Structured hypothesis-driven investigation for complex infrastructure issues. Triggered by /dp command or [Deep Investigation] UI toggle.
Resources
1Install
npx skillscat add scitix/siclaw/deep-investigation Install via the SkillsCat registry.
Deep Investigation
A structured workflow for deep-diving into complex issues using hypothesis-driven
validation. When the user explicitly activates Deep Investigation mode (toggle, /dp,
Ctrl+I), follow this recommended structure. Outside of DP mode, use these tools
adaptively based on the situation.
When to Use
- Complex issues requiring hypothesis-driven investigation with multiple potential root causes
- Issues involving RDMA/RoCE, network, or hardware that need systematic validation
- When the user explicitly requests deep investigation (toggle, /dp, Ctrl+I)
- When initial triage reveals multiple possible root causes
When NOT to Use
- Simple questions answerable with 1-2 kubectl commands
- When the issue is already clear from initial triage
Recommended Workflow (4 phases)
The following phases are a recommended structure. You may skip or merge phases
when the situation calls for it — e.g., skip straight to deep_search if the user
gives a clear direction, or end after triage if the answer is already apparent.
Phase 1: Quick Triage
Gather environment context and confirm the problem exists.
- Call
manage_checklistto marktriageasin_progress. - Run targeted kubectl / diagnostic commands to confirm the symptom.
- Call
manage_checklistto marktriageasdonewith a brief summary.
Phase 2: Propose Hypotheses
Formulate 3-5 ranked hypotheses based on triage findings.
- Call
manage_checklistto markhypothesesasin_progress. - Call
propose_hypothesestool with your formatted hypothesis list. - In DP mode, this is a good point to pause for user input — the user may want
to adjust hypotheses before committing to an expensive deep_search.
If the user is actively engaged, wait for their confirmation.
If the user gave a clear directive, you may proceed directly.
Phase 3: Deep Search Validation
Validate hypotheses using parallel sub-agents.
- Call
manage_checklistto markdeep_searchasin_progress. - Call
deep_searchtool with triageContext and the hypotheses. - When deep_search completes, call
manage_checklistto markdeep_searchasdone.
Phase 4: Present Findings
Synthesize the deep_search results into a conclusion.
- Call
manage_checklistto markconclusionasin_progress. - Write a clear conclusion with root cause analysis and recommendations.
- Call
manage_checklistto markconclusionasdone.
Available Tools
| Tool | Purpose |
|---|---|
manage_checklist |
Update checklist progress (items: triage, hypotheses, deep_search, conclusion) |
propose_hypotheses |
Present hypotheses to the user — a communication tool for aligning investigation direction |
deep_search |
Launch parallel sub-agent validation of hypotheses |
end_investigation |
End early — auto-skips remaining phases |
Guidelines
- Use propose_hypotheses for communication: Always use the tool (not plain text) to present hypotheses — it renders a proper UI card. Think of it as a way to align with the user on investigation direction, not as a mandatory gate.
- Be cost-aware with deep_search: It launches parallel sub-agents consuming 30-60 tool calls. When the investigation direction is uncertain, use propose_hypotheses to get alignment first.
- Avoid redundant validation: Let deep_search handle hypothesis validation with its parallel sub-agents. Running the same checks manually is inefficient.
- Use DP-specific tools during DP mode: Prefer
manage_checklistovertask_planduring deep investigation to keep the checklist UI consistent.
Early Exit
- If triage alone is sufficient to answer the question, present your findings and ask the user before ending.
- Call
end_investigationto cleanly exit — it marks all remaining items as skipped.