Open Kioku Verify Change
verify_changeVerify code changes against a saved PlanReport to ensure boundary constraints, API surface stability, and dependency policy compliance. Optionally run validation commands and persist attestation records.
Instructions
Verify an actual unified diff or set of changed files against a saved PlanReport, checking boundary constraints, expected file coverage, API surface stability, and dependency policy. Optionally executes configured validation commands and persists timestamped attestation records. Use after code edits to compare an actual unified diff or changed file list against a PlanReport produced by plan_change. When run_commands=true, executes shell commands listed in the plan's validation section (test runners, linters) on the local machine. When write_attestation=true, persists timestamped pass/fail records under .ok/contracts/validation/. Do NOT use for pre-edit planning (use plan_change), contract-based verification (use verify_change_contract), or boundary-only checks (use validate_patch). Side effects are conditional on boolean flags; with all flags false the tool is read-only.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| diff | No | The unified diff (git diff format) showing the actual changes to verify. | |
| plan | No | A JSON object containing the saved PlanReport to verify against. | |
| plan_json | No | A JSON-encoded string representation of the PlanReport to verify against. | |
| since_plan | No | Git revision or range (e.g., 'HEAD~1', 'abc123..def456') used with git diff --unified=0 to derive changed files and diff input automatically. | |
| run_commands | No | Set true to execute shell validation commands (test runners, linters) defined in the plan on the local machine. Commands run synchronously and their exit codes are recorded. Defaults to false. | |
| changed_files | No | List of repository-relative paths of changed files. Used when diff is not provided. | |
| evidence_refs | No | List of evidence reference identifiers supporting the change. | |
| check_api_surface | No | Set true to detect public API surface changes (additions, removals, signature modifications) and flag them as warnings. Defaults to false. | |
| write_attestation | No | Set true together with run_commands to persist timestamped pass/fail attestation records under .ok/contracts/validation/. Has no effect when run_commands is false. Defaults to false. | |
| traceability_strict | No | Set true to reject any evidence references not present in the saved plan, enforcing full traceability. Defaults to false (lenient mode allows extra evidence). | |
| check_dependency_delta | No | Set true to detect dependency graph changes and flag forbidden dependency additions based on architecture policy. Defaults to false. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| value | No | Wrapped non-object output, used for Markdown, TOON, or scalar responses. |