Skip to content

Add VHEATM v16.1.1 audit orchestration skill - #19

Merged
Eilodon merged 1 commit into
mainfrom
claude/account-skill-vheatm-check-xpsva8
Jul 6, 2026
Merged

Add VHEATM v16.1.1 audit orchestration skill#19
Eilodon merged 1 commit into
mainfrom
claude/account-skill-vheatm-check-xpsva8

Conversation

@Eilodon

@Eilodon Eilodon commented Jul 6, 2026

Copy link
Copy Markdown
Owner

Summary

  • Installs the user-provided VHEATM v16.1.1 skill package (SKILL.md + SYNTHESIS_REPORT.md + 32 reference files under references/) as a project-level Claude Code skill at .claude/skills/vheatm/.
  • Purpose: make the VHEATM audit orchestration framework (ATAM + FMEA-lite + STRIDE/OWASP/MAESTRO/SAMM/NIST AI RMF specialist lenses, 22 hard gates, evidence-gated hypothesis pipeline) invocable directly (/vheatm or via the Skill tool) in future Claude Code sessions on this repo, instead of needing to be re-uploaded each time.
  • No changes to any CALM source code — this PR only adds skill documentation/instructions consumed by Claude Code itself.

Using this skill, a first audit cycle was run against CALM's own resolver/edit-safety code and produced 2 independently-judge-confirmed MANDATORY findings (a lost-update race in edit_lines_impl's hash-conflict guard, and a Rust-toolchain blind spot in the SCIP overlay's cache key) — full write-up shared with the repo owner separately; those code fixes are not part of this PR.

Test plan

  • Verified the skill loads via Claude Code's Skill tool (Launching skill: vheatm) after being placed at .claude/skills/vheatm/.
  • No source/build files touched — cargo build/cargo test surface area is unaffected by this change (docs-only addition).

Generated by Claude Code

Installs the user-provided VHEATM skill package (SKILL.md + 32 reference
files) as a project-level Claude Code skill so it can be invoked directly
in future sessions on this repo for structure/algorithm audits.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J4gAKyc5VWRDiWgAVuBqp6
@Eilodon
Eilodon marked this pull request as ready for review July 6, 2026 06:15
@Eilodon
Eilodon merged commit ef1781d into main Jul 6, 2026
3 checks passed
@Eilodon
Eilodon deleted the claude/account-skill-vheatm-check-xpsva8 branch July 6, 2026 06:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants