Kandev Escalation

What the source does

• FilesystemNone observedNo reads or writes in the source
• NetworkNone observedNo outbound calls in the source
• ShellNone observedNo commands run in the source
• DependenciesPinnedNothing floats
• SecretsNone foundNo keys in source

Five audit layers

Gates applied: no behavioural pass.

description: Escalate to a human when required information, access, credentials, or a product decision blocks completion and no reasonable default is available.

.claude/agents

.claude/skills

.github/CLAUDE.md

CLAUDE.md

apps/backend/CLAUDE.md

import { test, expect } from "../../fixtures/test-base";

apps/web/generated/licenses.json

Audit 0.4.1 · source sha 786d4817799e · 18 Oct 2026Report an issue or request a re-scan

• Publisherkdlbs GitHub organizationOwner of the repository this skill is read from
• Source folderkdlbs/kandev/apps/backend/internal/office/configloader/skills/kandev-escalationThe exact folder we audited
• LicenceAGPL-3.0As the repository states it
• Commit pinned for this verdict786d4817799eA new audit runs when the source changes
• Repository statusNot archivedPushed today
• Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

Its description: Escalate to a human when required information, access, credentials, or a product decision blocks completion and no reasonable default is available.

---
name: kandev-escalation
description: Escalate to a human when required information, access, credentials, or a product decision blocks completion and no reasonable default is available.
kandev:
  system: true
  version: "0.42.0"
  default_for_roles: [worker, specialist, assistant, reviewer]
---

# Escalating to a Human

Use this pattern when you cannot proceed without human input: a design decision,
missing credentials, ambiguous requirements, or access you do not have.

## When to escalate

Escalate when ALL of the following are true:
1. You cannot make the decision yourself based on available context.
2. The decision is required to complete your task.
3. You have already checked comments and memory for prior guidance.

Do NOT escalate for routine technical choices you can make independently.

## Escalation procedure

### Step 1: Create the human task

Create a new task with a clear question as the title. Leave it unassigned
(or assign to `$KANDEV_HUMAN_USER_ID` if that variable is set in your environment).

```bash
HUMAN_TASK=$(
  $KANDEV_CLI kandev task create \
    --title "Decision needed: <your specific question here>" \
    --description "Context: <1-2 sentences of background>

Question: <the specific decision the human needs to make>

Options considered:
- Option A: <brief description>
- Option B: <brief description>

Blocked task: $KANDEV_TASK_ID" \
    2>/dev/null
)
HUMAN_TASK_ID=$(echo "$HUMAN_TASK" | jq -r '.task_id')
```

### Step 2: Cross-reference from the blocked task

```bash
$KANDEV_CLI kandev tasks message --id "$KANDEV_TASK_ID" \
  --prompt "Escalated to human task $HUMAN_TASK_ID. Waiting for decision on: <question>"
```

The Office CLI does not currently expose a secure operation for adding a blocker
relationship. The human task description links back to the blocked task, and the
comment above links the blocked task to the human task. Do not comment on the new
human task: a run may only message tasks granted by its signed runtime scope.
These references do not create a task dependency.

### Step 3: Set blocked status

```bash
$KANDEV_CLI kandev task update --status blocked
```

### Step 4: Exit

Your session ends. Because this flow does not create a blocker relationship, the
`task_blockers_resolved` wake reason will NOT occur for this manual cross-reference
flow. The human or coordinator must post the decision on the blocked task or update
it through the normal task workflow.

## On human response

Resume from the normal task comment or task update event. Parse
`$KANDEV_WAKE_PAYLOAD_JSON` first; if it is absent, read the JSON file at
`$KANDEV_WAKE_PAYLOAD_PATH`. Confirm the decision is present on the blocked task,
move it back to the appropriate active status, and continue the work.

## Rules

- Keep the question in the title specific and actionable. "Decision needed: use PostgreSQL or SQLite for the cache layer?" is good. "I need help" is not.
- Include enough context in the description that the human can decide without reading your full task history.
- One escalation per decision. Do not create multiple human tasks for the same question.
- If you need to escalate multiple independent decisions at once, create one human task per decision.
- If you can make a reasonable default choice, prefer that over escalating.

Excerpt, first 3,297 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

git clone https://github.com/kdlbs/kandev
git -C kandev checkout 786d4817799e

Works in

1. 2026-10-18
   ✕BLOCK D 69 / 100

   first audit · source 786d4817799e

Questions about Kandev Escalation

• github.com/kdlbs/kandev/tree/main/apps/backend/internal/office/c — the audited source at commit 786d4817799e and every finding aboveObserved · 18 Oct 2026

Spotted something wrong? Report a correction · Methodology