midi2.git · FCIS_AUDIT.md

midi2.git / FCIS_AUDIT.md

revision be7b7e319a01124a32128aefb2d5f560204956ad · complete file

# FCIS Audit (RFC 0001)

## Executive Summary
Status: **COMPLIANT**

Top findings resolved:
- `AGENTS.md` is now policy-only and routes execution details to Skills.
- `PLANS.md` exists and is required for multi-step/high-risk work.
- `.codex/skills/*/SKILL.md` modules capture runbooks previously embedded in AGENTS/PLAN docs.

## Repository Inventory
- Behavioral policy: `AGENTS.md`
- Planning protocol: `PLANS.md`
- Roadmap/status: `PLAN.md`
- Skills: `.codex/skills/*/SKILL.md`
- Operational runbooks (referenced by skills): `RELEASE.md`, `MAINTENANCE.md`, `CONTRIBUTING.md`, `SECURITY.md`
- Legacy policy stubs: `legacy/AGENTS.md`, `legacy/midi2-js-AGENTS.md`
- Issue/PR templates: `.github/ISSUE_TEMPLATE/*`, `.github/PULL_REQUEST_TEMPLATE.md`
- MCP config: none

## Compliance Matrix
| Requirement ID | Requirement (short) | Status | Evidence | Fix recommendation |
| --- | --- | --- | --- | --- |
| FCIS-AGENTS-1 | AGENTS defines invariants and routing only | PASS | `AGENTS.md` lists invariants and routes to `PLANS.md` and Skills; no procedures included. | None. |
| FCIS-AGENTS-2 | AGENTS contains no step-by-step procedures or tool configs | PASS | `AGENTS.md` is declarative and points to `.codex/skills/*/SKILL.md`. | None. |
| FCIS-PLANS-1 | PLANS protocol exists and is required for multi-step/high-risk work | PASS | `PLANS.md` defines protocol; `AGENTS.md` requires it. | None. |
| FCIS-PLANS-2 | Plan content is intent/why, not runbooks | PASS | `PLANS.md` template is intent-focused; `PLAN.md` is roadmap-only. | None. |
| FCIS-SKILLS-1 | Skills exist with purpose/when/steps/output | PASS | `.codex/skills/*/SKILL.md` modules include purpose, when-to-use, steps, output contract. | None. |
| FCIS-LAYER-1 | Orthogonality across layers | PASS | AGENTS = policy, PLANS = intent, Skills = execution. | None. |
| FCIS-MCP-1 | MCP is capability-only and not required | PASS | No MCP configuration or dependency in repo. | None. |

## Orthogonality Violations
- None observed after remediation. Execution guidance is routed through Skills.

## Risks / Drift Vectors
- Operational runbooks (`RELEASE.md`, `MAINTENANCE.md`) may drift from Skills; keep Skills updated when runbooks change.
- Legacy stubs could be expanded unintentionally; keep them archival-only.