bulwark-verify

Bulwark Verify

Purpose

Generate runnable verification scripts that test real component behavior without mocks. This skill orchestrates assertion-patterns (P2.1) and component-patterns (P2.2) to produce executable scripts for any component type.

When to Use

Load this skill when:

• User requests /bulwark-verify [path]
• test-audit Step 7 needs verification scripts
• Generating standalone verification for a component

DO NOT use for:

• Running existing tests (use just test)
• Writing unit tests (implement directly)
• Test auditing (use test-audit skill)

---

Usage

/bulwark-verify [path] [--execute]

Examples:

• /bulwark-verify src/cli.ts - Generate verification script for CLI
• /bulwark-verify src/server.ts --execute - Generate and run
• /bulwark-verify - Infer from recent context

---

MANDATORY EXECUTION STEPS

WARNING: These steps are BINDING instructions, not suggestions. You MUST execute each step in order. Do NOT substitute your judgment for these instructions. Do NOT skip sub-agent spawning. Do NOT modify the execution flow.

When this skill is loaded, execute these steps exactly as written:

Step 1: Resolve Target

IF $ARGUMENTS provided:
    target = first non-flag argument
    execute_flag = "--execute" in $ARGUMENTS
ELSE:
    Look for component files in recent conversation context
    IF found: target = that path
    ELSE: Ask user: "Which component should I generate a verification script for?"

Step 2: Detect Project Language

Check for project manifest files in order (search from target file's directory up to project root):

Check	Language	Test Runner
package.json exists	Node	jest/vitest/node
pyproject.toml OR setup.py exists	Python	pytest/python
Cargo.toml exists	Rust	cargo test
None of the above	Generic	bash

Step 3: Analyze Component

1. Read the target file

2. Identify component type using indicators from component-patterns skill:

   • Has spawn/exec/execSync imports → Process Spawner
   • Has listen()/createServer/express()/fastify() → HTTP Server
   • Has fs.readFile/parse functions → File Parser
   • Has process.argv/yargs/commander/argparse → CLI Command
   • Has database imports (pg, mysql, mongoose, prisma) → Database
   • Has fetch/axios/got/requests calls → External API