Audit Trace

The vertical traceability check. It answers with evidence: do requirement IDs agree across the spec triad (and optional architecture docs), and does the capability catalog stay free of duplicate CODEs, OBS-<6hex> in Code cells, and broken shard refs?

It is not a judgment call. Every input is gathered with grep and reads — deterministic passes — and every finding follows a fixed rule. Two agents running this on the same repo reach the same finding set.

Docs-only: this check never greps application source, test files, or commit messages for requirement IDs. Coverage of behavior by tests is enforced by execute-family Spec review, test-first, and prove-claim verify commands — not by embedding CODE-N.M in code.

What it produces

A finding set, each item an ERROR or a WARNING: