audit-realworld — Full-Stack Gap Audit vs the RealWorld Reference

RealWorld ("Conduit", a Medium clone) is the most widely implemented full-stack benchmark: a formal API spec, a shared end-to-end contract test suite, a shared CSS theme, and a hosted API at api.realworld.show. That makes it objectively testable — unlike vague "best practice" references. This skill uses it to show, concretely, what your app has and hasn't built.

The RealWorld API spec and its E2E suite are the source of truth — not any single community implementation. Reference repos vary in quality and maintenance; the spec and the passing test suite do not.

RealWorld is a demo spec, not a production bar. It deliberately omits rate limiting, observability, caching, CI/CD, secrets management, and deployment. This skill reports feature/pattern parity, then explicitly delegates real production hardening to audit-security, plan-security-audit, plan-perf-audit, plan-rls-audit, and full-stack-ship-discipline.