version: "1.0.1" name: anti-defensive-writing description: "Remove audit, defensive, self-critical, developer-facing and commitment writing from a manuscript, its Supplementary Information, figure legends, table notes, data and code statements and figure content, while keeping every number, definition, reproducibility fact, mandated statistical statement, null result and scope condition that sets a reported value. Audit voice is project process leaking into the paper (locked, frozen, hashed, verified, post hoc, leakage-safe, gate verdicts, implementation checks). Defensive voice argues with an imagined reviewer (does not establish, should not be read as, we do not claim, for completeness). Self-critical voice has the paper judge or apologize for itself (could not be identified, not directly comparable, only a small fraction, unused datasets listed, table columns that grade their own rows). Developer voice addresses whoever runs the repository instead of whoever reads the paper (folder paths, file names, workbook sheets, manifests, loaders, editable or generated LaTeX). Commitment voice promises what does not exist yet (will be released, planned before acceptance, access can be arranged). Also carries the rule for not adding any of these while editing. Runs at the rhetorical-posture layer, after the claim hierarchy is settled and before the sentence pass. Load when a draft or SI reads like an audit report, a rebuttal letter, a self-critique or a repository README, when a paragraph opens with a limitation, or on request: de-audit, less defensive, more direct, cut the hedging, remove developer notes, no promises, 去审计, 审计味, 防御性写作, 自我批评, 自我限制, 评判式写作, 去包装, 太多免责, 写得太怂, 太啰嗦, 让语气更肯定, 别老说自己不主张什么, 读者和编辑不关心的内容, 面向开发人员, 代码路径, 文件名, 事前承诺." license: MIT

Anti-Defensive Writing

A research paper argues from evidence. It does not keep an audit log of its own project, argue with an imagined reviewer, criticize itself, document its repository, or make promises. This skill removes those voices from every part of the paper, Supplementary Information included, and keeps everything a reader needs to understand, trust and reproduce the work.

The paper should feel controlled because the design is clear, not because the authors keep saying that it is controlled.

Read What stays before deleting anything, and Local integration for where this skill sits in the paper-workflow chain.

Rule zero: do not add it

Most audit and defensive text is added during editing, not during drafting: an edit fixes an ambiguity, answers a co-author or reviewer comment, or adds provenance "to be safe". While editing any text:

• Add no qualifier, disclaimer or provenance note unless the sentence would otherwise be literally

false.

• Fix an ambiguity with a precise definition, not with a caveat. "Labels A to D denote four dataset

regimes" beats a sentence explaining what the labels should not be taken to mean.

• A request for a small change gets a small change: one sentence, not a protective paragraph around it.
• Do not weaken a claim in advance because a control or baseline is not yet in the draft. Whether a

claim needs qualifying is decided when that evidence arrives.

The six voices

Each voice has recognition cues and one fix. A cue is a candidate, not a verdict; classify it with the procedure below before changing it.

1. Audit voice: the project's process leaking into the paper

The text reports how the work was run and checked instead of what it found. Typical cues:

• process status: locked, frozen, hashed, scored once, fixed in advance, deterministic assignment,

identical comparison arms restated, configuration hashes;

• verification talk: verified rather than assumed, the numerical check that, to verify, sanity check,

leakage-safe, implementation verification, the pipeline was confirmed to;

• provenance qualifiers in Results: post hoc, added after the original evaluation, historical locked

recomputation, primary arm of the original design;

• internal vocabulary: phase and gate names, PASS or FAIL verdicts, retired metric names (files,

folders and code names are the developer voice, below);

• checker language presented as a finding: "no additive cost is resolvable".

Fix. State the design fact once, as a fact ("The evaluation split was held out from model selection"), in the section where the reader needs it. Move reproducibility detail to Methods or SI. Delete governance language outright.

2. Defensive voice: writing to an imagined reviewer

The text negotiates with a critic who is not in the room. Typical cues:

• negations of unmade claims: does not establish, does not imply, is not a, should not be read as,

we do not claim, this is not to say, not intended to;

• reflexive contrast: rather than, instead of, not X but Y, where the contrast is not the argument;
• reassurance repeated at every mention: no leakage, prespecified, independent of the answer, why an

artifact cannot explain the result;

• instructions to the reader: for completeness, to be clear, it should be noted, so that the

instability is visible rather than asserted, so a reader can see where the line falls;

• counterfactual paragraphs: "Had the target been X, the reference would need Y. This statement is

specific to Z; it does not relabel W";

• compound sentences that pack a claim together with every exception and control a reviewer might

raise.

Fix. Say what the object is and what the result shows: positive scope. If a limit changes a reported number or a reporting decision, keep it once, where it acts, in positive form. Split a reviewer-defence compound sentence into its claims.

3. Self-critical voice: the paper judging or apologizing for itself

The text evaluates its own shortcomings instead of reporting facts. Typical cues:

• confessions of absence: could not be identified, not exposed, not identifiable, not available, no

record exists;

• self-grading: not directly comparable, unstable, only a small fraction, remains at null, failed to,

unfortunately, we acknowledge;

• listing what the study did not use: datasets, runs, methods or resources that played no part;
• retreat framed as justification: "we keep it linear because deep models do not yet outperform

linear baselines";

• limitations placed in Results, legends or SI notes, or itemized at length in the Discussion;
• verdict columns in tables: a "Qualification" or "Status" column that grades each row ("positive

interval", "interval crosses zero", "within tolerance", "exploratory; small subset").

Fix. Report the fact neutrally, or drop it if no reader needs it ("All data were obtained from the X collection"). Describe what was used, not what was not. Recast a defended choice as the design decision it was ("A linear map is the reference estimator, so that supervision can be separated from capacity"). Where the evidence supports it, turn a defended weakness into a finding: a gap that richer models fail to close is evidence about what limits the task. Gather genuine limitations into one closing Discussion paragraph, stated as the scope of the research. A verdict column goes; the interval already shows what the verdict said. Keep a plain "Note" column only for facts needed to read a row ("pooled over three runs", "n counts conditions").

4. Commentary voice: judging the field, the reader or the rhetoric

• commentary on how others frame the problem: "rather than the variation the task is usually framed

around";

• rhetorical overstatement: "the aggregate score reports none of this";
• lecture-note devices: chains of rhetorical questions, "This is not an edge case", "the informative

null is the other one";

• labels such as headline performance or the real task.

Fix. Replace the rhetoric with the factual statement it stood for, and check that it is literally true.

5. Developer voice: the repository leaking into the paper

The text addresses someone who runs the code or opens the files, not someone who reads the paper. It survives review because it is accurate, but no reader of the paper can act on it. Typical cues:

• folder paths and repository layout: source_data/, results/, scripts/, "in the repository

root", "with larger row-level files in source_data/";

• file names and formats as objects: Reactome_2022.gmt, scores.csv, "provided as CSV files", "an

index sheet in each workbook names the source file for every sheet";

• build and format notes: "the supplementary tables are editable LaTeX tables", "generated by script

X", "regenerate and paste", "preparation of the LaTeX source";

• pipeline internals: manifest, launcher, loader ("the strict loader excluded ..."), run

configuration ("the run configuration recorded 60 epochs"), artifact, contract, cache, and outputs described as "saved", "existing" or "newer";

• internal names for methods, arms, variables or runs that differ from the paper's terms: code names

of estimators, M0/M1 arm labels, column names, command-line flags.

Fix. Name the scientific object in reader terms, or delete. "The Reactome 2022 gene-set collection contained 1,818 terms", not the file name; "exactly k plates were selected per compound", not "a fixed manifest selected"; "training used seeds 3407, 42 and 2025", not "the launcher fixed". Reader-facing identifiers stay: accession numbers, public URLs, the repository named in the Code availability statement, software names and versions, seeds, and the names of Supplementary Data files. \texttt is formatting, not a licence: a path set in \texttt is still a path.

6. Commitment voice: promising what does not exist yet

The text commits the authors to a future action, or describes an arrangement, instead of stating what exists. Typical cues: will be released, will be made available, will be deposited, a public release is planned before acceptance, upon publication, upon acceptance, access can be arranged through the corresponding author, we intend to, a future version will, will be addressed in future work.

Fix. State what exists now: the repository, accession or access route as it stands today, and delete the promise. If what exists does not meet the journal's policy (a private repository, no route for editors or reviewers), the author has to fix that before submission; report it, and do not cover it with a promise. A sentence about what future research should test is not a commitment ("Validation across sites will be important for ...") and may stay in the closing scope paragraph. A sentence about what the authors will do is a commitment.

What stays

A sentence is load-bearing, and is reshaped rather than deleted, when it does one of these:

• Defines or reproduces the work. Split construction, held-out design, leakage prevention stated

once as a fact, control matching, cluster bootstrap, matching rules, seeds, software versions. Methods may read procedural; that is its job.

• Meets a reporting requirement. Unit of replication and n, no P values or multiplicity

adjustment, blinding, exclusions, prespecification. State each once, in Statistical analysis.

• Sets a reported value or a reporting decision. For example, a ratio is not reported under one

distribution shift because only a few held-out compounds support it; keep that count once, where the decision is made.

• Gives an estimator's assumptions that the reader needs to interpret it.
• Reports a null, negative or contradictory result. State it plainly as a finding ("The

prespecified primary success rule was not met"). Never delete a result to improve tone.

• Declares a prespecified rule. Keep it once, and check that each outcome it governs is reported

somewhere in the paper. If one is not (a prespecified comparator whose contrast appears nowhere), flag it to the author; do not delete the criterion to hide the gap.

• Frames a construction that determines interpretation, once: "These constructions enrich for

cross-context divergence and are stress tests, not representative panels."

Whether a sentence is load-bearing depends on what it states, not on which skill or reviewer put it there. An integrity audit can place a load-bearing statement ("n is five seeds") and an audit-voice one ("absent from the public record as checked") in the same pass.

Two more constraints. A positive rewrite must be literally true: "never became positive in any stratum" was false when one stratum reached a small positive mean with an interval spanning zero; the fix is a precise statement ("no stratum showed a reliable gain"), which is precision, not defence. And tone never outranks evidence: no number, interval, n, control or null result is traded for directness, and a posture pass cuts repetition, not content.

Where each kind of content belongs

Procedure

1. Settle the claim first. Run after manuscript-optimizer. While the claim is moving, an

unnecessary disclaimer and a real scope condition look alike.

1. Detect. Read paragraph by paragraph, and run the detection pass below on the source. Cover the

SI, legends, captions, table notes, table columns, end matter and data statements, not only the main text.

1. Classify each hit.

• A. Necessary to understand the experiment: state once, naturally, where it acts.
• B. Needed for reproducibility: move to Methods or SI, one plain sentence.
• C. Reassurance against a possible criticism: delete.
• D. Internal project, governance or repository language: restate in reader terms, or delete.
• E. Self-criticism: neutral fact, design decision, finding, or delete.
• F. Null or contradictory result: keep as a finding, in neutral words.
• G. Commitment: state what exists now, or delete and report the gap to the author.

1. Rewrite in positive form, and check that each rewritten sentence is literally true.
2. Rebuild the paragraph around its point: lead with the claim, one job per paragraph.
3. Edit at the source. A caption, table or table note produced by a script and pasted into the

manuscript is edited in the generator and regenerated; an edit to the pasted copy is reverted at the next rebuild. When the edits are scripted, keep the file's encoding and line endings, and check that the diff touches only the intended lines.

1. Rebuild the document and rerun its gates (cross-references, terminology, figures); re-read the

changed passages in the output. Check prose references to panel positions ("left", "lower section of Fig. 3a") against the current figures: the build cannot catch a figure redrawn under an unchanged label.

references/worked-examples.md holds before-and-after pairs from past revisions, grouped by voice, with a section of sentences that looked defensive and were kept. Read it before a whole-document pass.

Modes

• Edit (default): apply the procedure and report.
• Proposal ("先不动，只给方案", "just give me a plan"): make no edits. For each hit give the location,

the quoted text, the voice, the action (delete, move, rewrite) and the proposed wording.

• Light touch ("微调", "one sentence"): change only the named sentence, and add nothing around it.

Detection pass

Candidates only; classify before acting. On a LaTeX source, ignore comments, but scan \texttt{...}: accession numbers belong there, and so do the folder paths and file names the developer-voice line looks for.

F=manuscript.tex   # repeat for the SI and for any generator that writes captions or table notes
# audit
grep -n -i -E "locked|frozen|hash|scored once|fixed in advance|verif|sanity|leak|post[- ]hoc|original (design|evaluation)|recomputation|\bgate\b|\bPASS\b|\bFAIL\b|numerical check|predeclared|historical|legacy" "$F"
# defensive
grep -n -i -E "does not (establish|imply|mean|test|estimate|prove|relabel)|do not (claim|imply)|should not be (read|interpreted|taken)|is not an? |are not an? |not intended|rather than|instead of|for completeness|to be clear|should be noted|worth noting|visible rather than|so (that )?a reader|had .* been|specific to .*; it does not|without claiming|not (statistical )?significance" "$F"
# self-critical, including verdict columns in tables
grep -n -i -E "could not be (identified|determined|recovered)|not (exposed|identifiable|directly comparable)|unstable|\bonly (about |around )?[0-9]|remains? at null|failed to|unfortunately|we acknowledge|limitation|shortcoming|caveat|exploratory|qualification|within tolerance|interval crosses zero|positive interval" "$F"
# commentary
grep -n -i -E "headline|usually framed|none of this|edge case|the real task|\?\s*$" "$F"
# developer: paths, files, workbooks, build and pipeline internals
grep -n -i -E '\\texttt\{|[A-Za-z0-9_\\]+/[ }.,;)]|\.(csv|tsv|xlsx?|json|ya?ml|py|ipynb|gmt|h5ad|parquet|npz|pkl)\b|manifest|launcher|loader|run configuration|artifact|workbook|index sheet|editable latex|latex source|regenerat|\bscript\b|pipeline' "$F"
# commitment
grep -n -i -E "will be (made |publicly )?(available|released|deposited|provided|shared)|(is|are) planned|planned (before|for|to)|can be arranged|upon (acceptance|publication)|after acceptance|we (plan|intend) to|future (release|version)|forthcoming" "$F"

Reporting

Report four lists: what was deleted or moved and why (by voice and class); every limitation kept and the reason it is load-bearing; every null or contradictory result, confirming that it is still stated; and every gap that needs the author rather than an edit (an access route that does not exist yet, a prespecified outcome reported nowhere, a stale panel reference). Then report the build and gate status. A pass that silently deletes a mandated statement or a result is a reporting failure, not a style improvement.

Local integration

Where this runs

paper-workflow places this skill at layer 4, the rhetorical-posture layer:

1. structure (manuscript-optimizer)
2. prose (scientific-writing)
3. passage logic (write-scientific-manuscript)
4. rhetorical posture (this skill)
5. sentence pass (scientific-prose-style), last

Run it after the claim hierarchy is stable and before scientific-prose-style, because removing defensive scaffolding rewrites paragraph openers and sentence boundaries that the punctuation and rhythm pass then has to settle. Moving an audit panel out of a main figure is a structural change: hand it to figure-planner rather than editing the figure here.

Boundary with the integrity audits

stats-reporting-audit, claim-source-verification, citation-verifier, data-availability and submission-audit add statements a paper needs: the unit of replication and n, no P values, access routes, the count behind a reporting decision. Those are load-bearing by type (What stays), and the edit they may need is a change of form, not deletion: move the statement out of a high-impact position, state it once instead of at every mention, write it as positive scope, and drop the instruction to the reader while keeping the fact. The same audits can also add audit voice ("as checked", "not exposed", "could not be identified"); that wording is treated like any other.

submission-audit runs after this skill. Anything it adds is held to rule zero, and the detection pass is rerun on the changed passages.

Worked example, from a Methods section:

Defensive:

This component is an operational residual and is not assumed to represent a noise-free biological

or causal effect. It may contain measurement noise and other unmodelled variation.

Same information, stated as scope:

This component is an operational residual under the specified additive decomposition. It aggregates

context-specific pharmacological variation, residual marginal structure and measurement noise.

Boundary with scientific-prose-style

scientific-prose-style owns punctuation, rhythm, the em-dash budget and hedge calibration inside a sentence. This skill owns authorial posture at the paragraph and document level: what a paragraph leads with, where a caveat sits, whether a sentence advances the argument or pre-empts an objection, and whether a passage belongs in the paper at all. They stack, in that order.

Provenance

Adapted from Kiterlin/anti-defensive-writing (MIT, https://github.com/Kiterlin/anti-defensive-writing). The core rule (advance the claim directly, keep necessary limitations, prefer positive scope) and the three examples marked as upstream in references/worked-examples.md come from upstream. On 2026-09-30 the body was rewritten from this repository's manuscript-revision history, and later that day the developer and commitment voices were added: rule zero, the six voices, What stays, the placement table, the seven-way classification, the modes, the detection pass and the remaining worked examples are local. See LICENSE and UPSTREAM.md.