Skip to content

verify-project-release

skillLast commit

Read-only Codex and Claude Code skill for verifying GitHub releases, npm packages, tags, CI, install commands, and catalog metadata.

Open productSource
Role
Agent workflow design and automation engineering
Scope
Agent workflow, validation automation, and packaging
Status
Published npm package

Problem

A release can look complete in one system while its tag, package version, CI, install instructions, or catalog entry points elsewhere.

Constraints

  1. C1

    Auditing must never mutate or repair release state.

  2. C2

    Authentication/network errors cannot be interpreted as artifact absence.

  3. C3

    Mutable aliases such as latest are weaker proof than package@version.

Architecture

Evidence collection from Git/GitHub/npm/catalog; deterministic identity comparison and classification; human-facing pass/warning/fail/blocked report.

01

Skill workflow

Evidence collection from Git/GitHub/npm/catalog.

02

Automation

Deterministic identity comparison and classification.

03

Verification

Human-facing pass/warning/fail/blocked report.

Decisions

D1

Preserve a strict read-only boundary

Preserve a strict read-only boundary.

D2

Normalize findings into four explicit states

Normalize findings into four explicit states instead of a vague success flag.

D3

Prefer immutable version evidence and treat correct mutable aliases as conditional

Prefer immutable version evidence and treat correct mutable aliases as conditional.

Contribution

  • Implemented cross-system release identity resolution.
  • Built deterministic Git/GitHub/npm/catalog evaluators.
  • Encoded CI and install-command checks.
  • Added regression, installer-safety, and package-contract tests.

Outcomes

  • Agents can detect version/tag drift.
  • Distinguish missing artifacts from blocked verification.
  • Report exact failing surfaces.
  • Provide evidence links without claiming an install was executed.

Verified stack

  • Agent Skills
  • JavaScript
  • Node.js
  • npm
  • GitHub Actions
  • CI/CD
  • Git

Working through something similar?

Share your challenge, scope, and timeline to start a focused conversation.