validate-issue

validate-issue

Validate every current-behavior claim against code. Input: issue URL, #N, N, or owner/repo#N; else the issue named, validated, planned, or filed this session, else stop and ask. Never pick an issue from a list. { issue: <N>, targetBranch?: "<branch>" } (or prose "target branch ") names the merge target, which replaces the default branch in step 0.

0. Baseline branch

No worktree for validation or issue edits. REPO: the repo a URL or owner/repo#N names, else the checkout's origin; pass --repo "$REPO" to every gh call, linked PRs included. If origin is another repo, trace REPO in a temporary clone outside this checkout; never cite another repo's code. DEFAULT=$(gh repo view "$REPO" --json defaultBranchRef --jq .defaultBranchRef.name); a targetBranch is validated per work-on-issue step 1 ("Target"), replaces DEFAULT, and is named as the target in the verdict. No network (gh and remote checks fail): use the caller's baseline branch (target, else its resolved default), else git symbolic-ref --short refs/remotes/origin/HEAD minus origin/; accept it if git rev-parse --verify "origin/$DEFAULT" succeeds, naming each skipped network check as a verification limitation. A branch with no local origin ref still blocks. Run git fetch origin "$DEFAULT" (a failure keeps the last fetched ref: verification limitation), then pin BASE=$(git rev-parse "origin/$DEFAULT") once. Every read, search, and history check uses BASE: git show "$BASE":<path>, git grep -n <pattern> "$BASE" -- <paths>, git log "$BASE" -- <paths>. Caller-pinned evidence commits (such as the milestone pipeline's hard-dependency base refs): trace code that exists only at one against it and cite the SHA; one missing locally is a verification limitation, and claims about code only it holds stay Unverified. The verdict states git rev-parse --short "$BASE" as the baseline. Issue unreadable or no BASE: stop with Validation blocked (step 8).