version: "1.0.1" name: flowguard description: "Guard long, ambiguous, or stateful AI-agent work from drift. Use when the user asks to run or continue a multi-step task, autonomous loop, bug fix, repo change, PR readiness check, compaction handoff, resume from previous context, cost-control checkpoint, or any task likely to span many tool calls, files, sessions, agents, or verification gates."

Flowguard

Overview

Use this skill as the single lifecycle entrypoint for agent work that can drift, lose context, or become expensive. It routes the task, verifies current state, runs bounded execution loops, and leaves a resumable handoff.

This skill coordinates other skills; it does not replace them. Use task-specific skills such as systematic-debugging, comprehensive-testing, codex-retrospective, or vibeguard only when their trigger is clearly met.

Operating Contract

• Do not start a long autonomous loop until route, scope, and stop conditions are explicit.
• Do not treat memory, summaries, or handoffs as current truth until repo, git, files, runtime, or remote state is verified.
• Do not claim completion without fresh verification evidence from the current session.
• Do not expand scope, touch destructive surfaces, or cross file-ownership lanes without stopping to re-route.
• Re-state the primary objective and a plan of no more than five steps before major phase changes.
• Prefer one controlling checkpoint over many specialized workflow fragments when the task risk is context loss, drift, or compounding errors.
• Before commit, push, PR, merge, or applying agent-generated changes outside the already-approved scope, call review-gate or produce the same review pack and wait for explicit human approval.

Route First

Choose one route before editing files or running a long loop:

Do not hide ambiguity inside assumptions. If a wrong assumption would cause large rewrites, production risk, data loss, credential exposure, or wasted long-loop cost, use clarify_first.

Startup

1. Search first for existing files, skills, plans, or prior artifacts that may already cover the task.
2. Load every applicable AGENTS.md for files that may be edited.
3. Run the state snapshot when working in a repo or resuming. Resolve it from the installed Flowguard skill directory, not from the target repo:

# From the installed flowguard skill directory, the directory containing this SKILL.md:
scripts/workflow_state_snapshot.sh /path/to/target/repo

When already in the target repo, pass . as the target to the installed script, for example /path/to/installed/flowguard/scripts/workflow_state_snapshot.sh ..

1. If the task continues previous work, treat memory and summaries as hints only. Verify cwd, git branch, dirty files, relevant artifacts, and runtime state before relying on them.
2. Capture the four task elements: goal, context, constraints, and done-when. If one is missing and risky, clarify.

Preflight Contract

Before substantial work, write or state the compact preflight:

route:
goal:
context:
constraints:
done_when:
out_of_scope:
verification_commands:
stop_conditions:
handoff_location:
objective_restatement:
plan_5_steps_or_less:

For short direct tasks, this can be one concise paragraph. For long tasks, make it explicit and keep it available for compaction or resume.

Execution Loop

Use a step-test-update loop:

1. Select one current step with owned files and an expected check.
2. Re-state how the step supports the primary objective.
3. Announce the edit boundary before changing files.
4. Make the smallest useful change.
5. Run focused verification for that step when feasible.
6. Record a checkpoint with changed files, command results, decisions, blockers, context audit, and next step.

Stop and re-evaluate when any condition occurs:

• The same fix fails 3 times.
• Scope expands beyond the preflight.
• Required data is missing or stale.
• A tool result conflicts with the plan.
• Tests or builds fail for reasons unrelated to the current hypothesis.
• The user sends a newer instruction that changes priority.
• Token, tool-call, wall-time, or external-cost budget is exceeded.

Failure Modes

• Assumption drift: the route says execute_direct, but new evidence shows missing goal, constraints, or done-when. Stop and re-route.
• Summary-of-summary loss: compaction or handoff omits modified files, decisions, or verification commands. Rebuild state from local truth before editing.
• Stale memory: remembered project facts conflict with current files, git, runtime, or GitHub state. Use current evidence.
• Silent tool failure: an empty, partial, or "close enough" tool result becomes input for later steps. Mark it as a blocker or rerun with a narrower check.
• Parallel merge risk: two lanes need the same writable file. Collapse to one integration owner before continuing.

Verification Gate

Do not claim completion from expectation or older output. Report fresh evidence from this session.

Pick checks from the repo, AGENTS.md, and changed surface. Common defaults:

If a check cannot run, say why and name the nearest useful fallback that did run.

Review Gate

Before landing agent-generated changes, produce a concise review pack or use the review-gate skill. The pack must include intent, diff summary, changed files, risks, verification, open questions, and the exact action needing approval. Human approval for one action does not automatically authorize a different action such as merge.

Handoff And Resume

Read references/state-contract.md when asked to create a handoff, resume after compaction, continue a previous task, or prepare automation.

Required handoff fields:

• modified files
• constraint set or SPEC
• verification command and result
• key decisions
• current priority
• L1-L7 rule summary when VibeGuard applies
• context audit: keep, externalize, discard, and stale/conflicting inputs
• review gate decision when changes are ready to land
• blockers and next action

Resume must start by comparing the handoff with current local truth. If cwd, branch, files, tests, or user priority changed, update the plan before editing.

Multi-Agent Rule

Use parallel agents only when file ownership is disjoint and merge ownership is explicit. A delegation must name:

• agent or lane
• writable files or directories
• read-only context
• expected output artifact
• verification owner
• merge owner
• stop conditions

If two agents need to write the same file, do not run them in parallel.

Automation Boundary

Skill workflows are manual first. Automate only after the workflow has been manually validated on real tasks. Scheduled automation should start as read-only: state scans, handoff drafts, stale-worktree reports, or verification summaries. Code edits, deploys, credential changes, or PR submissions require explicit user intent unless a separate trusted automation contract exists.

Resources

• scripts/workflow_state_snapshot.sh <path>: read-only snapshot for cwd, git state, nearby agent instructions, dirty files, and likely verification commands.
• references/state-contract.md: templates for preflight, checkpoints, handoff, resume, loop guards, and automation readiness.
• review-gate: review pack and explicit human approval before landing agent-generated diffs.