Ijfw Verify

Integration with the runtime gate

This skill is the author-time half of IJFW's verification contract. The runtime half lives in mcp-server/src/orchestrator/verification-gate.js::checkVerificationGate (originally shipped in v1.4.4 as N5 as an advisory check) and is now invoked automatically by mcp-server/src/orchestrator/post-done-runner.js whenever the ijfw_state MCP tool's subagent.post-done verb fires after a subagent emits Status: DONE (v1.5.0-major / v1.5.0 T13 — single state-SDK MCP face).

What that means in practice:

• If you skip the Iron Law and emit Status: DONE anyway, the post-done runner will run checkVerificationGate against your checkpoint + commit + test output and downgrade the status to DONE_WITH_CONCERNS (or BLOCKED) when it detects an unsupported claim.
• The runtime gate is the safety net. It is not the gate. This skill is the gate. The runtime gate exists because skills are advisory and humans (and LLMs) sometimes lie; do not treat the runtime check as permission to skip the author-time check.
• If you find yourself thinking "the runtime gate will catch it" -- that thought is the Iron-Law violation. Run the command.

Existing IJFW Verify-phase ledger gate (still applies)

Before emitting VERIFY PASS for a workflow phase, the existing ledger check still runs:

read_issues() {
  local f=".ijfw/state/execute-issues.json"
  [ -f "$f" ] || { printf '{"issues":[]}'; return; }
  cat "$f"
}

Any entry with status: unresolved (task-incomplete, task-stagnated, unsafe-verify, plan-review) blocks VERIFY PASS. Missing file = zero issues (day-1 fresh-install protection). This skill adds the Iron Law on top; it does not replace the ledger gate.

Confidence declaration (still required at end of Verify)

Every Verify finding is tagged:

• VERIFIED -- command was run in this message, raw output is excerpted, anyone can reproduce.
• LIKELY -- reasoning provided (code read, docs consulted), not externally verified this session. Requires user acknowledgement to advance.
• GUESSING -- insufficient information; best guess only. Blocks advance.
• ISSUE -- blocker or bug surfaced; halt and document.

Only VERIFIED findings clear the ship gate unattended. The Iron Law is what earns the VERIFIED tag -- a finding is not VERIFIED unless the verification command + output appears in the same message.

Spirit over letter -- anti-loophole clause

Evidence patterns in the tables above are examples, not exhaustive. The rule is:

Every completion claim in this message must be falsifiable from the tool calls in this message.

If a clever workaround would still leave a future reader unable to independently verify the claim from the message contents, the workaround is not allowed. Examples of disallowed workarounds:

• Citing an exit code without showing the command that produced it.
• Pointing at a previous message's output ("see above"); copy it inline or re-run.
• Trusting an agent/auditor/hook report without checking the underlying artefact (commit SHA, file contents, npm registry, remote tag).
• Asserting "tests pass" because the test file exists and was edited.
• Asserting "shipped" because a tag was created locally without git push verification.
• Asserting "Trident PASS" because the synthesis file exists, without checking each auditor's input file is non-empty and reports PASS.

Iron-Law discipline -- the four boundaries

The runtime gate fires at four enumerated W3 boundaries -- the verbs that advance state ABOVE you:

• phase.complete -- post-phase verdict; enforceVerificationGate refuses on red.
• phase.plan-check -- pre-execute plan validation; any HIGH-tier finding refuses dispatch.
• subagent.post-done -- subagent completion; runSelfCheck refuses when claimed files/commits aren't on disk.
• wave.advance (hard gate) -- mid-wave checkpoint-completeness; a wave that declares hard_gate: true refuses to advance while any registered subagent lacks a checkpoint.

Discipline rule: collect verification evidence after the change, in the same message as the claim, before the boundary verb fires. The gate is the floor, not the ceiling -- pre-empting it is the job.

The bottom line

No shortcuts for verification.

Run the command. Read the output. Then claim the result.

This is non-negotiable.