arguments}}", "status": "DONE|NOT_DONE", "failed_gates": [], "timestamp": "<ISO8601>"}