Cross-model audit gate with structural enforcement. Edit → audit → agree → retro → commit.
Quorum defines 26 tools with schemas and descriptions present, but quality is inconsistent. Most tool descriptions are terse (20-50 chars), below the 50-200 char baseline for LLM-optimized descriptions. Parameter descriptions exist but are minimal ('directory to scan', 'file path'). No output schemas are documented, critical for agents planning downstream calls. Many tools lack actionable error guidance. Tool names are domain-specific but not consistently verb-prefixed (e.g., 'code_map' vs 'audit_scan'). Composition is reasonable (single responsibility per tool), but parameter relationships and constraints are underdocumented. No evidence of idempotency guarantees or confirmation patterns for destructive operations (audit_submit, rtm_merge, agent_comm, skill_sync, track_archive are WRITE tools with minimal safeguards).
Search and discover deferred tools by keyword
Accessibility issue scanner (JSX/TSX) - WCAG, aria, label, contrast, screen-reader
Agent communication - message, finding, submit, acknowledge
Context-aware onboarding guide (synthesizes code_map + dependency_graph + doc_coverage)
Query persistent audit history log
Pattern scanner (type-safety, hardcoded, console, anti-patterns)
Submit evidence for audit review and trigger verdict
Output schemas not documented. Agents cannot plan downstream calls or extract required fields. Critical for tool chaining.
Tool descriptions are terse (20-50 chars), below LLM-optimized baseline of 50-200 chars. Insufficient context for tool selection.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 47 | 2026-07-28+ | v2 |
Transitive impact of changed files via reverse import BFS
Naming convention enforcement (PascalCase, camelCase, blueprint design)
Symbol index (functions, classes, types) with line ranges
API compatibility and breaking change checker
Contract API drift and breaking change detection (interface mismatch)
Per-file coverage from vitest JSON
Import/export DAG, components, topological sort, cycles
Documentation coverage for exported symbols (JSDoc, readme, changelog, API docs)
FE route × API × BE endpoint → FVM table
Execute FVM rows against live server
i18n locale parity and hardcoded string checker
Infrastructure config scanner (Docker, Kubernetes, Terraform, CI/CD pipeline)
License compliance and PII scanner (SPDX, GPL, MIT, Apache, OSS)
Observability gap detector (empty catch, logging, metrics, tracing, telemetry, monitoring)
Performance anti-pattern scanner (N+1, hot-path, bundle size, memory leak)
Row-level merge of worktree RTMs with conflict detection
Parse RTM markdown → structured rows
Skill sync - adapter wrapper, protocol generation
Track archive - persist audit track history
WRITE tools (audit_submit, rtm_merge, agent_comm, skill_sync, track_archive) lack confirmation/dry-run patterns. No safeguards against accidental destructive operations.
Parameter descriptions are minimal ('directory to scan', 'file path'). No format constraints, ranges, or dependency hints documented.
No error handling guidance. Tools do not indicate what to do on failure (retry, ask user, fatal). Agents cannot self-correct.