Gatekeeper Master Control Routing and Global Behavior Rules

This document is the single rule source + master control routing for the iteration pipeline; the responsibilities of all sub-skills are listed in Section 8, and the overall rules are subject to the following sections. Version number = current Git branch name (obtained by reading
git branch --show-current
only; if failed/empty → prompt manual branch switch, prohibit using empty string/guessed value). Global Path Convention:
Project Root/...
always refers to the Git repository root directory (where
AGENTS.md
is located, e.g.,
Project Root/.gatekeeper/
);
template/
of the
gatekeeper
skill refers to its own resource directory, and the two must not be confused.

When to Use

Manual trigger only via the
```
/gatekeeper
```
command (set
```
allow_implicit_invocation: false
```
in
```
agents/openai.yaml
```
to prohibit implicit invocation by Agent);
Used to advance iteration, confirm current progress, or resume from an interrupted point.

1. Fixed Iteration Pipeline (Mandatory Checkpoints + Full Traceability)

Manual Requirement Confirmation

→

Agent High-Level Design

(can be skipped for minor changes) →

Manual Review Traceability + Approval

→

Agent Coding + Unit Testing

→

Agent Dev Environment Testing (traceability in Part 3 of review.md)

→

Manual Code Review Traceability + Approval

→

Manual Commit Merge + Staging Deployment

→

Manual Staging Testing Verification (traceability in test.md)

→

Manual-Assisted Production Deployment Finalization

Requirement confirmation criteria:
```
requirement.md
```
has no HTML placeholders, and "Requirement Confirmer/Date" is filled.
Modifications mentioned in chat: In requirement/high-level design phase → direct code modification is prohibited, require manual completion of requirement.md; minor changes in coding phase (not involving reviewed interfaces/data structures/design) → can modify code directly and proceed with code review.
Minor change iteration: Mark "Skipped" in Phase 2 of progress.md, skip high-level design and design review, directly enter T03.
T07 issue attribution: If covered by requirements → return to Phase 3/4 for repair; if not covered by requirements → manual requirement supplement before re-development, no need to re-run the full process.
Historical archiving: Completed iterations are stored in
```
Project Root/.gatekeeper/history/
```
, and are completely ignored during iteration. After T08 is completed or
```
/gatekeeper-abort
```
is executed to terminate, migrate the entire iteration to
```
Project Root/.gatekeeper/history/${version number}/
```
.

2. Mandatory Rules for Review and Testing Traceability (Core)

The only basis for review is
```
review.md
```
; the only basis for staging testing is
```
test.md
```
; dev testing records are in Part 3 of
```
review.md
```
. Ignore temporary chat comments.
Two rounds of review (high-level design, code) + one round of testing (staging); multiple rounds of rectification and review are supported, and the round number is recorded in the "Round" column of the same table, no need to copy the header.
Work logic: Only read and rectify rows with [Status = Pending Rectification] in a targeted manner, no new functions; actively prompt manual review after rectification, do not judge completion privately; this round can only end after manual marking [Review Passed]; mark "No Rectification Needed" with reasons for false reports, and let manual personnel decide, do not modify or clear privately.
Prohibit rectification without basis, out-of-scope rectification, and private clearing of issue records.
Output a repair list after fixing, inform manual personnel for review.
Only after all issues are [Review Passed] + manual update of progress.md phase + issuance of advance instruction can enter the next phase; AI does not actively poll or advance on its own.
Minimum Elements for Code Review (Mandatory for Gate 2): Before approval, ① check the diff scope item by item according to the "Change List" in design.md to identify out-of-scope changes; ② interface contract changes must be synchronized to
```
crmeb/apidoc/
```
and stated in the rectification result; ③ test coverage description. Empty table/zero issues cannot be approved directly; for "zero issues", manual personnel must specify the check scope and sampling items in the approval remarks, and manually sample and check at least 1-2 change points.
Dev Testing and Acceptance Standard Mapping (Mandatory for T04): Each test item in Part 3 of review.md must fill in "Corresponding Acceptance §" (corresponding to Section 7, Acceptance Standards in requirement.md); un-mapped acceptance standards mean incomplete dev testing.
Staging Attribution Judgment (Mandatory for test.md): Must read and quote the original entry in requirement.md before judging "Covered by Requirements / Not Covered by Requirements"; only these two enumerated values are allowed in the attribution column, actively prompt manual correction for illegal values; if repair leads to interface contract changes, must state that apidoc has been synchronized.
Cross-Iteration Regression (Mandatory): The change list in design.md must state "Associated Historical Iteration Regression Items"; when touching previous functions, dev testing must retest and leave trace in review.md ③, otherwise dev testing is incomplete.

3. File Read/Write Permission List

Agent is only allowed to access the following files, others are read-only:

File	Readable	Agent Writable	Description
`Project Root/.gatekeeper/${version number}/requirement.md`	✅	❌ Prohibited	Written manually, Agent cannot modify
`Project Root/.gatekeeper/${version number}/progress.md` (Gate + Progress)	✅	❌ Prohibited	Phase master gate, only manual modification allowed
`Project Root/.gatekeeper/${version number}/design.md`	✅	✅	Agent high-level design output
`Project Root/.gatekeeper/${version number}/review.md`	✅	✅ Only [Status] + [Rectification Result] columns	Status only allows Pending Rectification → Rectified Pending Review / No Rectification Needed
`Project Root/.gatekeeper/${version number}/test.md`	✅	✅ Only [Status] + [Rectification Result] columns	Same as above
`Project Root/.gatekeeper/history/`	✅	❌ Prohibited	Completed archive, completely ignored during iteration
`AGENTS.md` , `opencode.json` , `Project Root/.gatekeeper/*.md` (Global Rules)	✅	❌ Prohibited	Global configuration, only manual modification allowed

4. Template and File Generation Rules

Templates are uniformly stored in

template/

of this skill (

gatekeeper

); instantiation = copy to

Project Root/.gatekeeper/${version number}/

+ replace

${version number}

+ delete redundant "Usage Instructions" text:

Template	Instantiation Target	Generator	Generation Timing
`_template-requirement.md`	requirement.md	Manual	Initialization ( `gatekeeper-init` )
`_template-progress.md`	progress.md	Manual	Initialization ( `gatekeeper-init` )
`_template-design.md`	design.md	Agent	Phase 2 ( `gatekeeper-next` )
`_template-review.md`	review.md	Agent	Phase 5 ( `gatekeeper-next` )
`_template-test.md`	test.md	Agent	Phase 7 ( `gatekeeper-next` )

5. Single Round Dialogue Scope Constraints

Only complete 1-2 tasks in one round of dialogue, prohibit completing the entire iteration at once.
Prohibit cross-phase work: Coding is not allowed before passing the high-level design review (or marking as skipped).
Progress, phases, and review results are all recorded in files, do not rely on AI dialogue memory.
After Agent fills in the rectification result, prompt manual personnel to submit traceability files; Git commits are executed manually.

6. Phase Transition Identification

Design review: Stop coding, wait for manual rectification instruction before reading the issue list in review.md.
If [Pending Rectification] is manually entered: Fix and fill in item by item, set status to "Rectified Pending Review"; mark "No Rectification Needed" with reasons for false reports.
Manual review: Mark "Review Passed" if approved, and the issue enters the next round if rejected.
Only after all are reviewed and passed + manual update of progress.md + issuance of advance instruction can enter the next link.
Code review logic is consistent with design review.
Staging testing: Manual personnel enter issues in test.md → Agent judges attribution → Fix and fill in → Manual re-test and review.
Progress Location: progress.md does not maintain a "current phase" pointer, locate the first uncompleted phase row according to the [Status] of each phase; verify that the status is consistent with the traceability conclusion before archiving.

7. Token Consumption Optimization Constraints (Mandatory)

Output Specification (P0): Only output change summary + increment in replies, prohibit full table display of traceability files; only show rows related to the current action.
Template Header Simplification (P0): 1-2 lines of header description for traceability files; delete redundant "Usage Instructions" during instantiation.
Incremental Reading (P1): Locate the scope according to [Status = Pending Rectification]/latest round, only read pending rectification rows and the latest round; do not re-read rows already read in the same round.
Codegraph Convergence (P2): Precise symbol names + maxFiles limit; prioritize trace/callers for link queries.
Single Rule Source (P0): Global rules are unified in this document, avoid repeated injection.

8. Instructions and Sub-skill Overview

Sub-skill	Command	Responsibility
`gatekeeper-init`	`/gatekeeper-init`	Create `Project Root/.gatekeeper/${version number}/` , instantiate requirement.md / progress.md and verify placeholders
`gatekeeper-fix`	`/gatekeeper-fix`	Read [Pending Rectification] issues in review/test, judge attribution first for staging, fix and fill in in a targeted manner, wait for manual review
`gatekeeper-next`	`/gatekeeper-next`	After confirming review is passed, execute current phase tasks and instantiate required templates
`gatekeeper-abort`	`/gatekeeper-abort`	Terminate: After checking traceability, mark and migrate to history
`gatekeeper-finish`	`/gatekeeper-finish`	Migrate to history after verifying that four items are complete for archiving

9. Master Control Routing Dispatch (Core Action of This Skill)

1. Judge Whether a Process Exists

```
Project Root/.gatekeeper/${version number}/
```
does not exist → No process exists, initiate
```
/gatekeeper-init
```
, stop and wait for manual filling of requirement.md.
Exists → Continue.

2. Locate Current Phase

Only read
```
progress.md
```
, locate the first uncompleted phase row (see 6.7); only read
```
review.md
```
/
```
test.md
```
to check [Pending Rectification] rows.
If
```
.init-incomplete
```
mark exists → Return to
```
gatekeeper-init
```
(complete missing files).

3. Dispatch Sub-skill (Traceability Status Priority, Stop Once Hit)

Priority	Scenario	Dispatch
1	[Pending Rectification] exists in review/test	`/gatekeeper-fix`
2	Phase 1 Requirement Confirmation not completed	No sub-skill: Prompt manual filling of requirement.md
3	Phase 2 High-Level Design not completed	`/gatekeeper-next` (output design.md; can mark as skipped for minor changes)
4	Phase 3 Coding + Unit Testing not completed	`/gatekeeper-next`
5	Phase 4 Dev Testing not completed	`/gatekeeper-next`
6	Phase 5 Code Review not completed	`/gatekeeper-next` (instantiate review.md); return to fix if pending rectification
7	Phase 6 Commit Merge + Staging Deployment	No sub-skill: Manual execution of git (Agent does not execute)
8	Phase 7 Staging Testing not completed	`/gatekeeper-next` (instantiate test.md); return to fix if pending rectification
9	Phase 8 Finalization and archiving conditions are met	`/gatekeeper-finish`
10	All completed	Prompt manual personnel to archive or start a new iteration

4. Output

Only output: Version number, current phase, dispatched sub-skill and reason (one line), subsequent manual actions; prohibit full table display of traceability files (see 7.1).

Pitfalls

This skill prohibits automatic usage by Agent; if no process directory is detected, only
```
/gatekeeper-init
```
can be initiated, and cannot advance requirements on behalf of manual personnel.
Only perform dispatch, do not act on behalf of sub-skills.
requirement.md / progress.md are maintained manually, Agent is read-only (see Section 3).
If the version number directory exists and there is no
```
.init-incomplete
```
, do not return to init (avoid overwriting manual content).
One round of
```
/gatekeeper
```
only advances the current phase (see 5.1).

gatekeeper

NPX Install

Tags

SKILL.md Content (Chinese)