skills/checklist-discipline/SKILL.md
Design and implement systematic checklists that reduce errors by 30-50% in complex, high-stakes domains (medicine, aviation, construction, finance). NOT for simple tasks or when comprehensive instruction is needed.
npx skillsauth add curiositech/windags-skills checklist-disciplineInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Transform individual expertise into systematic excellence by catching inevitable cognitive failures and enabling team coordination in extreme complexity.
✅ Use for:
❌ NOT for:
START: Define the complex process
│
├─> Is failure due to IGNORANCE (knowledge doesn't exist)?
│ └─> YES: Checklist cannot help → Research/develop knowledge first
│ └─> NO: Failure is INEPTITUDE (knowledge exists but misapplied) → CONTINUE
│
├─> Identify PAUSE POINTS (when to check)
│ ├─> Before critical commitment? (before anesthesia, takeoff, concrete pour)
│ ├─> Before point of no return? (before incision, before leaving OR)
│ ├─> After high-risk phase? (after landing, after patient leaves OR)
│ └─> Define 1-3 precise moments per process
│
├─> Choose FORMAT per pause point
│ ├─> Are users EXPERTS performing ROUTINE tasks?
│ │ └─> YES: DO-CONFIRM (perform from memory, then pause and verify)
│ └─> Are users NOVICES or tasks UNFAMILIAR?
│ └─> YES: READ-DO (execute each step as read, like recipe)
│
├─> Identify KILLER ITEMS (5-9 per pause point)
│ ├─> What's most dangerous if skipped?
│ ├─> What do experts reliably forget under stress?
│ ├─> What requires team coordination/shared awareness?
│ ├─> What has downstream cascading failures?
│ └─> OMIT: Steps professionals never skip, obvious items, comprehensive how-to
│
├─> Draft checklist
│ ├─> 5-9 items per pause point maximum
│ ├─> 60-90 seconds execution time maximum
│ ├─> One page, sans serif font, upper and lowercase
│ ├─> Precise, simple wording (no vagueness)
│ └─> Include forcing functions (verbal confirmations, sign-offs)
│
├─> TEST in real-world conditions
│ ├─> Use actual users, not designers
│ ├─> Observe in complex/stressful scenarios
│ ├─> Expect first draft to FAIL
│ ├─> Document: What was skipped? What took too long? What was confusing?
│ └─> ITERATE: Refine → Retest → Repeat until works consistently
│
└─> Implementation decision tree
├─> Make it TEAM CONVERSATION (not paperwork)
│ ├─> Require VERBAL confirmation
│ ├─> All team members state NAME and ROLE (activation phenomenon)
│ └─> Lowest-authority person initiates checklist
│
├─> Empower STOP authority
│ ├─> Anyone can halt process if checklist incomplete
│ └─> Create forcing function (e.g., metal tent until nurse approves)
│
└─> When to DEVIATE from checklist?
├─> Unique circumstances require professional judgment
├─> Time-critical emergency demands prioritization
└─> BUT: Deviation must be informed choice, not negligence
START: Complex building project with 16+ specialized trades
│
├─> Create construction SCHEDULE
│ ├─> Line-by-line, day-by-day required tasks
│ ├─> Color-code CRITICAL PATH (tasks that delay everything if missed)
│ └─> Submit to all subcontractors for verification
│
├─> Create SUBMITTAL SCHEDULE (communication requirements)
│ ├─> Who must communicate with whom?
│ ├─> By which date?
│ ├─> About what decisions/specifications?
│ └─> What meetings required at which decision points?
│
├─> Run CLASH DETECTION software
│ ├─> Identify specification conflicts (ductwork vs. beam placement)
│ ├─> Resolve through group discussion (not individual autonomy)
│ └─> Update specifications before construction begins
│
├─> Daily execution
│ ├─> Supervisors report completed tasks → Project executive
│ ├─> Update schedule weekly minimum
│ └─> Post new work phases visibly
│
└─> HALT construction if:
├─> Required communication checkpoint not completed
├─> Unresolved clash detected between trades
└─> Critical specification unclear or contradictory
PAUSE POINT 1: BEFORE ANESTHESIA (7 items, 60 seconds)
├─> Patient identity verified? (verbal confirmation with patient)
├─> Surgical site marked? (visual inspection)
├─> Consent signed and informed? (document verified)
├─> Pulse oximeter functioning? (signal confirmed)
├─> Medication allergies known? (team awareness)
├─> Airway risk assessed? (difficult intubation anticipated?)
└─> Blood available if needed? (type and cross-match confirmed)
PAUSE POINT 2: BEFORE INCISION (7 items, 60 seconds)
├─> TEAM INTRODUCTIONS: Each person states name and role
├─> Correct patient, site, procedure? (verbal confirmation)
├─> Prophylactic antibiotic given <60 min ago? (time-critical)
├─> Radiology images displayed? (visual reference available)
├─> Expected duration? (team temporal awareness)
├─> Anticipated blood loss? (preparation for emergency)
└─> Equipment/concerns? (surface any worries NOW)
PAUSE POINT 3: BEFORE LEAVING OR (5 items, 60 seconds)
├─> Procedure name verified? (correct documentation)
├─> Needle/sponge/instrument count correct? (nothing left inside)
├─> Specimens labeled? (with patient name, verbal confirmation)
├─> Equipment problems to address? (flag for repair)
└─> Recovery concerns? (handoff to recovery team complete)
Novice approach: "I'm the expert—I can hold all the knowledge and coordinate everything myself. Systematic coordination constrains my professional judgment."
Expert approach: "Modern complexity exceeds individual cognitive capacity. I need systematic tools to coordinate specialists and catch my inevitable memory lapses. Checklists buttress expertise, not replace it."
Timeline to expertise:
Recognition shibboleth: "Checklists handle the dumb stuff so I can focus cognitive capacity on the hard stuff" vs. "I don't need reminders—I'm experienced enough to remember everything."
Novice approach: Create comprehensive 40-item checklist spelling out every step because "thoroughness equals safety." Takes 8 minutes to complete.
Expert approach: Ruthlessly limit to 5-9 killer items per pause point. 60-90 seconds maximum. Omit what professionals reliably do. Make it "swift, usable, and resolutely modest."
Timeline to expertise:
Recognition shibboleth: "What can we remove?" vs. "What else should we add?"
Novice approach: Nurse silently checks boxes on clipboard alone, files form in chart. No verbal confirmation, no team discussion.
Expert approach: Checklist is team CONVERSATION with verbal confirmations. Lowest-authority person (nurse) initiates. Everyone speaks names. Team consensus required before proceeding.
Timeline to expertise:
Recognition shibboleth: "Did everyone hear that?" vs. silently checking boxes
Novice approach: "Great professionals improvise brilliantly under pressure. Checklists are for less skilled people. I have 'the right stuff.'"
Expert approach: "Modern heroism is calm procedure-following and effective teamwork. Sullenberger saved 155 lives through disciplined checklist use, not exceptional flying. Discipline is the fourth element of professionalism."
Timeline to expertise:
Recognition shibboleth: "Man is fallible, but maybe men are less so" vs. "I've never had a problem."
Novice approach: Complex crisis requires centralized expert directing all decisions. Frontline workers await instructions. (FEMA Hurricane Katrina model)
Expert approach: "Push power to periphery. Set clear goals, maintain communication, measure progress—but frontline makes decisions with local knowledge." (Walmart Katrina model: "Do what's right above your level.")
Timeline to expertise:
Recognition shibboleth: "What decision authority do you need?" vs. "Wait for my approval."
Novice approach: "Electronic medical records / surgical robots / AI will eliminate errors. We don't need procedural changes—just better technology."
Expert approach: "Technology cannot handle unpredictability or complex judgment. Optimizing individual components creates 'expensive junk' without systematic coordination. Technology enables human judgment but doesn't replace it."
Timeline to expertise:
Recognition shibboleth: "Anyone who understands systems will know immediately that optimizing parts is not a good route to system excellence."
Novice approach: Create perfect checklist at desk based on procedure manual. Assume first draft will work. Distribute for immediate use.
Expert approach: Test with actual users in real conditions. Expect first draft to fail. Iterate 5-10 times based on observed failures. Involve frontline professionals in design.
Timeline to expertise:
Recognition shibboleth: Spending more time testing/observing than writing.
"Too much airplane for one man to fly"
"Cognitive net"
"DO-CONFIRM vs. READ-DO"
"Killer items"
"Activation phenomenon"
"Swift, usable, and resolutely modest"
"First drafts always fail"
Asking "What can we remove?" vs. "What should we add?"
"Man is fallible, but maybe men are less so"
"That's not my problem"
tools
Building resilient distributed systems with circuit breakers, retries with full-jitter exponential backoff, retry budgets (per-request 3-attempt + per-client 10% ratio per Google SRE), deadline propagation, and the cascading-failure math (4 layers × 3 retries = 64x amplification). Grounded in Resilience4j, Microsoft Cloud Patterns, AWS Architecture Blog (Marc Brooker), and Google SRE Book.
testing
Designing HTTP cache headers that work correctly across browsers, CDNs, and shared proxies — `Cache-Control` directives per RFC 9111, `stale-while-revalidate` and `stale-if-error` per RFC 5861, the Vary header for varying responses, and surrogate keys for tag-based purging. Grounded in IETF RFCs and Cloudflare/Fastly docs.
development
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
tools
Choosing and operating an HTTP API versioning strategy that doesn't break clients — Stripe's date-based pinned versions, the Deprecation/Sunset header pair (RFC 9745 + RFC 8594), URI vs header vs media-type approaches, and the version-transformer pattern. Grounded in Stripe's published architecture and IETF RFCs.