proof-orchestrator
Route Codex proof work to the right verification path before making done, fixed, safe, current, or complete claims. Use when the user asks to verify, prove, validate, review proof, confirm a fix, chec
SKILL.mdskills/core/proof-orchestrator/SKILL.md
GitHubProof Orchestrator
Use this skill to choose the proof plan. Do not use it as proof by itself.
Core Rule
Map the claim to the weakest proof level that would still be honest. If the user asks for a stronger proof level, use the stronger one.
implemented: files/config/docs changed and inspected.code_proven: current source inspection supports the claim.test_proven: fresh automated tests support the claim.runtime_proven: fresh evidence on the supported runtime path supports the claim.end_to_end_proven: fresh evidence across the real user-visible path supports the claim.
Never upgrade one level into another. Say not_proven_yet when the available evidence is weaker than the claim.
Routing
- Restate the claim as a falsifiable sentence.
- Identify the required proof level and why.
- Route to the smallest existing skill or proof surface that can falsify it.
- Run or request the proof. Do not summarize stale proof as current proof.
- Report the strongest safe truth, proof gaps, and next proof step.
Proof Paths
- Bug, regression, crash, slowness, flaky behavior: use
$diagnosefirst to build the feedback loop, then prove the fix with fresh evidence. - Specific claim with measurable baseline/treatment: use
$verify-this. - Code review or behavioral regression risk: use review mode first; findings outrank summary.
- GitHub PR/CI truth: use GitHub/CI proof surfaces, then report only what the current checks prove.
- UI or browser behavior: use a real preview/browser path when available; screenshots alone are not enough for interaction claims.
- CLI/TUI behavior: use a real terminal transcript or deterministic command output; avoid visual inference only.
- Docs/current-version truth: inspect source docs or official upstream before claiming current behavior.
- Security or supply-chain safety: prefer source inspection, version pinning, advisory checks, and minimal execution before trust.
- Human-in-the-loop, approvals, credentials, paid actions, private data, legal/business decisions: stop at the human gate. Do not treat repeat/continue/resume as approval.
Claim Calibration
Use these words precisely:
- Say
implementedonly for changed files or configs. - Say
test_provenonly when the relevant fresh test actually ran and passed. - Say
runtime_provenonly when the supported runtime path was exercised. - Say
end_to_end_provenonly when the real user-visible flow was exercised. - Say
inconclusivewhen the proof surface failed, was blocked, or measured the wrong thing.
Output
Use this shape:
Proof target: <falsifiable claim>
Required level: <implemented|code_proven|test_proven|runtime_proven|end_to_end_proven>
Route: <skill/tool/test/runtime path>
Evidence collected: <fresh evidence or none>
Verdict: <proven level or not_proven_yet/inconclusive>
Gap: <next proof needed, if any>
If the evidence is stale, indirect, or only from a tracker/doc, name it as weak evidence instead of proof.