Skip to content
Back to skills

Deliver

ASecurity

Builder Kit build entrypoint. Starts or continues a selected Work Item through builder.build by composing the build primitives without owning their step evidence.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 16, 2026
developmentgogit

Works with

  • terminal

Security analysis

A100/100

Scanned October 16, 2026

npx -y skills add kontourai/flow-agents --skill deliver --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Deliver?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Deliver
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/kontourai-deliver/badge)](https://www.skillsdirectory.com/skills/kontourai-deliver)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "deliver"
description: "Builder Kit build entrypoint. Starts or continues a selected Work Item through builder.build by composing the build primitives without owning their step evidence."
---

# Deliver

## Role and Boundary

**Role:** Builder Kit entrypoint for standard `builder.build` delivery.

Select this entrypoint when the user asks to build or deliver a selected Work
Item without requesting test-first development. For test-first delivery, select
the `tdd-workflow` `builder.build` profile instead.

`deliver` coordinates the standard build primitives:

`pull-work` -> `design-probe` -> `plan-work` -> `execute-plan` ->
`review-work` -> `verify-work`, followed by the applicable publish and learning
activities.

It does not reproduce those primitives' detailed procedure or own **any
step-gate evidence**. The orchestrating agent executes each primitive or
delegates its execution, ensures its artifacts and evidence are produced and
recorded, and consumes its results to select the next primitive or surface a
blocker. Starting a run creates governed state; it does not launch a worker.

## Model Routing

Use `delegate-mechanical` for selection bookkeeping, `delegate-design` for
probing and planning, and `delegate-implementation` for execution, review, and
verification. Resolve each role from `.datum/config.json` under
`context/contracts/execution-contract.md`; this entrypoint does not pin models
or reasoning effort itself.

## Inputs and Provider Adapters

Use the following provider-neutral inputs:

- **Work Item adapter:** selected work, scope, acceptance context, and identity.
- **Board adapter:** availability, priority, WIP, dependencies, and selection
  state when work comes from a queue.
- **Repository adapter:** checkout, branch/worktree policy, and local checks.
- **Change adapter:** proposed change and, when applicable, review, CI, merge,
  and release state.

A provider may implement any adapter. A Work Item reference is a stable,
human-readable provider reference that the configured Work Item adapter can
resolve; GitHub issues are one example, not the contract. For a direct local
request, use an already-bound local session. Do not invent a provider record or
claim a fresh binding when the configured adapter cannot resolve the selected
reference.

## Flow Selection and Run Behavior

Before starting a run, require a completed `pull-work` artifact showing readiness,
WIP and conflict assessment, assignment/liveness preflight, post-claim ownership
confirmation, and the selected Work Item binding. A Work Item reference alone is
not sufficient preflight.

After those conditions hold, start the selected Work Item with the public
workflow interface:

```sh
flow-agents workflow start --flow builder.build --work-item <provider-ref> \
  --assignment-provider <configured-kind> \
  [--effective-state-json <provider-status.json>]
```

Use `flow-agents workflow status --session-dir <session-dir> --json` to inspect
an existing canonical run. For an interrupted active run, follow the returned
`next_action.execution_action` and its version-bound skill sources. Its
`evidence_submission` identifies the public mutations and unresolved evidence
expectations. Use the exact idempotent command returned in `sync_command` to
observe canonical status after evidence submission;
the legacy `command` field is the same synchronization command, identified by
`command_role: synchronization`. Neither command executes the skills or
produces or submits their evidence. The evidence mutation records and
synchronizes evidence; status observes the resulting canonical state. Use
`flow-agents workflow resume --session-dir <session-dir> --reason "Continue the bound Work Item"` only
for an existing paused run. Use no private workflow interface, internal writer,
or caller-selected run/step recovery command.

For provider-backed work, begin with `pull-work` and `design-probe`. For a
direct local Work Item, resume its already-bound session; if none exists, report
the missing adapter binding rather than bypassing Flow. If the request is only
a raw idea, offer `builder-shape`; do not start delivery until a Work Item is
selected.

## Orchestration Rules

- For every actionable step, activate and execute the required skill, produce
  its declared artifacts, submit evidence through the bound public interfaces,
  run `sync_command`, inspect the resulting next action, and continue. Follow
  the canonical gate-action envelope's sequence and stop condition for each
  delegated turn; returning that turn's result returns responsibility to the
  orchestrator, not to an unstarted external worker.
- A `continue` action requires further orchestration. Do not end with a promise
  to continue or wait for a notification unless a real running external task
  and its completion mechanism have been established. A blocked external
  capability requires its declared executor or a concrete blocker report.
- Delegate planning, implementation, review, and verification to their named
  primitives. Keep model routing and worker parallelism in those primitives;
  this entrypoint sets neither a worker count nor a coverage threshold.
- A failed review or verification result returns to the appropriate planning or
  execution primitive. A `NOT_VERIFIED` result remains visible as a gap.
- At each transition, compare the Work Item goal, acceptance criteria, current
  artifacts, and unresolved gaps. Route back to the earliest primitive that can
  correct a failed condition; do not wait until final verification to expose a
  known mismatch.
- Use the Repository and Change adapters to decide whether publishing,
  release-readiness, or learning applies. Do not treat a remote change or merge
  as implicit authorization.
- Preserve the exact commands and evidence emitted by primitives rather than
  replacing them with orchestration prose.

## Output Responsibility

`deliver` produces no separate artifact and no gate evidence. The active
`builder.build` run and the artifacts produced by its primitives are the output
of delivery. Report the Work Item, current run status, completed primitive
outputs, remaining gaps, and any Change-adapter state to the user.

Before closeout, perform a Final Acceptance reconciliation across the selected
Work Item, actual changed scope, criterion verdicts, critique, and Flow status.
Do not describe delivery as complete while required behavior, evidence, or
follow-up remains unresolved. Route eligible outcomes into publish/readiness and
learning through their owning Builder skills.
Canonical Flow completion reports completion of the selected process. A code
run with verified behavior remains `verified` until the actual delivery work is
observed; it does not establish registry publication, installation, or the
original user goal's downstream outcomes. List any remaining milestones and
continue authorized work from the real provider state. Do not close the overall
goal merely because this producer run reports `done`.

After learning completes, follow `learning-review`'s Repository-adapter
closeout. Keep the worktree while its change is open or needs review fixes.
Reclaim a clean linked worktree only after a fresh authenticated provider
observation confirms the exact head was merged; otherwise report the explicit
retention reason. Opening a pull request is never cleanup authority.

When an eligible code-host change will be merged through `merge-change`, which
requires the session's terminal delivery companions committed at the exact head,
use the public `flow-agents workflow publish-delivery
--session-dir <session>` command after release readiness while the assignment actor
and reviewed source snapshot still exactly match. A later source change requires
canonical review and verification again; older sessions without a verification
workspace snapshot must also rerun verification before public publishing. Do not manufacture a
prior session or invoke a private writer.

## Standalone and No-Active-Run Behavior

If no active run exists, require a selected Work Item and start
`builder.build` only after the completed preflight above; do not create a partial
or preflight-bypassing run. If an active run exists,
inspect its public status and continue only from its canonical next action. If
selection, adapter access, or authorization is missing, stop and report the
specific blocker.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.