executing-plans

PREPARATION:

• Invoke using-git-worktrees to set up an isolated workspace. NEVER start implementation on the main/master branch without explicit user consent.
• If the IDE supports subagent dispatch, STOP before executing and tell the user that subagent-driven-development is preferred for quality, context isolation, and staged review gates. Continue with this skill only if the user explicitly chooses inline execution.

PLAN REVIEW & CONTEXT LOADING:

• Read the implementation plan (docs/second-brain/artifacts/plans/...).
• Review the plan critically before executing. Identify unclear instructions, missing files, unsafe assumptions, impossible verification steps, scope gaps, or conflicts with Second Brain state.
• Note the TDD Mode (Enabled or Skipped) from the header.
• Note the Security Constraints. Read .sumela/skills/secure-coding-standard/SKILL.md if not already in context — it applies to ALL implementation code, not only plans with an explicit security surface.
• PHASE RULE SYNC: This skill activates the implementation phase. Per .sumela/RULE_REGISTRY.md <phase_to_rule_matrix>, confirm every universal rule, every implementation-phase rule, and every rule matching the active stack scope(s) and domain(s) is loaded — READ any missing rule file now. If the registry file is missing, tell the user to run setup — do not guess the matrix.
• If there are gaps, ambiguities, or concerns, STOP and ask the user. If clear, initialize a Todo/Checklist.
• REVIEW MODE OPT-IN (ask ONCE, before the first task — STOP and wait): "How do you want task boundaries handled?
  1. Checkpoint mode (recommended): I stop after every task with a summary and wait for your approval before continuing.
  2. Flow mode: Tasks run back-to-back with concise progress notes and no stops; the mandatory comprehensive review (requesting-code-review, Step 4) covers everything at the end." Record the choice; the user may switch modes at any task boundary. NEVER assume Flow mode silently — no clear answer means Checkpoint mode.

EXECUTION (NO COMMITS ALLOWED): For each task sequentially:

• Mark the task in_progress.
• Execute exactly as written, adapting to the TDD Mode:
  • If TDD is Enabled: follow strict Red-Green-Refactor.
  • If TDD is Skipped: write implementation directly, but security-boundary changes still require automated validation.
• Actively apply secure-coding-standard principles during all coding.
• Run required verifications and tests for the task.
• Stage successful changes only when the active workflow or user explicitly expects staged output. If staging, use git add <exact-file-path> only.
• CRITICAL: DO NOT use git commit during this phase. The review agent must see the full uncommitted diff.
• Mark the task completed.
• TASK BOUNDARY (per the Step 2 review-mode choice):
  • Checkpoint mode: STOP after each task. Summarize what changed, verification run, staged/unstaged state, and the next task. Ask the user whether to continue, prepare a handoff prompt, or pause. Do not auto-advance.
  • Flow mode: Give a one-line progress note (task name, files touched, verification result) and continue to the next task without stopping. Plan ## Checkpoint: blocks: run their verifications, but do not stop unless one fails. STILL STOP if: a verification fails, the plan is ambiguous, or the task touched an auth/security boundary — Flow mode never overrides the NO GUESSING constraint.

MANDATORY CODE REVIEW PREPARATION & DISPATCH:

• After the final task is complete, invoke requesting-code-review — in Checkpoint mode after the user approves moving to review; in Flow mode immediately, without waiting for approval (the user opted into exactly this).
• When preparing the payload for the review subagent, explicitly detail the security mitigations applied in {DESCRIPTION}.
• Ensure {SECURITY_MANDATE} instructs the reviewer to enforce secure-coding-standard.
• Wait for the code reviewer to inspect the uncommitted changes and provide feedback. Apply fixes via receiving-code-review, then stage fixes only when the active workflow expects staged output.