Skip to content
Back to skills

Delivery

ASecurity

Adaptive, resumable Git delivery across repositories and agent runtimes — probe policy, checkpoint coherent work, publish, review, integrate, and verify cleanup

  • 10 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 5, 2026
ai-agentsgit

Security analysis

A100/100

Pro scans all 8 files and shows the line behind each finding

Scanned September 21, 2026

npx -y skills add shenxingy/Clade --skill delivery --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Delivery?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Delivery
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/shenxingy-delivery/badge)](https://www.skillsdirectory.com/skills/shenxingy-delivery)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: delivery
description: Adaptive, resumable Git delivery across repositories and agent runtimes — probe policy, checkpoint coherent work, publish, review, integrate, and verify cleanup
when_to_use: "start coding branch, manage delivery lifecycle, checkpoint work, prepare/publish/update PR, choose merge strategy, finish and clean a coding task"
argument-hint: 'start|authorize|context|list|checkpoint|candidate|evidence|publish|ready|merge|reconcile|abandon|clean [options]'
user_invocable: true
---

# Delivery

Clade's provider-neutral Git delivery control plane. It adapts to the target
repository, forge, event, branch ownership, worktree, and runtime before
changing state. It preserves useful work promptly without treating a commit as
permission to push, open a PR, merge, or delete a branch.

## Invariants

- Probe before acting; `unknown` never means allowed.
- One session owns one mutable branch/worktree.
- A coherent slice ends in a commit, detached reachable ref/snapshot, patch, or
  explicit blocker—not an undocumented dirty tree.
- Checkpoint verification is focused; candidate verification is complete and
  bound to the exact head SHA.
- PR creation is idempotent, merge is an explicit integrator action, and
  cleanup is verified.
- Repository policy and explicit user authority outrank Clade defaults.
- Authority granted after START is recorded through the audited `authorize`
  transition; never edit delivery state directly.
- When an orchestrator attempt exists, START records its `--attempt-id` and
  `evidence` emits the stable secret-free delivery projection for the bundle.

The executable workflow and state schema live in `prompt.md` and
`scripts/delivery.py`. Runtime-specific mechanics live under `surfaces/`.

Files in this skill

  • SKILL.md1.7 KB
  • prompt.md13.4 KB
  • scripts/delivery.py41.5 KB
  • scripts/git_context.py19.8 KB
  • surfaces/claude-code.md815 B
  • surfaces/codex.md920 B
  • surfaces/generic.md612 B
  • surfaces/mcp.md743 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…