AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Plan Enforcer Draft

skill-jccidc-plan-enforcer-plan-enforcer-draft · by jccidc

Public second step after `discuss`. Use when the user wants Plan Enforcer to create an implementation plan first --- drafts a concrete markdown plan in docs/plans/ that can immediately flow into Plan Enforcer's normal ledger and execution path.

No reviews yet
0 installs
7 views
0.0% view→install

Install

$ agentstack add skill-jccidc-plan-enforcer-plan-enforcer-draft

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-jccidc-plan-enforcer-plan-enforcer-draft)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Plan Enforcer Draft? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Plan Enforcer Draft

Use this when the user does not already have a plan file and wants Plan Enforcer to generate one before execution.

Public front-end flow is discuss -> draft -> review. draft should consume the clarify-first packet when one exists, then hand the plan to review before execution unless the user explicitly wants to skip that guardrail. If the ask is still ambiguous, it needs discuss first via plan-enforcer-discuss before drafting.

Goal

Create a normal markdown execution plan that:

  • lives in docs/plans/
  • is readable by a human
  • can be enforced by the existing Plan Enforcer flow without translation

This is an optional on-ramp, not a replacement for GSD, Superpowers, or user-authored plans.

Planning Rules

When drafting the plan:

  1. At stage start, set the statusline stage to 2-DRAFT with:

node "$HOME/.claude/skills/plan-enforcer/src/statusline-stage-cli.js" draft --label 2-DRAFT

  1. Write the plan to docs/plans/-.md unless the user names a path.

If the target plan file already exists, Read it before overwriting.

  1. Use concrete, ordered tasks.
  2. Each task must be specific enough to execute without guesswork.
  3. Include a verification method for each task or subtask.
  4. Include explicit assumptions and out-of-scope notes when they matter.
  5. Prefer a format already supported by Plan Enforcer auto-detection:
  • ### Task N:
  • ## Task N:
  • Markdown checklist
  1. Do not execute the plan while drafting it unless the user explicitly asks for execution too.
  2. Include a ## Must-Haves section before the tasks. Must-haves are the user-visible outcomes the plan must deliver for the phase to be considered done. They are goal-backward: if every task ran to completion, do the must-haves actually hold?
  • Label each as MH1, MH2, ... so downstream tasks can cite them in Evidence/Chain cells
  • Keep them user-outcome framed (not implementation detail)
  • 3-7 must-haves per plan is typical; fewer means under-specified, more means the plan is probably two plans
  • plan-enforcer-verify reads this section at phase close to check each MH is covered by at least one verified task row
  • if awareness is active, append A:I / A:R refs to each must-have line so verify can trace the outcome back to captured intent
  1. Before drafting, run plan-enforcer-awareness capture-latest --if-empty so a concrete request always seeds at least one intent row.

If plan-enforcer-awareness is not on PATH, use: node "$HOME/.claude/skills/plan-enforcer/src/awareness-cli.js" capture-latest --if-empty

  1. If awareness is active, annotate each task title with the same A:I / A:R refs it is meant to satisfy. These inline refs are for ledger seeding, not prose decoration.

Recommended Output Shape

Prefer this structure:

# 

**Goal:** 
**Constraints:** 
**Out of scope:** 

## Must-Haves

- MH1:  A:I1
- MH2:  A:I2
- MH3:  A:R1

### Task 1:  A:I1
- [ ] 
- [ ] 

### Task 2:  A:I2
- [ ] 
- [ ] 

This keeps the plan compatible with existing detectors while staying easy to review.

Handoff To Enforcement

After writing the plan:

  • tell the user the plan path
  • explain that review is next in the public flow before execution
  • if they asked for an end-to-end flow, proceed into review against

that exact file before execution

Consume the discuss packet

Before drafting, check for the discuss packet at .plan-enforcer/discuss.md. If it does not exist, fall back to .plan-enforcer/combobulate.md for compatibility. If the packet exists and is recent (mtime Goal

  • Constraints -> Constraints
  • Out of Scope -> Out of scope
  • Preserve Non-Negotiables by covering them in Must-Haves and

task verification.

  • Preserve Rejected / Forbidden Narrowings by avoiding task sets

that silently simplify the ask.

  • Preserve Proof Requirements by mapping them into concrete

verification steps or evidence rows.

  • Use Draft Handoff only as shape guidance. It is not already a

task list.

  • Do not silently change scope decisions the packet made. If the

request needs to change scope, surface it and ask.

  • If the packet does not exist or is stale, proceed without it; do

not block on discuss when the request is already concrete.

Anti-rationalization table

A draft fails review if any task reads like the LEFT column. Rewrite into the RIGHT column shape before handing off. plan-enforcer-review will flag these patterns and block phase close in --strict.

| Disqualifying phrase (stop and rewrite) | Fix shape | |------------------------------------------|-----------| | "TBD" / "TODO" / "?" as a task step | Either resolve the decision now (cite which option and why) or hoist to a Decision Log pivot row - never ship with the unknown embedded in the plan | | "Add error handling" | Name the failure modes: handle ECONNREFUSED with 3x exponential backoff, surface as 503 to caller. Error handling without enumeration is decoration. | | "Similar to Task N" | Copy the actual steps. "Similar" means the reader has to compare two places and guess which details transferred. | | "Clean up" / "refactor" / "improve" with no target | Name the concrete end state: extract auth-middleware.js; replace 3 call sites in src/routes/*.js | | "Make it faster" / "optimize X" | Cite the measurement: `reduce p95 /api/search latency from 420ms to Task 2: Clean up the auth middleware and add proper error handling. > - [ ] Refactor for readability > - [ ] Handle edge cases > - [ ] Ensure it works with existing tests

This: > Task 2: Extract token-verify into src/auth/verify-token.js > - [ ] Move verifyJwt() out of src/auth/middleware.js into new file src/auth/verify-token.js > - [ ] Export as { verifyToken }; update 3 call sites in src/routes/{api,admin,webhooks}.js > - [ ] Extend verifyToken to surface jwt.TokenExpiredError as HTTP 401 with { code: 'token_expired' } (currently rethrows as 500) > - [ ] Verification: node --test tests/auth/verify-token.test.js passes; existing middleware tests green

Guardrails

  • Do not build a heavyweight project management structure
  • Do not invent phases, rituals, or roleplay unless the user asked for them
  • Do not silently trim requirements to make the plan easier
  • If the request is too vague, surface assumptions clearly in the plan

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.