assess-findings

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Assess Findings

评估发现

Turn an observed finding into a supported judgment and a useful next-action recommendation. Assess the finding's basis separately from the value of a proposed response. A worthwhile optional improvement can justify a PR without being necessary; reproducibility alone establishes behavior, not a defect.
Use investigate-with-evidence for factual uncertainties that could change the judgment. Install both skills together. This workflow authorizes analysis and bounded investigation within the consuming task's permissions; repair and publication remain separate actions.
将观察到的发现转化为有依据的判断和有用的后续行动建议。评估发现成立的依据时,应与拟议响应方案的价值分开判断。一项值得实施的可选改进,即使并非必要,也可以成为提交 PR 的理由;仅能复现只能证明某种行为存在,并不能证明它属于缺陷。
对于可能改变判断的事实不确定性,请使用 investigate-with-evidence。安装时需同时安装这两个 skill。本工作流授权在调用方任务的权限范围内进行分析和有限调查;修复和发布仍属于独立操作。

1. Establish the assessment and its owner

1. 确定评估及其负责人

Keep one accountable assessment owner for a bounded set of related findings or opportunities. The coordinator may assess directly or delegate under coordination; reuse that owner and existing judgments across Just, Yak and Explore. Investigations return through the coordinator rather than recursively creating teams. Missing investigation support leaves only the dependent judgment pending.
When capturing or resuming persistent evidence, read working records. Reuse the original record, keep observations before final judgment, and preserve its user decisions. If no destination or save authority exists, establish it while continuing permitted analysis; retain unsaved evidence explicitly. Session-only assessment remains available when the consuming task requests it.
Identify the scenario, affected version and environment, inspectable evidence, expectation basis, demonstrated or proposed value, current response goal, material unknowns and source/history permissions. For an opportunity, a concrete desired outcome takes the place of a claimed behavioral failure.
Keep a concise scenario account through assessment and handoff: user task, trigger, actual behavior and impact, and the value of a response. A supported realistic scenario suffices without a named affected user; label inferred consequences and preserve uncertainty. Repository maintenance can have a concrete maintainer scenario. When shortening an explanation, retain this causal account and avoid inventing the author's experience.
A packet may initially lack some of these facts. Preserve the gaps instead of filling them with inferred certainty. Related observations share an assessment when the same response and acceptance boundary resolve them; independently valuable responses remain distinguishable.
Proceed when ownership, the question, existing evidence, and permitted checks are explicit.
对于一组范围明确且相互关联的发现或机会,指定唯一负责的评估负责人。协调者可以直接评估,也可以根据 coordination 进行委派;在 Just、Yak 和 Explore 之间复用该负责人以及既有判断。调查结果通过协调者返回,而不是递归创建团队。缺少调查支持时,只有依赖该调查的判断保持待定。
在记录或恢复持久化证据时,读取 working records。复用原始记录,将观察保留在最终判断之前,并保留其中的用户决策。如果不存在存储目标或保存权限,则在继续获准分析的同时确定它们;必须明确保留未保存的证据。当调用方任务要求时,也可以采用仅限当前会话的评估。
确定场景、受影响版本和环境、可检查证据、预期依据、已证明或拟议的价值、当前响应目标、重大未知项以及源码和历史记录权限。对于改进机会,以具体期望结果替代所声称的行为失败。
在整个评估和交接过程中保留一份简洁的场景说明:用户任务、触发条件、实际行为与影响,以及响应方案的价值。只要有受支持的现实场景即可,无需指定受影响的用户;应标明推断出的后果并保留不确定性。仓库维护也可以对应具体的维护者场景。压缩说明时,应保留这一因果说明,不得虚构作者的经历。
评估材料包起初可能缺少其中部分事实。应保留这些缺口,而不是用推断出的确定性填补。当同一响应方案和验收边界可以解决多个相关观察时,这些观察共享一次评估;各自具有独立价值的响应方案仍应保持区分。
当负责人、待回答问题、现有证据和获准检查均明确后,即可继续。

2. Respect the evidence phase

2. 遵守证据阶段

Early handoff allows feedback while usage continues. Under a Just audit, assess supplied evidence first and request discriminating public-use comparisons from usage workers. Implementation source remains closed until the coordinator ends blind usage. Once source access opens, source-supported investigation may proceed while source-discovered environments and capabilities are still being exercised. Target tracker history opens only after that additional usage finishes, or the coordinator explicitly freezes a partial audit and its independent findings. Carry these permissions through every delegated task and resumed assessment.
For standalone work, establish the consuming task's access boundaries directly. Obtain missing phase permission from the coordinator rather than assuming that assignment to Assess opens source or tracker history. Mark judgments awaiting a gate as provisional, continue permitted work, and revisit them when the gate opens.
When Yak is co-active, it owns tracker reconciliation and returns relevant records, coverage, and unresolved overlap through the coordinator. Assess consumes that evidence without invoking Yak recursively. Without Yak, perform the configured read-only tracker search once permitted, checking relevant open and closed issues and PRs and what their actual changes or discussion cover. A title, status, or empty search result alone establishes neither resolution nor novelty. Missing tracker access limits a new-PR recommendation specifically; it does not invalidate independently supported behavior or classification.
Proceed with all currently permitted decisive checks; preserve deferred checks with their reopening condition.
尽早交接可以在使用继续进行的同时获得反馈。在 Just 审计中,先评估所提供的证据,并向使用执行者请求具有区分力的公开使用对比。在协调者结束盲用评估前,实现源码保持关闭状态。源码访问开放后,可以在开展有源码依据的调查时,继续验证从源码中发现的环境和能力。只有在额外使用验证完成后,或协调者明确冻结部分审计及其独立发现后,才能访问目标跟踪器的历史记录。将这些权限传递到每项委派任务和每次恢复的评估中。
对于独立工作,直接确定调用方任务的访问边界。缺少阶段权限时,应向协调者申请,而不能假定分派给 Assess 就开放了源码或跟踪器历史。将等待门禁的判断标为暂定,继续执行获准工作,并在门禁开放后重新审视这些判断。
当 Yak 同时处于活动状态时,由它负责核对跟踪记录,并通过协调者返回相关记录、覆盖情况和未解决的重叠。Assess 使用这些证据,但不会递归调用 Yak。没有 Yak 时,在获得许可后执行配置好的只读跟踪器搜索,检查相关的已打开和已关闭 issue 与 PR,以及它们实际涉及的变更或讨论。仅凭标题、状态或空搜索结果,均不能证明问题已解决或具有新颖性。缺少跟踪器访问权限只会限制提出新 PR 的建议;它不会使有独立证据支持的行为或分类失效。
执行当前所有获准且具有决定性的检查;保留被推迟的检查及其重新启动条件。

3. Judge the finding's basis

3. 判断发现的依据

Separate what happened from why it matters. Establish the expected outcome from relevant documentation, accepted requirements, consistent product behavior, or the concrete task the interface offers. An implicit contract can be supported by the workflow and a controlled comparison; a written specification is not mandatory. Explain the basis so a reviewer can distinguish it from personal preference.
Trace the affected user path far enough to establish impact. Distinguish observed obstruction or misleading output from possible consequences. A workaround may reduce severity while leaving the original path defective. An isolated component example demonstrates that environment; verify the consumer path when the classification depends on integration. Source anomalies can explain behavior but do not supply missing user impact by themselves.
Use the smallest discriminating check for each material uncertainty. Before requesting it, state which possible results would change the judgment. Investigate root cause only as far as correctness, remedy, ownership, or scope requires. Repeatedly reproducing an established fact adds no decision evidence.
Express the supported disposition in ordinary language, optionally using these labels:
  • Confirmed defect: demonstrated behavior conflicts with a supported expected outcome under the stated conditions.
  • Improvement opportunity: a concrete user outcome supports a valuable change without an established contract violation.
  • Unresolved observation: a named missing fact prevents classification or impact judgment.
  • Excluded: evidence defeats the claimed defect or opportunity within its stated scope; record the reason.
Proceed when the classification has a traceable basis or an exact unresolved dependency. Keep evidence about behavior, cause, and impact distinct.
将实际发生的行为与其重要性分开。
根据相关文档、已接受的需求、一致的产品行为,或界面所提供的具体任务,确定期望结果。工作流和受控对比可以支持隐含契约;书面规范并非必需。解释依据,使评审者能够将其与个人偏好区分开来。
充分追踪受影响的用户路径,以确定影响。将观察到的阻碍或误导性输出与可能产生的后果区分开来。变通方案可能降低严重程度,但不会使原始路径不再存在缺陷。孤立的组件示例只能证明该环境中的情况;当分类取决于集成时,应验证使用方路径。源码异常可以解释行为,但其本身不能补足缺失的用户影响证据。
针对每个重大不确定项,使用能够区分不同解释的最小检查。提出检查请求前,先说明哪些可能结果会改变判断。仅在正确性、补救措施、负责人或范围所需时调查根本原因。反复复现已经确定的事实,不会增加决策证据。
用日常语言表述有依据的处置结论,也可以使用以下标签:
  • 已确认缺陷(Confirmed defect): 在所述条件下,已证明的行为与有依据的期望结果相冲突。
  • 改进机会(Improvement opportunity): 在没有确立契约违规的情况下,具体的用户结果能够支持一项有价值的变更。
  • 未解决的观察(Unresolved observation): 某个明确的缺失事实阻碍了分类或影响判断。
  • 已排除(Excluded): 证据在其既定范围内否定了所声称的缺陷或机会;记录原因。
当分类具有可追溯的依据,或存在明确的未解决依赖项时,即可继续。将行为、原因和影响的证据分开记录。

Evaluate an opportunity and related observations

评估改进机会及相关观察

For an idea, evaluate its concrete user situation, incremental value over the closest working alternative, plausible implementation evidence and meaningful costs. Separate observed demand from hypothesized benefit. Reuse Explore's research and prior-work results; request only decision-changing gaps. Explore owns discovery and user discussion; Assess owns the resulting judgment, not a second discovery campaign. An opportunity need not establish a defect or necessity to be worthwhile.
Compare newly accumulated observations with relevant records before choosing repair units. Distinguish one Problem Identity, independent problems, and distinct problems with possible causal, blocking or masking relationships. Record each relationship's evidence and uncertainty. A common component or suspected cause does not merge acceptance boundaries. An individual finding with sufficient evidence need not wait for a batch.
When a relationship could change scope, ownership or remedy, request the smallest check that separates the competing explanations through Investigate. Return confirmed and rejected relationships to the coordinator, revise only affected judgments, and notify affected usage or implementation owners. If one symptom disappears while another remains, retain the latter's acceptance boundary rather than declaring the whole group resolved.
对于一个想法,评估其具体的用户情境、相较于最接近的可用替代方案的增量价值、合理的实施证据和不可忽略的成本。将观察到的需求与假设的收益区分开来。复用 Explore 的研究和既有工作结果;只请求可能改变决策的缺口。Explore 负责探索发现和用户讨论;Assess 负责对由此产生的结论作判断,而不是再开展一轮探索。改进机会无需证明存在缺陷或必要性,也可具有价值。
选择修复单元前,将新积累的观察与相关记录进行比较。区分单一 Problem Identity、彼此独立的问题,以及可能存在因果、阻塞或掩盖关系的不同问题。记录每种关系的证据和不确定性。共同的组件或疑似原因不会合并验收边界。证据充分的单项发现无需等待整批处理。
当某种关系可能改变范围、负责人或补救方式时,通过 Investigate 请求能够区分竞争性解释的最小检查。将已确认和已排除的关系返回协调者,仅修订受影响的判断,并通知受影响的使用或实施负责人。如果一个症状消失而另一个仍然存在,应保留后者的验收边界,而不是宣告整组问题已解决。

4. Recommend a response

4. 建议响应方案

Fix the response goal before evaluating a remedy. Connect a proposed change to that goal, its evidence-backed benefit, the responsible consumer or repository, and meaningful costs or existing alternatives. Separate independent goals and remedies: explaining an empty view and correcting a library calculation may each have value without either requiring the other.
When a dependency boundary affects the remedy, distinguish the evidence-supported defect location from the proposed intervention location. Explain what that intervention resolves and leaves unresolved, including meaningful compatibility or delivery trade-offs. Mark uncertain attribution explicitly; an effective consumer workaround establishes its tested scope, while upstream resolution needs its own evidence.
A positive PR recommendation needs a concrete scenario and goal, a supported defect or reasoned practical improvement value, a plausible change that achieves that goal in the appropriate owner, relevant tracker reconciliation, and no outstanding factual uncertainty that could overturn the recommendation. State reasoned benefits as reasoning when they have not been directly observed. Necessity is a stronger claim than worthwhile improvement; assess it only when the decision requires it. When a finding summary or the requested decision calls for priority, assess it using the method below. Yak requests this assessment by default for confirmed findings; other callers retain their reporting scope.
Recommend the useful next action: a scoped independent PR, contribution to existing work, a specific further check, deferral with its reason, or no change under the assessed conditions. Distinguish recommending an approach from validating a patch: inspect an actual proposal before claiming its implementation correct. Missing evidence should narrow the recommendation to what is supported, not erase established facts or imply the opposite conclusion.
评估补救方式前,先确定响应目标。将拟议变更与该目标、基于证据的收益、负责的使用方或仓库,以及不可忽略的成本或现有替代方案关联起来。区分独立的目标和补救方式:解释空视图与修正库计算可能各自都有价值,且互不依赖。
当依赖边界影响补救方式时,区分有证据支持的缺陷位置与拟议干预位置。说明该干预能够解决什么、仍留下什么未解决,包括重要的兼容性或交付权衡。明确标记不确定的归因;有效的使用方变通方案只能确立其经过测试的范围,而上游解决方案需要自己的证据。
建议提交 PR 时,需要具备具体场景和目标、有证据支持的缺陷或经过论证的实际改进价值、在适当负责人处实现目标的合理变更、相关的跟踪记录核对,并且不存在可能推翻该建议的未决事实不确定性。对于尚未直接观察到的收益,应将其表述为推理。必要性比“值得实施”更强;仅当决策需要时才评估必要性。当发现摘要或所请求的决策要求给出优先级时,使用下述方法进行评估。Yak 默认会针对已确认的发现请求这项评估;其他调用方仍保留其报告范围。
推荐最有用的下一步行动:范围明确的独立 PR、对现有工作的贡献、一项具体的进一步检查、说明延期原因,或在已评估条件下不作变更。区分推荐一种方法与验证一个补丁:只有在检查实际提案后,才能声称其实现正确。缺失证据应将建议收窄至有证据支持的范围,而不能抹去已确定事实或暗示相反结论。

Assess suggested priority

评估建议优先级

Priority recommends how urgently to address a finding; severity describes its impact. Use the project's applicable priority scale when available and identify it. Otherwise use this fallback, label the result Suggested priority, and briefly state the scale once per report:
PriorityMeaning
P0Respond immediately: major harm is occurring or imminent and requires immediate containment or action.
P1Fix ahead of routine work: a critical user path is severely blocked with no acceptable alternative.
P2Schedule a fix: demonstrated impact is bounded or an acceptable workaround exists.
P3Defer if needed: the impact is minor and does not materially obstruct task completion.
Judge actual impact, trigger conditions, affected scope, urgency, and available alternatives together. A workaround does not make ongoing major harm routine. Do not infer a low priority from a documentation label or missing evidence, and do not infer P0 from an unverified security suspicion. These levels imply no fixed repair deadline.
Return the level, its scale, a short evidence-based reason, and material limits with the existing assessment. If a missing fact prevents a defensible level, return Priority undetermined, name that fact and the next check; retain the observation's classification. When the classification itself is unresolved, a follow-up's urgency is not a confirmed bug priority. Preserve immediate warnings for credible harm while further assessment is pending.
Proceed when the recommendation follows from the assessed goal and evidence, with ownership and decision-relevant limits explicit, and any requested priority has a supported level or an explicit unresolved dependency.
优先级用于说明应多快处理某个发现;严重程度则描述其影响。存在适用的项目优先级量表时,使用该量表并明确指出。若不存在,则使用以下后备量表,将结果标为 建议优先级(Suggested priority),并在每份报告中简要说明一次量表:
优先级含义
P0立即响应:正在发生或即将发生重大危害,需要立即遏制或采取行动。
P1优先于日常工作是修复:关键用户路径受到严重阻碍,且没有可接受的替代方案。
P2安排修复:已证明的影响有限,或存在可接受的变通方案。
P3如有必要可延期:影响较小,不会严重妨碍任务完成。
综合判断实际影响、触发条件、受影响范围、紧迫性以及可用替代方案。变通方案的存在并不意味着持续中的重大危害就应按日常优先级处理。不得仅因文档标签或证据缺失而推断为低优先级,也不得仅因未经证实的安全疑点而推断为 P0。这些级别不表示固定的修复期限。
返回优先级级别、所用量表、简短的证据化理由,以及与现有评估一并存在的重大限制。如果某个缺失事实使得无法得出可辩护的级别,应返回 优先级未确定(Priority undetermined),指出该事实和下一步检查;同时保留该观察的分类。当分类本身尚未解决时,后续检查的紧迫性并不等同于已确认缺陷的优先级。在进一步评估待完成期间,应保留针对可信危害的即时警告。
当建议源自已评估的目标和证据,且负责人及与决策相关的限制均已明确,并且所请求的优先级已有受支持的级别或明确的未解决依赖项时,即可继续。

5. Preserve the judgment across follow-ups

5. 在后续工作中保留判断

Preserve the assessment in the original authorized Working Record: decisive evidence, relationships, selected goal and scope, preserved behavior, acceptance conditions, unresolved user decisions and supported next action. Reuse agreed discussion or link an existing spec; 'worth doing' alone does not establish readiness to implement. The coordinator owns the save and index update under the working-record contract.
Return the scenario account, the finding's disposition, its decisive evidence and expectation basis, the response recommendation and rationale, any assessed priority and its basis, and any remaining dependency. Scale the report to the finding rather than requiring a fixed template. The coordinator reconciles the results into the consuming task's final report; it checks the evidence and unresolved conditions rather than treating worker agreement as proof.
On follow-up, retain the version, scenario, response goal, and previous reasons. Keep unresolved, evidence-backed reasons for questioning a judgment with that judgment. When updating it, explain which reasons the new evidence, corrected inference, or changed requirement addresses; revise only the judgments it affects. Retain limits that still apply and drop reasons that no longer apply. A renewed request for objections invites examination of the same proposition, not an automatic verdict reset. If an objection concerns a different goal, distinguish that question and preserve the earlier result. When accepted facts leave a value trade-off, explain the choice and who bears its cost.
Finish when permitted decisive checks and concrete counterevidence leads have been resolved and no specific remaining check could materially change the recommendation. For pending gates, missing access, queued work, or unresolved user-owned requirements, report what is established, the exact pending work, and the resumption condition. Continue unaffected work. Assessment completion does not authorize implementation or external publication.
在最初获授权的 Working Record 中保留评估:决定性证据、关系、选定目标和范围、保留的行为、验收条件、未解决的用户决策,以及有依据的后续行动。复用已经达成一致的讨论或链接现有 spec;仅有“值得实施”尚不足以确定可以进入实施阶段。协调者根据 working-record 契约负责保存和更新索引。
返回场景说明、发现的处置结论、决定性证据和预期依据、响应建议及理由、评估后的优先级及其依据,以及任何剩余依赖项。报告篇幅应与发现相适应,不要求固定模板。协调者将结果整合到调用方任务的最终报告中;协调者应检查证据和未解决条件,而不是把工作者达成一致视为证明。
在后续工作中,保留版本、场景、响应目标和先前理由。将尚未解决且有证据支持的理由与该判断一并保留,以记录对判断提出质疑的依据。更新判断时,说明新证据、修正后的推断或变更后的需求解决了哪些理由;仅修订受影响的判断。保留仍然适用的限制,并删除不再适用的理由。再次请求异议时,应重新审视同一命题,而不是自动重置结论。如果异议涉及不同目标,应区分该问题并保留先前结果。当已认可的事实仍存在价值权衡时,应解释所作选择以及由谁承担成本。
当所有获准且具有决定性的检查和具体的反证线索均已处理完毕,且没有任何特定的后续检查能够实质改变建议时,即可完成。对于待定门禁、缺少访问权限、排队中的工作或尚未解决且由用户决定的需求,应报告已经确定的内容、确切的待办工作以及恢复条件。继续处理不受影响的工作。完成评估并不授权实施或对外发布。