Bounded, read-only inventory of repository structure, delivery signals, symlink/non-UTF-8 counts, and optional Git metadata.

Read-only local evidence for release readiness: inventory, documentation, Git state, and whitespace checks. Does not run tests or deploy.

Validate a plugin manifest, skill metadata, machine-readable skill contracts, and bundled command safety signatures.

Bounded, symlink-safe UTF-8 file read with binary detection, truncation flags, and secret redaction (on by default).

Bounded batch read of up to 20 files. Each file gets the same safety treatment as sdlc_read_file.

Bounded recursive directory listing with depth and entry caps. Returns a flat array of {path, type, depth} entries.

Bounded regex search across repository text files with context lines and secret redaction.

Scan text files for secret signatures (tokens, keys, assignments). Findings are always redacted.

Language breakdown by file count and bounded line counting, with primary-language detection.

Best-effort offline dependency extraction from package.json, requirements.txt, pyproject.toml, go.mod, and Cargo.toml.

Recent local commits, distinct authors, and churn hotspots. Never contacts remotes.

Heuristic 0-100 delivery-risk score with letter grade and weighted evidence factors from read-only signals.

Probe runtime, platform, executables, capabilities, and plugin preflight status. Useful for harness-agnostic setup verification.

List recorded, rollback-capable change sets created by the write engine.

Read the mutation audit log and verify its tamper-evident hash chain.

Create/overwrite/append a UTF-8 text file. Dry-run unless confirm=true; backs up existing content; appends to the audit log; rollback via the returned changeId.

Exact-string replacement with occurrence verification. Dry-run unless confirm=true; backs up and audits on apply.

Restore files from a recorded change set (or delete files it created). Dry-run unless confirm=true; the rollback itself is audited.