audit-design

Audit-Design — Pre-Implementation Risk Audit

Runs a compressed VHEATM FAST audit on the spec document produced by brainstorming. Purpose: find domain risks, failure modes, and blind spots in the design before a single line of code is written. Cheap to fix now. Expensive after implementation.

Announce: "I'm using audit-design to run a pre-implementation risk audit."

---

Trigger Conditions

This skill activates when either condition is true:

Condition A — Normal flow: spec frontmatter contains SPEC_APPROVED: true (set by brainstorming after user approves the design document)

Condition B — Escalation flow: spec frontmatter contains SPEC_ESCALATION: true (set by specialist-review when a CRITICAL/HIGH finding traces back to a spec-level decision)

In escalation flow, read the ESCALATION_FINDING field in the spec before running the audit — it provides the specific finding that triggered re-review.

---

Idempotency Check

Before running, check if a risk assessment already exists:

grep -c "## Risk Assessment (audit-design)" docs/superskills/specs/<spec-file>.md

• Count = 0 → run full audit, append new section.
• Count ≥ 1 AND normal flow → check timestamp. If spec was modified after last audit → re-run with UPDATE label. If unchanged → skip, log "audit current".
• Count ≥ 1 AND escalation flow → always re-run, append as ## Risk Assessment — Escalation (audit-design) with escalation finding as context. This is a new section, not an overwrite.

---

DPS Detection

# Check if DPS is present and status:
DPS_STATUS=$(grep "DPS STATUS:" .dps/spec/BLUEPRINT.md 2>/dev/null | head -1 | awk '{print $NF}')
echo "DPS STATUS: ${DPS_STATUS:-NOT_PRESENT}"

IF DPS_STATUS = DRAFT or PROOF-READY: → Run DPS-Aware Audit (Section below) IN ADDITION TO standard VHEATM FAST IF DPS_STATUS = NOT_PRESENT: → Run standard VHEATM FAST only (unchanged behavior) IF DPS_STATUS = APPROVED-SSOT or higher: → Idempotency check applies (re-audit only on escalation)