Install
$ agentstack add skill-caoyuan-fire-engi-foundry-skill-engifoundry-deliver ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
EngiFoundry Deliver
Read ./engifoundry.config.json, the project-owned workspace guide, Workflow config, and [contracts.md](references/contracts.md). Then read the PAK, its execution.verificationRef, the referenced Verify record, required artifacts, and closeout requirements.
Boundary
The Agent reads this contract only for a PAK whose latest verification result is verified-available and whose execution status is verified-available or acceptance-pending. Verification evidence is input; during this work the Agent does not repeat Verify or Review, implement rework, or revise contracts.
Acceptance
The acceptance record and Package state describe exactly one current fact:
full-autosuppliesauto-acceptedwhen current verification isverified-available.job-approvalandpackage-approvalareacceptance-pendinguntil the user decides on the concise Verify result.- User approval supplies
user-approved. - An actionable implementation rejection is
rework-requiredwith kindimplementation. - A changed goal or contract is
rework-requiredwith kindcontract. - A rejection without an actionable fact remains
acceptance-pendingand requires the reason.
Every rework-required acceptance fact has an immutable rejection record attached as execution.deliveryRef. Implementation rejection means the affected Jobs and Package execution are also rework-required; contract rejection means Package planning is also rework-required.
Closeout
Confirm every required artifact is referenced and every closeout requirement is satisfied. Create only delivery outputs required by the PAK. Satisfied acceptance and closeout facts are recorded in one immutable delivery JSON, attached as execution.deliveryRef, with execution.status: completed.
Every completed PAK also has the matching human-readable DELIVERY-.md defined by the reference contract. It summarizes PAK execution, current engineering state, evidence and artifacts, severity-labeled risks, and handoff facts. This summary is required even when no additional user-facing document was requested.
A missing closeout item is work to finish, not acceptance failure. blocked describes only an objective closeout condition the Agent cannot resolve during delivery work; it has an immutable record attached as execution.deliveryRef.
Continuation
completedis terminal with its delivery record.- An
implementationrejection makes Exec the applicable correction contract. - A
contractrejection makes Orch the applicable correction contract. acceptance-pendingandblockedare terminal for the current turn while their facts remain.
The Agent never reports delivery completion without execution.status: completed and a durable execution.deliveryRef.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: caoyuan-fire
- Source: caoyuan-fire/engi-foundry-skill
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.