Install
$ agentstack add skill-juliusz-cwiakalski-agentic-delivery-os-review-decision ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Run an independent challenge (decision kernel stage D10) against a drafted decision record and produce a review verdict — without modifying the record. Delegates the analysis to @decision-critic, which checks for framing errors, missing options, violated constraints, fragile assumptions, automation bias, and runs a premortem.
User invocation:
/review-decision
where ` is the decision record identifier (e.g., ADR-0001`) or the record's number for the relevant type.
This command is read-only by default: it produces a review artifact/verdict in its response and does NOT write, edit, stage, or commit any file. The caller decides whether and how to act on the findings (e.g., feed them back to @decision-advisor via /write-decision update, or escalate to a human reviewer for R3).
- id='$1' or allArguments='$ARGUMENTS': the decision record ID or number (e.g.,
ADR-0001,PDR-0003, or0001which defaults to ADR when the type is genuinely unspecified).
$ARGUMENTS
- Parse the ID into TYPE + zeroPad4 (e.g.,
ADR-0001→ typeADR, number0001). If only digits are given, default the type to ADR only when the type is genuinely unspecified. - Locate the record file by scanning
doc/decisions/--*.md. - If not found, return
NOT_FOUNDwith guidance to run/plan-decision+/write-decisionfirst, and stop.
- Resolve and read the target decision record read-only (
read/grep/globonly). - Hand the record's problem, evidence, constraints, and options to
@decision-critic. Where practical, withhold the record's recommendation/decision initially so the critic forms its own view, then compare against the record's stated conclusion. @decision-criticperforms the independent challenge (see its prompt): framing, option space, constraint compliance, assumption/sensitivity check, premortem, stakeholder harm, confidence assessment, automation-bias check.- Capture the critic's verdict — exactly one of PASS / PASSWITHRISKS / REWORK — and its structured findings.
- Modify nothing. Do not write/edit/stage/commit. Output the review verdict and findings only.
State at the top of the review which independence level applies (per @decision-critic's honesty framing):
- Single-model configuration: the critic is a first-pass check, NOT independent assurance (same-model/same-prompt lineage is not independent evidence).
- Multi-model configuration: the critic runs on a different model family, providing genuine independence (recommended for R3, not mandated).
Regardless of the verdict, R3 decisions ALWAYS require a human reviewer. A PASS from the critic does not authorize an R3 decision.
Return a structured review artifact (in the response only — no file writes):
- Status:
REVIEWED|NOT_FOUND|NEEDS_INPUT - Record:
-and path reviewed - Verdict: PASS | PASSWITHRISKS | REWORK
- Independence note: single-model (first-pass check) | multi-model (independent) — plus the R3-requires-human-review reminder
- Findings: framing / option-space / constraint-compliance / assumption-sensitivity / premortem / stakeholder-harm / confidence / automation-bias
- Accepted risks (for PASSWITHRISKS): explicit list the human decider must accept
- Required changes (for REWORK): explicit, actionable list
- Next step: e.g., "Return findings to @decision-advisor to address" / "Escalate to human reviewer (R3)" / "Decision is sound; proceed to human authorization"
- Read-only: do NOT use
write/edit; do NOT stage/commit; do NOT modify the decision record or any file. - Do NOT transition the record's status (no auto-Accept, no status change).
- Do NOT use the network.
- The verdict is advisory; it never authorizes a decision on its own. R3 always needs a human.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: juliusz-cwiakalski
- Source: juliusz-cwiakalski/agentic-delivery-os
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.