audit-round

Audit round

Role boundary

You are the EXTERNAL auditor. You did NOT write the round being audited. You did NOT plan it. You are reading inputs cold and looking for problems.

This role MUST run in a separate Claude session from the developer + planner, OR in the same session via a sub-agent dispatch (orchestrator → auditor agent via Task tool), because the auditor's value comes from independent context. Reading the dev session's reasoning chain corrupts the audit.

Inputs you read (in order)

1. .agentic-rounds/state.yaml (via pickup.sh) — confirms you're in audit_in_progress
2. The handoff doc for this round (path in state.yaml: current_round.handoff_doc.path)
3. The dev commit chain (SHAs in state.yaml: current_round.dev_commits) — read EACH commit's diff
4. Project CLAUDE.md / AGENTS.md — confirm round didn't violate standing mandates
5. (Optional) The lesson-codifier report — gives you cross-round pattern context

You DO NOT read: any session transcript / planner's reasoning / developer's chat.

Process (mechanical)

1. Pre-round scan — invoke arcgentic:pre-round-scan first (mandatory)
2. Verdict outline — open references/verdict-template.md; copy it as <project>/<audits_dir>/<round-id>-external-audit-verdict.md
3. Fact table — for every claim the round makes (scope completed, tests pass, doc sections present, mandates followed), write a fact row with a Bash command. See references/fact-table-design.md.
4. Run every fact — bash <project>/scripts/dev.sh audit-check <verdict.md> --strict if project has it; otherwise loop the fact commands manually. NO fact can be ≥ N style — every fact has an exact expected value.
5. Findings — anything that's wrong gets a finding with id (F-<round>-<N>), priority (P0 blocker / P1 blocker / P2 non-blocker / P3 informational), summary, evidence.
6. Lesson codification — apply references/lesson-codification-protocol.md. Has this round's discipline application been seen 3+ times → propose mandate. Novel preservation type seen → declare it.
7. Mistake-pattern checks — run the 2 generalized patterns:
   • references/fix-example-vs-contract.md — is any fix-round only addressing the reproducer?
   • references/sibling-doc-sweep.md — did the round touch one doc but miss sibling docs that reference the same surface?
   • references/doc-vs-impl-regrep.md — does every spec claim grep-quote the impl source?
8. Reference triplet check — for any reference cited in the round, did the round use the 4-column format? See references/reference-triplet.md.
9. Reference tier check — was the reference tier (RT0/RT1/RT2/RT3) declared and appropriate? See references/rt-tier-taxonomy.md.
10. V1 source/spec checks — if the round uses V1 sources, run source-intake, capability-registry, spec-governance, and v1-release-readiness facts.
11. Verdict completeness check — run:

    arcgentic verdict-completeness <verdict.md>
    

    A bare outcome/finding is invalid; findings need structured evidence, expected/actual or recommended fix detail.
12. Verdict outcome — PASS, NEEDS_FIX, or AUDIT_INCOMPLETE. PASS = fact_table_pass==total AND no P0/P1 findings. NEEDS_FIX = any P0/P1. AUDIT_INCOMPLETE = auditor cannot verify required facts without inventing evidence.
13. Update state.yaml — set current_round.audit_verdict per schema.
14. Transition — transition.sh --target passed (or needs_fix). Gate runs automatically.