jmagly/provenance-validate
plugins/codex-sdlc/skills/provenance-validate/SKILL.md
Validate provenance records and chains for completeness and consistency
$ install --global
skillsauthnpx skillsauth add jmagly/aiwg provenance-validateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 4, 2026, 7:35 AM103.8s1 file scanned
SKILL.md
- namespace:
- aiwg
- name:
- provenance-validate
- platforms:
- [all]
- description:
- Validate provenance records and chains for completeness and consistency
- category:
- provenance
Provenance Validate Command
Validate provenance records against the PROV schema and verify chain integrity.
Instructions
When invoked, validate provenance:
-
Load records
- Scan
.aiwg/research/provenance/records/for all.prov.yamlfiles - If specific path provided, validate only that record
- Scan
-
Schema validation
- Validate each record against
@$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/schemas/provenance/prov-record.yaml - Check required fields: entity.id, activity.id, agent.id
- Verify URN format compliance
- Verify timestamps are valid ISO-8601
- Validate each record against
-
Entity resolution
- For each entity URN, verify the referenced file exists
- Flag orphaned records (file deleted but provenance remains)
- Detect untracked artifacts (files in tracked directories without provenance)
-
Chain integrity
- Verify wasDerivedFrom sources exist and have their own provenance
- Check bidirectional links (forward references have matching back-references)
- Detect broken chains (missing intermediate records)
-
Completeness check
- Scan
.aiwg/directories for artifacts without provenance records - Calculate coverage percentage
- List untracked artifacts
- Scan
-
Fix mode (--fix)
- Remove orphaned provenance records
- Create stub records for untracked artifacts
- Add missing bidirectional references
-
Report
- Display validation results table
- Show pass/fail/warning counts
- List specific issues with remediation steps
Arguments
[path]- Specific record or directory to validate (default: all records)--all- Validate all records and check completeness--strict- Treat warnings as errors--fix- Auto-fix issues where possible--report [path]- Save validation report to file
References
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/agents/provenance-manager.md - Provenance Manager agent
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/schemas/provenance/prov-record.yaml - PROV record schema
- @$AIWG_ROOT/agentic/code/frameworks/sdlc-complete/rules/provenance-tracking.md - Provenance tracking rules
Related Skills
jmagly/radar-status
data-ai
VerifiedTrustedCommunity
Report which research-corpus radar sidecars are overdue for refresh. Computes staleness (days since last refresh vs the cadence window) for every radar, sorted most-overdue-first. Runs via `aiwg corpus radar-status`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-report
data-ai
VerifiedTrustedCommunity
Aggregate research-corpus radar sidecars into a corpus or per-cluster freshness report — totals, overdue count, per-cluster / per-GRADE / per-trajectory breakdowns, an overdue table, and per-radar rationale snippets. Runs via `aiwg corpus radar-report`.
140SKILL.mdUpdated May 28, 2026
jmagly/radar-init
testing
VerifiedTrustedCommunity
Scaffold radar/freshness sidecars for research-corpus REFs. Pulls title/authors from the citation sidecar and GRADE from the analysis doc, defaults the refresh cadence from GRADE and the cluster from a corpus-local map, and stamps documentation/radar/REF-XXX-radar.md. Runs via `aiwg corpus radar-init`.
140SKILL.mdUpdated May 28, 2026
jmagly/profile-temporal
data-ai
VerifiedTrustedCommunity
Compute an entity's publication trajectory — per-year paper counts, topic drift, hot-streak detection (≥3 consecutive A-grade years), and career phase. Runs via `aiwg corpus profile-temporal`.
140SKILL.mdUpdated May 28, 2026