finding-discipline
Installation
SKILL.md
Finding Discipline
Overview
The Iron Law: No [CONFIRMED] without proof. A finding is a claim about real, demonstrated
impact — not a status code, a reflected string, or a hunch. This is the offensive equivalent of
test-driven development: the proof is the test, and the finding does not exist until it passes.
Violating the letter of this rule is violating its spirit.
The three tiers
[CONFIRMED]— impact demonstrated AND grounded in an evidence artifact that exists on disk.[POSSIBLE]— reachable but the class proof bar is not yet met. Keep digging; do not report as real.[INFO]— true but no security impact at the claimed severity.