Install
$ agentstack add skill-dylanmccavitt-loom-rocket-launch ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Rocket Launch
Ship a ready change off-planet. Enforce the launch gates, merge the PR, and let the bridge close the tracked issue, leaving a record a human can audit.
Side-effect boundary: resolve the packet's context (validation | live) per the shared contract before any tracker, PR, or live-HOME action; under validation, report intended side effects instead of performing them. During real closeout it owns the ship step for one ready change: gate, merge, and confirm the bridge closed the issue.
The bridge
The branch name carries the tracked issue id and the PR's magic words auto-close that issue on merge. Closeout means merge the PR and verify the bridge closed the issue — never close the tracked issue by hand to fake a ship.
Required reading
Before shipping, read:
- The repo envelope
assemblergenerated (tracker team/project/label map, commands, CI, merge policy). Do not hardcode commands, trackers, or merge style — read the envelope. If it is missing, route toassemblerfirst. - The tracked issue with its full acceptance criteria, and the PR (branch, diff, CI status, review threads).
Launch gates
ALL gates must be green before merge. A single red gate blocks the launch.
- Tests — targeted tests for the changed behavior pass. Use
labwith thecommand-proof,smoke-proof, orui-prooflens as appropriate to gather proof (tests, local smoke, browser/desktop UI evidence, artifacts) for the claim being shipped. - Review — at least one
biterscorrectnesslens review is clean, or its findings are fixed. Runbiterswith thecorrectnesslens and re-run it after fixes land. - Acceptance — every tracked acceptance criterion is checked against observed behavior, not assumed.
- CI — CI is green on the PR head.
- Minimal diff — a
bitersminimal-difflens pass over the diff: minimal, no stray abstraction, nothing the issue did not ask for.
If any gate is red: stop, report which gate failed and why, and route the fix back to roboports. Do not merge.
Launch
Once every gate is green:
- Merge the PR per the envelope's merge policy.
- Confirm the bridge closed the tracked issue (branch id + PR magic words). If it did not auto-close, repair the link rather than closing the issue by hand.
- Run
node scripts/retro-packet.mjs --prfrom the repo after merge. The generator creates a pending retro packet branch/worktree, writes decision-log, exemplar, rule, and coverage-gap candidates underretro/pr-{number}/, and prints the exact PR-creation command. Use--pr-createonly when intentionally opening that retro PR. - Treat human review of the retro PR as the HITL gate for evidence write-back. Do not auto-merge the retro PR, and do not edit accepted skills/rules/exemplars from retro content until review approves the narrow destination.
- Post a tracker status update (
save_status_update) recording the ship: what merged, the gate outcomes, the proof, the PR link, and the retro packet PR/command. - Leave a human-reviewable record: gates run and their results, the merge commit / PR link, the retro packet branch, and any follow-ups.
Invariants
- Never merges with a red gate.
- Never silently closes the issue: closeout goes through the bridge (merge) and the acceptance check, recorded in a tracker status update.
- Ships only what is ready — an unready change, a draft, or unfinished work routes back to
roboports, never a forced merge. - Leaves a human-reviewable record of the gates, the merge, and the pending retro write-back packet.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: dylanmccavitt
- Source: dylanmccavitt/loom
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.