review-crypto-delta
Compare two CBOM records and report deterministic semantic cryptographic changes with evidence hashes.
- License 许可
- MIT
- 所属仓库
- dasobral/skills
- 最近更新
- 2026-08-15
- Stars
- ★ 0
- Forks
- 0
01 前言 Front Matter
- name
- review-crypto-delta
- description
- Compare two CBOM records and report deterministic semantic cryptographic changes with evidence hashes.
02 资源文件 12
- 资产文件assets/runbook_template.md5.6 KB
- 资产文件assets/sop_template.md4.6 KB
- 参考文档references/5w2h_sop_canon.md5.9 KB
- 参考文档references/authoritative-sources.md537 B
- 参考文档references/cbom-delta.schema.json2.0 KB
- 参考文档references/kb_hygiene_anti_patterns.md9.5 KB
- 参考文档references/runbook_canon.md6.6 KB
- 脚本scripts/contract_utils.py1.7 KB
- 脚本scripts/kb_ingester.py18.9 KB
- 脚本scripts/runbook_validator.py16.1 KB
- 脚本scripts/semantic_diff.py2.9 KB
- 脚本scripts/sop_generator.py16.7 KB
03 SKILL.md 正文
Review Crypto Delta
- Read
references/authoritative-sources.mdandreferences/cbom-delta.schema.json. - Compare assets by stable
asset_id, not source-line churn. - Run
python3 scripts/semantic_diff.py < comparison.json > delta.json. - Review changes to algorithm, parameters, mode, protocol, provider boundary, key purpose, fallback, owner, confidence, and evidence hash.
- Preserve
evidence-gapwhen either side lacks evidence.
Evidence states are exactly pass, fail, unknown, not-applicable, and evidence-gap; confidence remains high, medium, or low. Evidence state is not a review decision.
Never request secrets or raw production key material. This semantic delta is review evidence and does not certify FIPS status, compliance, security, or migration readiness.
04 同仓库更多 Skills
fixture-skill
Fixture skill used to prove trust inventory coverage.
write-conformant-code
Write code in any language that matches project conventions exactly. Reads CODING_REQUIREMENTS.md, prior review output, or built-in defaults before writing. Part of Codecraft pipeline: analyze → write → review → audit. Use when implementing features, functions, or any code that should fit seamlessly into an existing codebase.
test-crypto-interoperability
Record reproducible cryptographic interoperability cases, including negotiation, fallback, sizes, latency, fragmentation, and negative tests.
scientific-platform-architect
Design scientific computing platforms combining HPC kernels with modern infrastructure. Enforces compute-layer separation (Rust/PyTorch/Python), emulator-first thinking, and right-sized infrastructure. Use for MCMC pipelines, neural emulators, platform design, or scientific code review.
rust-systems
Rust systems engineering for daemons, HTTP APIs, and AOS components. Enforces Tokio/Axum async-first, LiteLLM-compatible OpenAI APIs, workspace layouts, tracing, and systemd-compatible daemon design. Part of AOS Stack plugin. Use for .rs files, Cargo.toml, daemons, or Rust orchestrator services.
run-agent-attack-replay
Aggregate isolated agent attack trials with deterministic side-effect assertions, Wilson intervals, and preserved trace evidence.