Workflow contract
What this starter gives you
- Scans dependency updates and unresolved package drift across configured engineering tools
- Ranks issues by risk, recurrence, and delivery impact
- Produces a prioritized dependency-risk queue for operator review
Measure the first run
Key KPI
- vulnerable items older than SLA
- triage latency
- repeat issue escape rate
Trust boundary
Security notes
- Use read-only repository or analytics scopes for the first rollout.
- Deliver only to trusted engineering channels and require human review for follow-up writes.
Start safely
Read the guide, inspect the sample, then run a narrow draft.
Verify the listed skills, use a small source window, keep output draft-only, and add human approval before any external write or outbound message.