Deploy verification review skill

Use before marking a phase DONE in {{docs.roadmap_path}} / regenerating HANDOVER when the session claims a live deploy, production (or staging-as-production) rollout, a public URL is "up" / "healthy" / "verified", or "shipped" meaning running outside the local repo (not merely code merged to a feature branch). Invoke: /deploy-verification-review.

This is the live-deploy sibling of /build-verification-review. The kit still never deploys and never HTTP-probes production — it only records and optionally gates operator-supplied deploy/health claims (Mode C / require_deploy_health).

Purpose

Catch ship/live-health dishonesty: "we shipped it" / "production is healthy" without a durable, content-addressed deploy_health record on the honesty ledger (when honesty is enabled).

When to use

Invoke when any of these claims appear in the deliverable, handover, or ROADMAP row:

• live deploy / production (or staging-as-production) rollout
• public or customer-facing URL is "up" / "healthy" / "verified"
• "shipped" meaning running outside the local repo

Non-triggers: ordinary Auto builds that only claim code + tests + local CLI behavior (kit governance phases, Track O ceremony without a live consumer probe) use /build-verification-review alone. Track O ok upgrade-regime is a regime ceremony, not a P-deploy trigger.

Model

Always thinking-high — independent reviewer; preferably not the same session that claimed the ship. Never Auto for this gate.

Inputs (read all)

1. Frozen spec — must authorize a ship/live-health claim (D1)
2. Operator-supplied health-record bytes (or CI artifact) the verifier inspected
3. {{docs.roadmap_path}} / {{docs.handover_path}} — ship wording vs Mode C
4. Ledger (when honesty.enabled) — verification_evidence with ≥1 deploy_health artifact
5. Git / Muse diff — no kit-side deploy or production HTTP probe helpers

Checklist (every item needs evidence)

Relationship to build-verification

1. /build-verification-review remains mandatory for every Auto build DONE.
2. When the build session claims deploy/health, BV V8 already requires a deploy_health artifact in the evidence entry — unchanged.
3. This skill is the sibling gate for shipped/live claims. It does not replace or waive /build-verification-review. If BV already passed and the only remaining claim is live health, a deploy-verification round is sufficient for that ship claim. Under honesty.enabled: true, a skill pass MUST append or confirm a Mode C–matching entry (ok honesty-status --deploy-health … under require exits 0).
4. When honesty.enabled: false, ledger append is skipped; D1–D8 still require claims↔record honesty in the review text.
5. Hard stops unchanged: no merge to {{vcs.git.main_branch}} on findings/blocked; uncited findings invalid; no Tier-3 automation.

Verdicts

Escalation categories: security, irreversible, real_money, gates_tier3.

Loop (bounded)

• Max rounds: 5
• Reviewer → findings → fixer (cited lines only) → re-review until pass or stop
• Do not mark ship/DONE under require until pass

Output format

## Deploy verification — <phase-id> round <N>

**Verdict:** pass | findings | blocked
**Frozen spec:** <path>
**Health record:** <path or CI artifact id>
**Mode C:** matched_entry_hash=<…> | missing | honesty disabled

### Findings
| ID | Sev | path:line | Claim vs reality |
| --- | --- | --- | --- |
| DV1 | MAJOR | docs/HANDOVER.md:12 | Claims production healthy; no deploy_health artifact |

### Honest summary (only if pass)
One paragraph: what health record was hashed, what ref was recorded, and that the kit did not probe.

CLI helpers (non-substitute)

./cli/ok honesty-status --deploy-health "<PHASE_ID>" [--frozen-spec PATH] --json
# exit 34 + missing_deploy_health when require_deploy_health: require and no Mode C match

Hard stops

• Kit never deploys; never opens HTTP(S) to a production URL as verification
• ref is opaque — never fetched, never executed
• No merge to {{vcs.git.main_branch}} on findings or blocked
• Uncited findings invalid — re-review
• Do not waive /build-verification-review for Auto DONE