English

Execution Contract

Default to fast; bounded natural-language invocation is allowed. Complete one primary task by default. Continue an authorized end-to-end workflow within each Skill's permissions; Router remains recommendation-only. Pause for new material decisions or scope, not authorization already given. For a human-only blocker, give location, action, success signal and resume step; never request secret values or assume completion. Validate according to actual risk; security, production, migrations, releases and other high-risk work use audit. Read references/execution-modes.en.md only when mode selection is unclear.

Safe Test Implementation

Complete one behavior slice with evidence appropriate to its test mode; organize only after green.

Output mode and test_mode are independent. Never switch either silently.

Default output is fast; use standard or audit for detailed evidence, following the output contract.

Permission and command boundary

• Cleanup is allowed only for disposable artifacts created by this run in an isolated temporary directory, with ownership and resolved paths verified and no symlink escape. Preserve pre-existing files, user data and unknown paths; otherwise block cleanup. This exception does not authorize general deletion.
• Require explicit write authorization before changing tests, fixtures, snapshots, or helpers. Modify only the authorized test-side scope.
• Production code is outside this Skill. When green requires production changes, hand the smallest behavior slice to feature-implementation for settled feature delivery or safe-fix-implementation for a local repair; resume verification after the authorized production work completes. Existing end-to-end authorization need not be requested again.
• Do not perform general fixes, production refactors, dependency changes, broad cleanup, or permission expansion.
• Read the repository's command definitions and transitive scripts before execution. Block install, migration, deployment, publication, unsafe deletion, production access, credential use, service control, or any uncertain side effect.
• Record every command, working directory, exit code, concise result, and Observed, Unverified, or Blocked evidence state. Never invent a command, result, or red state.
• Do not expose private production APIs for tests, bind assertions to private implementation, or use a fragile snapshot instead of observable behavior.
• Do not install a test framework without explicit authorization.

Select One Mode

Read references/testing-contract.en.md for mode selection, evidence and public-behavior rules. Only test_first requires an observed expected failure before implementation. If ambiguity changes evidence or authorization, stop; otherwise choose the narrowest mode and state the inference.

Behavior-driven red–green–organize cycle

1. Define the single behavior to protect in project domain language and cite its requirement, gap, root cause, verified fix, or observed legacy behavior.
2. Confirm the public test boundary: the caller-visible interface, state transition, output, error, or side effect where the behavior is observable. Do not test private methods or internal call order.
3. Inspect the existing test location, framework, fixtures, helpers, setup, CI conventions, and exact focused and regression commands.
4. Run command preflight, confirm test-side write authorization, and declare test_mode, output mode, mock rationale if any, and the production-code stop boundary.
5. Add one minimum credible test that can reliably fail for the target behavior. Do not draft all future tests as a horizontal slice.
6. Establish and record the evidence required by the selected mode in the shared test contract; an executed command with an unrelated failure never proves the target behavior.
7. Implement only the smallest test-side change. If behavior requires production code, stop test-side work after the evidence required by the selected mode and hand off to the production owner selected above; production writes must be covered by user authorization.
8. Verify green by rerunning the same focused command after the authorized implementation state exists. Process no second behavior until this slice is resolved.
9. Only after all focused checks are green, organize test code without changing behavior. Remove duplication only when it improves the current test; do not refactor production code.
10. Run the smallest evidence-backed regression scope, then report commands, files, evidence states, limitations, and the next Skill.

Test quality and stop conditions

• Prefer externally observable behavior and domain-language test names.
• Do not write low-value coverage assertions. A mock requires a stated system-boundary reason; prefer real local substitutes when practical.
• In a project without tests, first identify the smallest safe seam and existing runnable toolchain. Do not install a framework or expose a private API.
• Return Blocked for missing write authorization, unsafe/unknown commands, unavailable tooling, production-only changes, or a red signal unrelated to the target behavior.
• Use not_run, unexpected_failure, flaky, or sensitivity_unverified rather than turning missing evidence into a pass.

Complete work already authorized within this Skill without asking again. In an authorized end-to-end workflow, hand other responsibilities to the appropriate Skill; this Skill's own permissions do not expand.

Output Contract

Default fast: protected behavior, selected test_mode and actual test command/result. Explain limits when production changes, failures or unverified evidence matter. standard adds observable_behavior, test_boundary, red/green or sensitivity evidence, regression results and, when applicable, production_change_required and next_recommended_skill. audit adds command preflight, permissions, mock rationale and the full command ledger. Only test_first requires an observed expected failure; never invent red, green or sensitivity. Omit empty fields.

简体中文

执行契约

默认使用 fast；允许边界明确的自然语言隐式调用。 默认完成一个主任务。用户已授权完整流程时，在各 Skill 权限内连续完成；Router 仍只推荐。新重大决策或超出授权时暂停，不重复索取已有授权。 必须由用户完成的阻塞步骤：给出操作位置、具体动作、成功标志、恢复步骤；不要求粘贴秘密值，不代替用户确认完成。 按实际风险选择验证；安全、生产、迁移、发布等高风险工作使用 audit。模式不明确时才读取 references/execution-modes.zh-CN.md。

Safe Test Implementation（安全补充测试）

每个行为切片按所选测试模式取得可信证据，绿灯后才能整理。

输出模式与 test_mode 独立，二者都不得静默切换。

输出默认 fast；需要详细证据时使用 standard 或 audit，字段以输出契约为准。

权限与命令边界

• 仅允许清理本次运行在隔离临时目录创建、归属和解析后路径均已核验且不存在符号链接越界的可丢弃产物。保留已有文件、用户数据和不明路径；无法确认时阻塞清理。本例外不授权一般删除。
• 修改测试、fixture、snapshot 或辅助代码前必须获得明确写权限，只能在已授权的测试侧范围内编辑。
• 生产代码不属于本 Skill。绿灯需要生产修改时，把最小行为切片交给 feature-implementation（已确认功能交付）或 safe-fix-implementation（局部修复）；生产修改必须由相应承接者完成，已有完整流程授权不必重复索取。
• 不做通用修复、生产重构、依赖变更、大范围清理或权限扩张。
• 执行前读取仓库命令定义及传递脚本；发现安装、迁移、部署、发布、不安全删除、生产访问、凭据、服务控制或不确定副作用时阻塞。
• 记录每条命令、工作目录、退出码、简洁结果及 Observed、Unverified 或 Blocked 证据状态，不得编造命令、结果或红灯。
• 不得只为测试暴露生产私有 API，不绑定私有实现细节，不用脆弱快照替代外部行为断言。
• 未经明确授权不安装测试框架。

选择一种模式

读取 references/testing-contract.zh-CN.md，遵守模式选择、证据和公共行为规则。只有 test_first 要求实施前实际观察预期失败。歧义会改变证据或授权时停止；否则选择最窄模式并声明推断。

行为驱动红—绿—整理循环

1. 用项目领域语言定义本次唯一受保护行为，并引用需求、测试缺口、根因、已验证修复或观察到的旧行为。
2. 确认公共测试边界：调用者可见接口、状态转换、输出、错误或副作用；不测试私有方法和内部调用顺序。
3. 检查现有测试位置、框架、fixture、辅助代码、setup、CI 约定，以及准确的定向与回归命令。
4. 完成命令预检，确认测试侧写权限，并声明 test_mode、输出模式、适用时的 Mock 理由和生产代码停止边界。
5. 新增一个能针对目标行为可靠失败的最小可信测试；不得先写完全部未来测试形成水平切片。
6. 按共享测试契约建立并记录所选模式要求的证据；执行命令但出现无关失败，不能证明目标行为。
7. 只实施最小测试侧改动。行为需要生产代码时，在取得所选模式要求的证据后停止测试侧工作，交给上文选定的生产实施承接者；生产编辑必须已有用户授权。
8. 授权实施状态存在后，重跑同一定向命令验证绿灯；当前切片未解决前不处理第二个行为。
9. 所有定向检查变绿后才整理测试代码；只消除当前测试中有价值的重复，不重构生产代码。
10. 运行有证据支持的最小回归范围，报告命令、文件、证据状态、限制和下一 Skill。

测试质量与停止条件

• 优先验证外部可观察行为，测试名称使用项目领域语言。
• 不写低价值覆盖率断言。Mock 必须说明系统边界理由；可行时优先使用真实本地替代。
• 现有项目没有测试时，先识别最小安全接缝和已有可运行工具链；不安装框架，也不暴露私有 API。
• 缺少写权限、命令不安全或未知、工具不可用、只能修改生产代码，或红灯与目标行为无关时返回 Blocked。
• 适时使用 not_run、unexpected_failure、flaky 或 sensitivity_unverified，不得把缺失证据包装成通过。

用户请求已明确授权本 Skill 范围时直接完成，不重复索取授权。完整流程需要其他职责时，仅在已有流程授权下交给对应 Skill；本 Skill 自身权限不扩大。

输出契约

默认 fast：受保护行为、选择的 test_mode 和实际测试命令/结果。只在需要生产修改或存在失败、未验证项时解释限制。 standard 增加 observable_behavior、test_boundary、红/绿或敏感性证据、回归结果，以及适用时的 production_change_required、next_recommended_skill。 audit 增加命令预检、权限、Mock 理由和完整命令账本。 只有 test_first 要求实际预期失败；不得编造 red、green 或敏感性。无需输出空字段。