failure-codifier
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes defined local shell scripts (such as
./scripts/failure-codifier-propose.sh) and the Go testing suite to perform analysis. These operations are scoped to local discovery and validation. - [SAFE]: Implements a mandatory 'human-approval-required' gate for all promotion steps. The skill is architecturally restricted to 'dry-run' proposals and is forbidden from automatically modifying system memory or Single Source of Truth (SSOT) files.
- [SAFE]: Data Ingestion Security:
- Ingestion points: Reads orchestration and judgment ledgers (
.claude/state/orchestration-ledger.jsonl,.claude/state/judgment-ledger.jsonl) to identify recurring failures. - Boundary markers: None explicitly mentioned.
- Capability inventory: Utilizes
Bash,Read, andGreptools for log inspection. - Sanitization: Risks from processing untrusted log data are mitigated by the 'proposal-only' design and the requirement for manual human review of all JSON outputs before they are used.
Audit Metadata