---
name: quality
description: Plan tests, review diffs, and check security and dependencies before calling software changes ready.
---

# Quality

Use for test planning, bug fixes, code review, security review, dependency changes, or release-readiness checks. Do not use as a substitute for domain-specific audits or as proof that unexecuted checks passed.

## Procedure

1. Load only the needed reference from the routing table.
2. Write acceptance criteria before implementation. For a bug, reproduce it with a failing targeted test, fix it, then run that test before broader checks.
3. Review the current diff and relevant changed paths. Use `scripts/diff_review.py` for mechanical prompts, then inspect findings yourself.
4. Report exact commands, results, and skipped checks. Static review is evidence, not a guarantee.

## Inputs and outputs

Inputs: brief, stack ADR, acceptance criteria, targeted diff, relevant manifests and tests. Outputs: test plan or observed test results, self-review notes, lightweight threat/dependency notes, and unresolved risks.

## Reference routing

Load one reference at a time.

| Need | Reference |
|---|---|
| Test pyramid, acceptance criteria, bug workflow | [test strategy](references/test-strategy.md) |
| Self-review before done | [code review](references/code-review.md) |
| Trust boundaries, secrets, auth, and dependencies | [security and dependencies](references/security-and-deps.md) |