Features

Everything you need to run AI-assisted projects at any scale

Agents work step by step and explain the outcome

Datarim helps coordinate agents, continue work without constant prompting, and choose a suitable mode through Jev, and handle tiny tasks through /dr-quick. You set the goal; requirements, verification, and permission boundaries remain in force at every stage.

Agent orchestration

Planning, implementation, and review are assigned to the corresponding roles. The optional dr-orchestrate runner continues a terminal workflow from state snapshots and checks each action against the allowed policy.

/dr-plugin enable /path/to/plugins/dr-orchestrate
dr-orchestrate run --dry-run

The runner is installed separately and requires tmux. Unknown state or a disallowed action stops automatic continuation; new learned rules require confirmation.

Set up orchestration

Autonomous staged work

/dr-auto starts a new task or resumes an existing one, delegates its stages, and resolves small gaps from available evidence. Each stage reports its outcome and open limitations in plain language.

/dr-auto task description

On the full route, /dr-auto stops after successful compliance review (/dr-compliance) and its internal reflection. Archiving remains a separate action. Ambiguity and protected actions retain their required gates.

Start staged work

Jev classification and model advice

Jev classifies a prompt through the configured model API and recommends a working mode and model tier. In a Datarim project it also recommends catalogue artifacts. This helps match the task complexity to the executor. Use it with Datarim or independently.

jev doctor --agent=codex --api

Classification requires configured API access; advice does not automatically change the active session model. The command safety floor works without a key; when the API is unavailable, the session continues without advice.

Install and verify Jev

A fast lane for tiny tasks

/dr-quick handles a tiny self-contained edit or a read-only lookup. It skips the full requirements, planning, design, QA, and compliance stages, while retaining mandatory evidence for mutations.

/dr-quick "tiny task"

An edit needs a falsifiable success condition, live execution evidence, and delivery reachability from origin/main before a short archive. A lookup creates no task files and stays UNCERTIFIED: informational, without a certified completion claim. If scope grows, use the full cycle.

Choose the fast lane

In 4.2, reporting connects the outcome to the original request and evidence. If the explanation is unclear, /dr-explain restates it without executing work. Human Outcome Reporting.

Use your preferred reply language while creating documents in the project language. Independent language.replies and language.artifacts settings both default to en, including standalone reporting without Datarim. Configure languages.

8-Stage Pipeline

Not every task goes through all stages. A simple fix: init → do → archive (reflection runs at /dr-compliance, or /dr-archive regenerates it if absent). A major project: all 8 stages with multi-agent review.

init → prd → plan → design → do → qa → compliance → archive
/dr-init

Analyze task or scaffold project, determine complexity (L1-L4), create tracking

/dr-prd

Product requirements with research phase (1.3) and discovery interview

/dr-plan

Detailed implementation plan with strategist review

/dr-design

Architecture exploration for complex features (L3-4)

/dr-do

TDD implementation with gap discovery for unknowns

/dr-qa

4-layer quality check: PRD, design, plan, code

/dr-compliance

Adaptive post-QA hardening by task type + reflection (lessons + evolution proposals)

/dr-archive

Archive the task (reflection regenerated only if missing)

19 Specialized Agents

Each agent has a focused role — from planning to security audit. They collaborate through the pipeline, and Consilium brings them together for critical decisions.

Architect reasoning

Chief Architect for system integrity, scalability, and alignment with architectural patterns. Leads context gathering, solution exploration, and user consultation.

Code Simplifier balanced

Simplifies and refines code for clarity, consistency, and maintainability while preserving all functionality. Focuses on recently modified code unless instructed otherwise.

Compliance balanced

Runs the post-QA hardening workflow (7 steps): re-validate vs PRD/task, simplify code, check references/coverage/lint/tests, produce compliance report.

Developer balanced

Senior Developer implementing features with TDD and high code quality. Follows project patterns and style guide.

DevOps balanced

DevOps Engineer owning the build-ship-run pipeline from code commit to running in production.

Orchestrate Resolver balanced

Plugin-backed subagent inference layer that classifies an unknown Datarim pane line into a slash-command via a multi-backend AI CLI chain (claude → codex → cursor). Fail-closed; threshold gating lives in the caller.

Editor balanced

Content Editor for editorial review, fact verification, AI pattern removal, and publication-ready quality. Works with articles, blog posts, social media, research papers, and documentation.

Librarian balanced

Knowledge Base Librarian for organizing, indexing, cross-referencing, and maintaining the datarim/ directory. Runs ingest, lint, and consolidation workflows to keep the knowledge base healthy and navigable.

Optimizer balanced

Audit and improve the Datarim framework: detect bloat, duplicates, oversized files, weak descriptions, and selective-loading opportunities.

Peer Reviewer balanced

Adversarial reviewer subagent for /dr-verify Layer 2/3 cross-Claude-family fallback. Reviews PRD/plan/code in clean isolated context. Findings-only, read-only tools.

Planner reasoning

Lead Project Manager for backlog management, detailed design, implementation plans, and complexity levels.

Researcher balanced

Investigates external context — library versions, best practices, CVEs, compatibility — before planning begins and when implementation hits unknowns.

Reviewer reasoning

QA and Security Lead for code reviews, security compliance, and Definition of Done validation.

Security reasoning

Security Analyst identifying, assessing, and mitigating security risks throughout the development lifecycle.

Skill Creator reasoning

Skill Creator agent for researching, designing, and generating new skills, agents, and commands. Analyzes best practices, audits existing framework components, and creates or updates artifacts in the correct location.

SRE balanced

Site Reliability Engineer ensuring systems are reliable, observable, and recoverable in production.

Strategist reasoning

Strategic Advisor evaluating whether a task is worth building and proposing the most efficient path.

Tester fast

Platform QA agent for verifying changes across any project. Auto-detects test runners, supports Docker-aware execution, API smoke tests, and structured result reporting.

Writer balanced

Content Writer for creating articles, blog posts, social media content, research papers, technical documentation, and any structured written output. Focuses on clear, engaging, audience-appropriate writing.

29 Commands

Slash commands drive the pipeline — 8 pipeline stages, content, management, utility, autonomous.

/dr-addskill Manage

Create or update skills, agents, and commands

/dr-archive Pipeline

Archive completed task with mandatory reflection and evolution proposals

/dr-auto Pipeline

Subagent orchestrator — drives a task to a passing /dr-compliance + reflection (not the final archive) by spawning per-stage agents and summarising their results, with the FB-rules and Question Suppression Ladder on by default.

/dr-compliance Pipeline

Adaptive post-QA hardening with type-specific checklists

/dr-continue Utility

Resume from session handoff artefact in a clean context window

/dr-design Pipeline

Explore architectural and design decisions for complex features

/dr-do Pipeline

TDD implementation with gap discovery — auto-spawns researcher on unknowns

/dr-doctor Maintenance

Diagnose and migrate operational files to thin-index schema

/dr-dream Manage

Knowledge base maintenance, organization, and consolidation

/dr-edit Content

Editorial review with fact-checking and AI pattern removal

/dr-explain Utility

Explain an existing result or unfamiliar term again, without executing work or changing task status.

/dr-help Utility

Show the complete Datarim command reference

/dr-init Pipeline

Initialize a new task, resume from backlog, or scaffold a new project

/dr-next Utility

Resume work on current task from last checkpoint

/dr-optimize Manage

Audit and optimize the Datarim framework

/dr-orchestrate Plugin

Self-driving Datarim pipeline with snapshot-first resume, fail-closed routing, and operator-confirmed learned rules.

/dr-plan Pipeline

Create a detailed implementation plan with security analysis

/dr-plugin Management

Manage opt-in plugins: list, enable, disable, sync, doctor

/dr-prd Pipeline

Generate PRD with structured research phase (Phase 1.3) for L2+ tasks

/dr-publish Content

Prepare platform-adapted publish payloads for approved content (does not send them)

/dr-qa Pipeline

Multi-layer quality verification across PRD, design, plan, and code

/dr-quick Utility

Fast-lane for trivial fixes or quick lookups — skips the heavy pipeline

/dr-save Utility

Save current session state to disk before context is destroyed

/dr-status Utility

Check current task status, progress, and backlog summary

/dr-verify Pipeline

Standalone tri-layer self-verification: deterministic floor, runtime-owned peer review, and native read-only dispatch

/dr-wizard Planning

Build a task specification through a resumable, one-question-at-a-time interview

/dr-write Content

Create written content with structured writing workflow

/factcheck Auto

Fact-check a file before publication

/humanize Auto

Remove AI writing patterns from text

80 Skills

Reusable capabilities that agents draw on: quality standards, testing patterns, security checks, infrastructure automation, content writing, fact-checking, and more.

Adversarial Review Quality

Forces an adversarial mindset on a plan, PRD, design, or code change — break it rather than bless it. Loaded at the /dr-plan checkpoint and /dr-qa.

AI Quality Core

Five pillars of AI-assisted development — decomposition, TDD, architecture-first, focused work, context. Method size limits, DoD, stubbing.

Artifact Context Reference

Canonical Datarim conventions reference for native agents generating or editing project-local artifacts — Stage Header, byte-exact YAML frontmatter, append-log Q&A, expectations checklist, snapshot frontmatter, PRD↔archive mirror, Diátaxis taxonomy. Loaded by /dr-write and /dr-archive.

Autonomous Mode Core

Question Suppression Ladder + L1 Inline Resolution Rule + Hard-gated Action Boundary. Activated by DATARIM_AUTO_MODE=1 + a per-task autonomous-mode marker.

Brainstorming Task

MUST use this before any creative work — features, components, functionality, behavior changes. Explores user intent and design before implementation.

Code Contracts Reference

An open format for @cc directives colocating structured assumptions and requirements with code — specification, attention, and verification for both humans and agents, enforced by the cc-check CLI.

Compliance Quality

Post-QA hardening — detects task type (code, docs, research, legal, content, infra) and applies the matching verification checklist before archiving.

Consilium Core

Assemble a panel of Datarim agents for multi-perspective analysis of decisions. Use for /dr-design stage (L3-4) or critical decisions in /dr-plan.

Context-Window Self-Clearing Core

Default-off orchestrator contract for checkpoint-before-reset context compaction/clearing at deterministic pressure thresholds — snapshot-first continuity across Claude Code and Codex.

Cron-Agent Patterns Reference

Layered timeout defense for cron-orchestrated agents calling external APIs (LLM CLI, HTTP, subprocess) — nested tiers, anti-patterns, headroom.

CTA Format Core

Canonical CTA "Next Step" block format for every /dr-* command and pipeline agent. Single source of truth — load when generating slash-command output.

Customer Delivery Quality

Trace a user-facing requirement from its verbatim source through implementation, evidence, deployment, live proof, and explicit disposition.

Datarim Doctor Maintenance

Schema spec for thin-index operational files: canonical regex, YAML frontmatter contract, 8-pass migration semantics (Pass 0–7, incl. archive-section enforcement), data-loss safety contract. Loaded on demand by /dr-doctor and /dr-init self-heal.

Datarim System Core

Core Datarim rules. Load this entry first, then only the fragment needed for paths, storage, numbering, backlog, routing, or archive behavior.

Diátaxis Docs Taxonomy Reference

Mandate for documentation taxonomy across Datarim-managed repos and product sites: four orthogonal categories (tutorials, how-to, reference, explanation), closed mapping table, exemption list, anti-pattern definitions. Loaded by /dr-init, /dr-optimize audit, /dr-archive surface verification.

Discovery Core

Structured requirements discovery through focused one-question-at-a-time interviews with proposed answers. Use in /dr-prd stage or before /dr-init.

Dispatching Parallel Agents Task

Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies

Dr Init Id Collision Window Maintenance

Detect and resolve task-ID collisions in the TOCTOU window between /dr-init reservation and /dr-archive completion; reserve IDs with the atomic allocator.

DR-Next Snapshot Replay Core

Consumer contract for stage snapshots — /dr-next and /dr-orchestrate read datarim/snapshots/{TASK-ID}.snapshot.md first, emit replay-prompt with CTA + bilingual autonomy reminder + done before: body.

Dream Core

Knowledge base maintenance — organize, deduplicate, cross-reference, and consolidate the datarim/ directory. Flags contradictions, archives stale content.

Edge-Case Hunter Quality

Enumerates boundary, degenerate, and failure inputs an artifact does not visibly handle. Sibling of adversarial-review; loaded at /dr-plan and /dr-qa.

Evolution Core

Rules for proposing and applying framework improvements. Covers growth (new components) and maintenance (pruning, merging). Human approval required.

Executing Plans Task

Use when you have a written implementation plan to execute in a separate session with review checkpoints

Expectations Checklist Reference

Operator wishlist artefact in plain markdown — wish_id slug, status history, current status, override semantics. Written at the requirements step, verified at the quality-review and hardening steps.

Factcheck Content

Fact-check articles and posts before publication. Extracts claims, verifies against sources, improves text while preserving style.

File-Sync Configuration Tech

Pre-flight checklist + ignore patterns for file-sync (Syncthing/rclone/rsync/Dropbox/iCloud) — protects git working trees, virtualenvs, and build artifacts.

Finishing A Development Branch Task

Use when implementation is complete and all tests pass. Decides how to integrate the work via merge, PR, or cleanup with structured options.

Fleet Core

Fleet starter skills across five complexity tiers (L1–L5) — each injects a context budget matched to the task level, from a single-step command to self-managed multi-subtask coordination.

Fleet L1 — Basic Core

Minimal starter context for one elementary, single-step command.

Fleet L2 — Structured Core

Compact starter context for a few templated steps within an allowed command list.

Fleet L3 — Analyst Core

On-demand retrieval and explicit choice for work with variability and alternatives.

Fleet L4 — Expert Core

Structured decomposition and per-subtask retrieval for complex multi-step work.

Fleet L5 — Autonomous Core

Self-managed coordination for complex work, with bounded authority and knowledge-base prefetch.

Frontend UI Quality

Frontend UI checklist — CSS specificity, dark/light themes, visual testing, mobile responsiveness, i18n parity. Apply when editing HTML/CSS.

Health Controller Stub Detector Quality

Surface hard-coded stub literals (pending-integration, not-implemented, stub) in health/status controllers at /dr-do, before /dr-qa wish gating.

Human Outcome Reporting Core

Explain what the user can now do, which requirements were verified, and what remains open. Works with Datarim or as a standalone skill.

Human Summary Core

Compatible four-section recap for QA, compliance, and archive, governed by Human Outcome Reporting. Completeness before brevity.

Humanize Content

Remove AI writing patterns and formatting artifacts from text. Preserves author voice. Use for articles, posts, content that must not look AI-generated.

Image Prompting Task

Author prompts for image-generation tools — covers, thumbnails, post visuals, illustrations, infographics, logos; intake→spec→prompt→verify loop.

Immutability Core

Immutability contract for all pipeline stages: artefact freeze, V-AC parity, non-code parity, anti-tautological rule, and return-to-source transition.

Infrastructure Automation Tech

SSH batch execution, ping matrices, health checks for your servers. Use when performing infrastructure operations across multiple servers.

Init-task Persistence Reference

Verbatim operator brief artefact contract — frontmatter + append-log + Q&A round-trip auto-append + mandatory read by every pipeline command. Source of truth for operator intent across the task lifecycle.

Network Exposure Baseline Quality

Allowlist/blocklist for network bind targets (compose ports, redis bind, postgres listen_addresses, systemd ListenStream); load before any port change.

Nginx Version Compatibility Reference

Probe the running nginx version before writing config, then map directive syntax to that version. Load in /dr-plan for any nginx-touching task.

Performance Quality

Optimization patterns (lazy loading, caching, batching), database and frontend performance. Use when designing or reviewing for performance.

Plan Path Validator Reference

Exists-check for file/script/path references in /dr-plan output — flags missing or deprecated tooling and file references before they reach /dr-do.

Playwright Browser QA Task

Browser-based frontend quality check — resolution chain across CLI, MCP, and operator-specified browser; default headless mode, optional visible mode, hard-fail strict visible mode.

Post Deploy Env Diff Quality

Pre-archive gate diffing the on-host env file against the repo template when a deploy changed defaults — catches «prod on stale .env».

Prod-Readiness Probe Core

Deploy-class prod-readiness gate — a read-only test↔prod runner symmetry probe that blocks merge-proposal and archive until production is verified. Hybrid: deterministic with a project contract, agent-checklist without one.

Project Init Core

Project scaffolding — creates AGENTS.md, documentation/, and datarim/ for new or existing projects.

Publishing Content

Technical rules for publishing content to social media and websites — platform limits, formatting, API patterns, OG tags, multi-platform workflow.

Receiving Code Review Task

Use when receiving review feedback before implementing suggestions. Requires technical verification, not performative agreement or blind implementation.

Reflecting Core

Review-phase workflow — lessons learned, evolution proposals (Class A/B gate), health-metrics check. Runs at /dr-compliance; /dr-archive Step 0.5 regenerates it only if missing or stale.

Release Verify Quality

Consumer-side recipe for verifying Datarim releases — sha256 → cosign verify-blob → gh attestation verify. Load on install/update from GitHub Release.

Requesting Code Review Task

Use when completing tasks, implementing major features, or before merging to verify work meets requirements

Research Workflow Core

Structured external context research — 10-point full checklist (L3-L4), 5-point lite mode (L2), gap discovery protocol for unknowns during implementation.

Rotation Runbook Security

Credential rotation playbook — consumer inventory, auth-scoped verification, full payload replay, canonical secret paths, rotation log.

Seam vs Integration Boundary Reference

Pattern guidance — flag L3+ backlog one-liners that mix a seam/contract concern with an integration/call-site concern; loaded by /dr-prd and /dr-plan.

Security Quality

Authentication, authorization, input validation, data protection, dependency safety. Use for security review or when handling secrets and user data.

Security Baseline Quality

Canonical S1–S11 security rule reference cited from AGENTS.md § Security Mandate. Load for plan/qa/compliance/do touching shipped artifacts.

Self Verification Quality

Orchestrator for runtime-aware self-verification (manual /dr-verify). Tri-layer: deterministic shell, peer-review, runtime dispatch.

Session Handoff Replay Utility

Consumer contract for /dr-continue — reads session artefact in a clean window, re-verifies every claim, emits banners, and routes to /dr-next or /dr-auto.

Session Handoff Writer Utility

Producer contract for /dr-save — writes self-contained session artefacts with append-only semantics, per-layer cap, and claim-provenance enforcement.

Stage Snapshot Writer Core

Producer contract for per-task stage snapshots — final operator-visible /dr-* response persisted to datarim/snapshots/{TASK-ID}.snapshot.md with overwrite semantics. Single producer touchpoint via cta-format.md.

Structure Review Quality

Reviews an artifact for organisation, completeness, and internal consistency — does it hold together as a document. Loaded at /dr-plan and /dr-qa.

Structured Outputs Integration Gate Quality

Demands schema-unit + wrapper-path tests when API-side structured-output validation is added on top of an existing post-processing pipeline.

Subagent Driven Development Task

Use when executing implementation plans with independent tasks in the current session

Systematic Debugging Quality

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

Tech Stack Tech

Technology guidance and stack selection: starting points, viable alternatives, decision-making method, and proposal template for new projects and modules.

Test-Env Verification Quality

Mandatory gate: verify the change on the test env (backend + frontend) autonomously before prod prep or archive. Blocks /dr-qa, /dr-compliance, /dr-archive.

Testing Quality

Testing pyramid, frameworks (Vitest, Playwright, bats), mocking rules, Live Smoke-Test Gate for raw SQL. Use when writing or reviewing tests.

Using Git Worktrees Task

Use when starting feature work that needs isolation or before executing plans. Ensures an isolated workspace via native tools or git worktree fallback.

Utilities Tech

Native shell recipes for common operations. Load this entry first, then only the fragment needed for the specific utility category.

V-AC Axis Split Reference

Pattern guidance — when a verification-AC group mixes deterministic axis (rule match) and statistical axis (rate threshold over a window), split upfront into two groups.

V-AC Feasibility Reference

Pre-implementation gate proving every runtime-command V-AC (docker exec / curl / kubectl / systemctl / live DB query) can actually PASS before /dr-do.

Verification Before Completion Quality

Use before claiming work complete, fixed, or passing — and before committing or opening PRs. Run verification commands and confirm output first.

Visual Maps Tech

Visual index for Datarim maps. Load this entry first, then only the diagram fragment needed for routing, stage flow, or dependency orientation.

Wizard Core

Interactive task-spec wizard — a thin orchestrator over discovery and consilium that turns a rough brief into a structured spec plus a graph artefact.

Writing Content

Content creation and go-to-market — research, drafting, editing, publication, SEO, analytics, launch. Loaded by writer and editor agents.

Writing Plans Task

Use when you have a spec or requirements for a multi-step task, before touching code

8 Autonomous Agent Operating Rules

Eight canonical rules (FB-1..FB-8) under Supreme Directive Laws 1-5 — the contract Datarim ships, the canonical text lives in the consumer ecosystem AGENTS.md.

FB-1 rule-based

Research available solution options

FB-2 rule-based

Compare options for security and maintainability

FB-3 subagent

Run a role-based consilium when needed

FB-4 rule-based

Choose an option and record the reason

FB-5 rule-based

Execute safely reversible work without the operator

FB-6 rule-based

Keep decisions reversible under uncertainty

FB-7 rule-based

Provide correction and rollback after testing

FB-8 escalation

Escalate only genuinely blocking questions

Hard-gated actions NEVER auto-execute regardless of FB-5: production deploy, secret rotation, irreversible DB operations, public communication, finance/legal actions, force-push to main, git history deletion, multi-user-visible actions, publishing consilium-selected content.

Key Capabilities

Backlog System

Two-file task management: active backlog + archive. Priority levels, complexity estimates, source tracking. Works for solo developers and teams.

Consilium

Multi-agent panel discussions for critical decisions. Assemble a custom panel of agents to debate architecture, security, or strategy — then synthesize a recommendation.

Knowledge Maintenance

/dr-dream organizes your knowledge base: cross-references, deduplication, contradiction detection, stale content archival. Keeps your project documentation healthy.

Templates and connections

A requirement connects to the plan, outcome, and evidence. Templates preserve those connections; the framework graph checker identifies missing links. Release connection map.

Validators use the PRD and plan selected in the task description, including versioned documents. A clean legacy copy cannot replace the selected revision; an invalid pointer produces an error. Absent pointers preserve legacy filenames. Validator contract and limits.

Accepted risks

Record a known risk, its owner, scope, and review conditions.

Active task context

Keep the current task, recent outcomes, and next actions together.

Task archive

Preserve the original request, outcome, checks, and remaining limitations.

Task backlog

Store tasks waiting to be selected for execution.

Build version helper

Expose a package version during a Rust build.

Classification helper

Create a shell helper that classifies input with explicit output rules.

Conflict resolution prompt

Give a separate reviewer the facts needed to analyse a conflict.

Proxy setup helper

Start a reviewed Cloudflare and nginx configuration for a service.

Compliance report

Record applicable final checks and their evidence.

Deferred verification

Document why a check is deferred and what later evidence is required.

Next action

Express the next permitted workflow step after the report.

Delivery receipt

Record delivered results and evidence without claiming human acceptance.

Customer requirements

Store customer conditions in a structured record.

Service cutover runbook

Plan a service switch, verification, and rollback.

Project configuration

Set independent reply and artifact languages alongside project peer-review preferences.

Deployment script guide

Prepare a deployment procedure with checks and recovery steps.

Container smoke checks

Check that the shipped container starts and serves its expected scenario.

Explanation documentation

Organize background, reasoning, and design explanations.

How-to documentation

Organize steps for completing a specific task.

Reference documentation

Organize authoritative interface and configuration details.

Learning tutorials

Organize guided learning examples for new users.

Enabled plugins

Record which optional plugins a project enables.

User expectations

Preserve the original requested conditions for later verification.

Human outcome report

Connect the request, delivered outcome, verification, and open limitations.

Infrastructure artifacts

Check the configuration and operational records needed for infrastructure work.

Infrastructure cost review

Review cost-saving changes against reliability and recovery needs.

Research findings

Record sources, findings, uncertainties, and useful conclusions.

Integration checklist

Check the contract and real interaction between connected components.

Hardware compatibility checks

Record runtime and hardware evidence before selecting a deployment target.

Reusable module manifest

Describe a reusable module, its interfaces, and constraints.

Plugin manifest

Declare an optional plugin and the artifacts it contributes.

Product requirements

Define the goal, requirements, and acceptance criteria before implementation.

Runner capability probe

Measure the capabilities of a self-hosted automation runner.

Project agent instructions

Create AGENTS.md with project rules and scoped operating instructions.

Project documentation starters

Create project documentation using the four Diataxis categories.

Task reflection

Preserve lessons and proposed improvements after a task.

Review improvement record

Record proposed changes from review with evidence and disposition.

Security dependency upgrade

Plan a dependency update and verify compatibility and security outcomes.

Security policy

Define supported versions and how security issues are reported.

Security automation workflow

Start a project workflow for security checks.

Shell helper

Create a shell helper with explicit inputs and failure handling.

Task record

Preserve the goal, scope, plan, and completion conditions.

Release version consistency

Check that version references across published surfaces agree.