Sus Audit

Observe. Prove. Prescribe nothing.

Ask required questions through the native picker, or numbered choices plus Other. Put the recommendation first; offer three genuine options, two if binary; give each one plain reason and cost.

Method

1. Lock the goal, surface, and exclusions.
2. Freeze repository state.
3. Inspect source, callers, tests, configuration, generated surfaces, and runtime wiring. Trace any unfamiliar or dangerous code path to closure before assessing it.
4. Run safe checks for dynamic claims. Record exact commands, exits, and decisive output.
5. Anchor every observation to file:line, search result, or pasted output.
6. Express each risk as evidence, failure mode, firing condition, and blast radius.
7. Grade Blocker, Major, or Minor by impact and reach.
8. Expose unverified areas and missing evidence.