Skip to content
Back to skills

Happier Release Validation

ASecurity

Run target-owned manual deep release certification from an explicit Happier checkout without dispatching a release.

  • 1,869 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 26, 2026
developmentshellbashnodegit

Security analysis

A100/100

Pro scans all 14 files and shows the line behind each finding

Scanned September 20, 2026

npx -y skills add happier-dev/happier --skill happier-release-validation --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Happier Release Validation?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Happier Release Validation
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/happier-dev-happier-release-validation/badge)](https://www.skillsdirectory.com/skills/happier-dev-happier-release-validation)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: happier-release-validation
description: Run target-owned manual deep release certification from an explicit Happier checkout without dispatching a release.
---

# Happier Release Validation

This is the repository-owned entrypoint for the public release contract's
manual-only `deep` profile. It does not publish, promote, deploy, submit stores,
or create a release operation.

## Start from the target contract

From the explicit release checkout, inspect the target-owned profile and its
executable suite inventory:

```bash
node scripts/pipeline/run.mjs release-contract
node scripts/pipeline/run.mjs release-validate --profile deep --dry-run
```

`deep` is not part of normal release dispatch. This skill is its manual
entrypoint; the registry does not pretend that semantic compatibility or human
QA can be decided by a script.

For general release preparation or approval, first use the installed private
maintainer authority:

```bash
hmaint release bootstrap --repo <absolute checkout> --json
```

Read and follow the returned private skill for general release preparation or
approval. This repository skill remains the target-owned deep-certification
entrypoint only.

If `hmaint` is unavailable, stop and obtain the approved maintainer-tool
installation; do not substitute a copied release workflow or arbitrary shell
commands.

## Manual certification

1. Record the release source SHA and every independently versioned component
   changed by that source. Resolve supported stable/preview baselines to
   immutable tags/artifacts; a rolling tag is discovery only.
2. Read `docs/compatibility.md`, map only reachable old/new directions, and
   perform the target-owned suite commands for affected automatic-capable
   surfaces. Record unrun or unavailable proof as such.
3. Use the non-mutating `deep` profile in `tests-dispatch.yml` for complete
   in-repository source certification. Run credentialed live-provider scenarios
   separately through their explicit provider-contract entrypoint when the
   affected surface requires them. Native/store publication is release work,
   not certification, and must not be invoked from this skill.
   Keep editorial judgement, release-note wording, and subjective compatibility
   assessment human-reviewed; do not encode them as prose/style tests.
4. For every manual scenario, preserve practical evidence: source/baseline
   identity, command or observed user flow, result, and recovery/failure state.
   Use an existing release record when one exists; do not create a parallel
   ledger, lifecycle state, or certification authority.
5. Report passed, failed, skipped, and blocked checks to the maintainer. A
   manual certification is evidence for human approval, never the approval
   itself.

## Boundaries

- Use the canonical `scripts/pipeline/release-validation/validate-release.mjs`
  path through `scripts/pipeline/run.mjs`; do not copy its suite selection into
  this skill.
- Manual deep certification validates the release source and the existing loaded
  stack. It does not create or install local release archives; publication
  automation owns the outputs it publishes.
- Run only discriminating compatibility vectors or live flows for affected,
  reachable directions. Do not manufacture a component or platform matrix.
- Keep certification evidence in the existing release record or final handoff.
  Do not create per-run plan, tracking, ledger, lane, or workspace machinery.
- Do not write release notes, tags, GitHub releases, credentials, deploy
  branches, or store submissions from this skill.

Files in this skill

  • SKILL.md6.4 KB
  • assets/templates/LEDGER.md409 B
  • assets/templates/PLAN.md2.6 KB
  • assets/templates/TRACKING.md6 KB
  • assets/templates/daemon-ownership-lane.md1.7 KB
  • assets/templates/lane-template.md1.1 KB
  • references/daemon-ownership-scenarios.md3.6 KB
  • references/evidence-contract.md1.1 KB
  • references/lane-catalog.md7.5 KB
  • references/manual-qa-matrix.md9.9 KB
  • references/prompts.md3.1 KB
  • references/workflow.md13.3 KB
  • scripts/bootstrap-release-validation.mjs14.9 KB
  • scripts/bootstrap-release-validation.test.mjs9.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.