Skip to content
Back to skills

Senmu Build Delivery

ASecurity

Plan or perform authorized releases, rollback, repository changes or non-routine Git work. Routine edits and commits covered by project rules need no reload.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 2, 2026
developmenttestinggitsecurity

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 28, 2026

npx -y skills add SenMuShare/senmu-buildos --skill senmu-build-delivery --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Senmu Build Delivery?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Senmu Build Delivery
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/senmushare-senmu-build-delivery/badge)](https://www.skillsdirectory.com/skills/senmushare-senmu-build-delivery)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: senmu-build-delivery
description: "Plan or perform authorized releases, rollback, repository changes or non-routine Git work. Routine edits and commits covered by project rules need no reload."
---

# Delivery Management

Match authorized Git/release actions to production and rollback facts. Routine commits do not activate.

## Route by Outcome

- Batches, worktrees, merges, hotfixes: [Code/Merges](references/code-management-and-integration.md).
- Cross-session or parallel work: [Change Units](references/multi-agent-change-units-and-version-line-closeout.md).
- Resumable review coverage: [Review Execution](../senmu-build-assurance/references/frozen-review-execution.md).
- Topology, projections, release units: [Repositories](references/repository-boundaries-and-release-units.md).
- Work/version logs, handoffs: [Logs](references/collaboration-and-version-logs.md).
- Versions, tags, artifacts: [Artifacts](references/version-artifacts-and-release.md).
- Authority, production, rollback: [Authorization](references/release-authorization-and-production-truth.md).
- Deployment, secrets, post-release: [Security](references/deployment-testing-and-security.md). Before public exposure: [Public-service baseline](references/security/public-service-security-baseline.md).

Read-only advice never merges, tags or deploys. Release entrypoints must be executable. Assurance handles explicit audits, disputes or required independent verdicts, not routine checks.

## Core Contract

- Recover authority, lines, batch, release unit and recovery from owners/Git. Ask only about consequential ambiguity.
- Reuse `in_progress` for shared version/acceptance/release/rollback. Isolate real parallel work. Never edit an integration line or reopen sealed work. Unrelated tasks cannot chain from another task branch; inseparable dependencies may use registered sealed-parent stacks with explicit baselines and integration order under Change Units.
- Changing agents/sessions preserves the Change Unit. `manage_change_unit.py inspect` locates its registered state; resume within existing write authority.
- One item does not finish a batch. `review` freezes a commit without sealing; repair open batches in place. Seal completed scope only after checks and required review/repairs. Releases require release authority.
- Declare `main` as `integration` or `release_ready`; stack only on sealed parents.
- Keep one release source; verify identity before tags/artifacts. Reuse valid source evidence; check artifacts/environments separately.
- Distinguish candidate, build, deployment, production verification and version. Tag established facts; preserve rollback.
- No release intent means no release; “do not release yet” persists. Product owns behavior changes. New commits renew candidate conclusions through changed/affected scope, not repeated full review or renewed unchanged authority.

Handoff implementation to Engineering, scope to Product, and state defects to Workflow.

Files in this skill

  • SKILL.md3.2 KB
  • agents/openai.yaml308 B
  • assets/delivery-governance/ARTIFACT_MANIFEST.template.json782 B
  • assets/delivery-governance/BRANCHING.template.md7.8 KB
  • assets/delivery-governance/CHANGELOG.template.md88 B
  • assets/delivery-governance/CHANGELOG_RULES.template.md576 B
  • assets/delivery-governance/CHANGE_REVIEW_CONTROL.template.json662 B
  • assets/delivery-governance/CLEANUP_RELEASE_ASSETS.template.sh7.5 KB
  • assets/delivery-governance/DEPLOYMENT.template.md2.1 KB
  • assets/delivery-governance/PUBLICATION.template.md1.7 KB
  • assets/delivery-governance/RELEASE_CONTROL.template.json1.6 KB
  • assets/delivery-governance/RELEASE_RECORD.template.md2.3 KB
  • assets/delivery-governance/RELEASE_RETENTION.template.env663 B
  • assets/delivery-governance/REPOSITORY_AND_RELEASE_UNITS.template.md965 B
  • assets/delivery-governance/TEST_RELEASE_RETENTION.template.sh3.8 KB
  • assets/delivery-governance/VERSION.template6 B
  • assets/delivery-governance/VERSION_AND_RELEASE.template.md4.7 KB
  • assets/delivery-governance/WORKLOG_ENTRY.template.md1.6 KB
  • references/仓库边界与发布单元治理规范.md17.7 KB
  • references/代码管理与合并规范.md17.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.