Agent skill · Audited from source
Recording Architecture Decisions
skill · GanyuanRan/AegisMIT licenceAudited 18 Oct 2026 · source 177240a262fe
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 177240a262fe and found no filesystem, network or shell access and no hard-coded secrets. What it does: Use when the user asks to create, write, update, amend, supersede, or evaluate an ADR, architecture decision record, durable architecture decision, decision log, or baseline sync after architecture-changing work.
Cite
Cite this page
ModelsAtlas. “Recording Architecture Decisions (GanyuanRan/Aegis)”. Retrieved 18 Oct 2026. https://modelsatlas.com/skills/ganyuanran/recording-architecture-decisions
Trust audit
Audit 0.4.1 · source read 18 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 177240a262fe · 18 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- PublisherGanyuanRan GitHub userOwner of the repository this skill is read from
- Source folderGanyuanRan/Aegis/skills/recording-architecture-decisionsThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict177240a262feA new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use when the user asks to create, write, update, amend, supersede, or evaluate an ADR, architecture decision record, durable architecture decision, decision log, or baseline sync after architecture-changing work.
---
name: recording-architecture-decisions
description: "Use when the user asks to create, write, update, amend, supersede, or evaluate an ADR, architecture decision record, durable architecture decision, decision log, or baseline sync after architecture-changing work."
---
# Recording Architecture Decisions
## Purpose
Record durable architecture decisions without losing the current-state baseline
closure. An ADR records why a decision was made; a baseline records what the
architecture is after that decision.
This skill is a lazy, task-specific workflow. It does not replace
`verification-before-completion`, does not grant completion authority, and does
not make authoritative `GateDecision` or `PolicySnapshot` outputs.
## Required Read Set
Before deciding or writing, read the smallest relevant excerpts from:
- `docs/adr/ADR-CREATION-GATE.md`
- `docs/current/AEGIS_ADR_AUTO_BACKFILL.md`
- the target project's current ADR, baseline, or authority docs that own the
affected architecture surface
For Aegis repository changes, use this repository's `docs/adr/` and
`docs/current/` authority order. For target projects with their own ADR system,
respect that project owner instead of duplicating the same decision into
`docs/aegis/adr/`.
## When To Use
Use this skill when the user asks to:
- create, write, update, amend, supersede, or evaluate an ADR
- decide whether an architecture decision record is needed
- record a durable architecture decision or decision log entry
- close baseline sync after an ADR-relevant architecture change
- verify that an ADR action did not leave the architecture baseline stale
Do not use it for simple wording edits, ordinary README cleanup, tests-only
coverage improvements, low-risk single-file changes, or bug fixes that only
restore the existing baseline.
## Decision Flow
1. Identify the decision candidate and evidence source.
2. Run the ADR creation gate:
- hard to reverse
- surprising without context
- real trade-off
3. Apply the Retro / Memory Filter:
- executed durable decisions may become ADR or baseline memory
- unexecuted ideas stay out of accepted architecture memory
- process notes may use a lighter record when they do not change current
architecture state
4. Choose exactly one ADR action: create, amend, supersede, or skip.
5. Choose the owner surface: project `docs/adr/`, `docs/aegis/adr/`, existing
ADR, or lighter record.
6. Run Baseline Sync Closure.
7. If writing files, preserve local ADR conventions and verify structure.
## Helper-Backed Write Path
When the chosen owner surface is a target project's `docs/aegis/adr/`, use the
shared workspace helper instead of ad-hoc file creation:
- `create` -> `<aegis-workspace-helper> new-adr --root <target-project-root> ...`
- `amend` -> `<aegis-workspace-helper> amend-adr --root <target-project-root> --path docs/aegis/adr/ADR-####-<slug>.md ...`
- `supersede` -> `<aegis-workspace-helper> supersede-adr --root <target-project-root> --path docs/aegis/adr/ADR-####-<slug>.md ...`
After helper-backed writeback, run:
- `<aegis-workspace-helper> check --root <target-project-root>`
The helper owns file shape, ADR numbering, supersession markers, and
`INDEX.md` coverage only. It does not decide architecture truth, whether the
ADR gate passed, or whether baseline sync is semantically sufficient.
If the ADR gate or owner-surface decision says `skip`, do not create or amend
ADR files just because the helper exists. An ADR signal in a design/plan is a
note for later completion, not an ADR file. Create/amend/supersede an ADR only
for an executed durable decision; if an existing ADR already covers the
decision surface, amend it instead of creating a sibling.
## Baseline Sync Closure
If the ADR action is create, amend, or supersede, baseline sync must be checked.
Baseline sync is required when the decision changes or confirms any of:
- canonical owner or ownership map
- public API, schema, artifact shape, or behavior contract
- dependency direction or allowed cross-module relationship
- source-of-truth owner
- host compatibility strategy or install/discovery contract
- method-pack/runtime-core boundary
- runtime-ready artifact boundary or evidence model
- retained fallback, adapter, compatibility path, duplicate owner, or retirement
schedule
- accepted architecture-scoped Implementation Drift
- release or distribution strategy that future contributors would otherwise
misread
If no baseline writeback is made, state why the existing baseline remains valid.
Never leave baseline sync implicit after create, amend, or supersede.
## Compact Output Contract
```text
Aegis Visibility:
- Why executed-decision filtering, ADR gate, owner surface, or baseline sync matters now:
Decision Candidate:
- Summary:
- Evidence source:
ADR Gate:
- Hard to reverse: yes | no | unknown
- Surprising without context: yes | no | unknown
- Real trade-off: yes | no | unknown
Retro / Memory Filter:
- Classification: executed durable decision | unexecuted idea | process note
- Memory action: record | skip | lighter record
- Reason:
ADR Action:
- create | amend | supersede | skip
- Reason:
Owner Surface:
- Target:
- Existing ADR / baseline checked:
Baseline Sync:
- Required: yes | no | unknown
- Target:
- Action: create snapshot | update baseline | cite unchanged | blocked
- Reason:
Boundary:
- Advisory method-pack signal only; not completion authority.
```
## Common Mistakes
- Writing an ADR because the topic feels important, even though the gate fails.
- Recording why in an ADR while leaving the baseline's current-state facts stale.
- Updating a baseline to match drift without first deciding whether the drift is
intentional and ADR-worthy.
- Duplicating the same decision into both project `docs/adr/` and
`docs/aegis/adr/` without an explicit mirror relationship.
- Treating an ADR or baseline sync as proof that the work is complete.Excerpt, first 5,933 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 177240a
git clone https://github.com/GanyuanRan/Aegis git -C Aegis checkout 177240a262fe
The author documents no install command, so this uses the repository directly. Our verdict covers commit 177240a262fe only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
177240a262fe
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/ganyuanran/recording-architecture-decisions/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →GanyuanRan/Aegis
Use when defining ambiguous or high-complexity new features, product behavior, UI/component design, architecture choices, contract changes, or when grilling/pressure-testing a plan or design. Routine small requests stay…
GanyuanRan/Aegis
Use when the user asks for caveman mode, fewer tokens, brief responses, compressed communication, or otherwise explicitly requests a much shorter answer.
GanyuanRan/Aegis
Use when facing 2+ independent tasks without a written plan, with no conflicting shared mutable state or sequential dependencies, where parallel delegation beats inline cost; otherwise inline. Planned tasks use…
GanyuanRan/Aegis
Use when the user asks to establish shared project language, or project work exposes a conflicting, renamed, or deprecated domain term that needs active semantic modeling. Routine small tasks stay on the fast path.
GanyuanRan/Aegis
Use when executing a written implementation plan across sessions or with review checkpoints. Small or single-slice plans stay inline. For same-session independent tasks, use subagent-driven-development instead.
GanyuanRan/Aegis
Use when verified work needs integration or cleanup of an existing task-created branch/worktree, or the user explicitly requests merge, PR, or branch lifecycle handling.
Add this badge to your README
[](https://modelsatlas.com/skills/ganyuanran/recording-architecture-decisions/)
<a href="https://modelsatlas.com/skills/ganyuanran/recording-architecture-decisions/"><img src="https://modelsatlas.com/skills/ganyuanran/recording-architecture-decisions/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Recording Architecture Decisions
What does the Recording Architecture Decisions skill do?
Is Recording Architecture Decisions safe to install?
What can Recording Architecture Decisions access on my machine?
How current is this page?
Sources
- github.com/GanyuanRan/Aegis/tree/main/skills/recording-architect — the audited source at commit 177240a262fe and every finding aboveObserved · 18 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Recording Architecture Decisions skill do?
- Is Recording Architecture Decisions safe to install?
- What can Recording Architecture Decisions access on my machine?