audit

Sprint 1.2 fan-out + Sprint 3 composable skill (v8.16+). Sub-auditors run in parallel via subagent-run.sh dispatch-parallel auditor.

When to invoke

• After build produces build-report.md
• Cycle is in build phase per cycle-state

When NOT to invoke

• Build status is FAIL (no point auditing broken code; orchestrator must re-build first)
• Eval-only cycles (only run audit-eval-replay sub-auditor)

Workflow

Step	Action	Exit criteria
1	Verify <workspace>/build-report.md exists, fresh, status ≠ FAIL	Build verified
2	Dispatch 4 sub-auditors in parallel	4 worker artifacts
3	Aggregator applies ALL-PASS rule	<workspace>/audit-report.md first line is Verdict: <X>
4	Phase gate gate_audit_to_ship enforces PASS	Gate passes only on PASS

Verdict semantics

Verdict	Trigger	Phase-gate behavior
PASS	Every sub-auditor reports PASS	Allow ship
FAIL	Any sub-auditor reports FAIL	Block ship; orchestrator → retrospective
WARN	Any sub-auditor reports WARN (no FAIL)	Block ship; review case-by-case

Adversarial mode (CLAUDE.md rule 8)

Default ON: each sub-auditor's prompt prepends "ADVERSARIAL AUDIT MODE — require positive evidence for PASS". Disable only via ADVERSARIAL_AUDIT=0 for deliberately permissive sweeps. Auditor model defaults to Opus while Builder defaults to Sonnet — different family breaks same-model-judge sycophancy.

Goal-integrity (metric-affecting cycles)

For any cycle that changes a scored metric — a flag-reduction cycle, a
registry/gate/marker/allowlist edit, or any cycle claiming a count reduction —
the auditor MUST apply the goal-integrity rubric in
`skills/adversarial-testing/SKILL.md` §10.1
as a mandatory BLOCK (co-equal with the deterministic gates, not a backstop). A
claimed reduction must cite the reader that was deleted and confirm no
surviving reader on any surface; "the row is gone" is not evidence. FAIL on
writer-fabrication, off-namespace/reflection rename, contract under-delivery, or
any --class cycle edit of a guards.IsProtectedSurface control-plane file.

Phase facts

Fact	Value
Phase	audit (evaluate archetype, mandatory)
Persona	agents/evolve-auditor.md
Profile	.evolve/profiles/auditor.json — CLI claude-tmux, tier deep, single-writer
Inputs	build-report.md · tester-report.md
Artifact	audit-report.md (cycle workspace)

Output contract

audit-report.md must declare:

• ## Verdict (also accepted: Verdict:)

Verdict tokens: PASS | FAIL | WARN | SKIPPED.

Composition

Invoked by:

• /evo:audit
• loop macro after /evo:build

Fan-out prompts live in .evolve/profiles/auditor.json:parallel_subtasks (count projected into Phase facts above).

Reference

• .evolve/profiles/auditor.json
• legacy/scripts/dispatch/aggregator.sh (phase=audit)
• legacy/scripts/lifecycle/phase-gate.sh:gate_audit_to_ship
• skills/loop/phase4-audit.md (legacy detailed workflow)