Canonical template and refinement policy for CTOX operational system skills. Use when creating, updating, or refining the shared ops skill family so discovery, reliability, incident, change, security, recovery, automation, and insight remain compatible through one SQLite evidence kernel, open helper resources, and consistent escalation boundaries.
Use this skill when you are defining or changing a CTOX ops skill in the shared family:
discovery_graphreliability_opsincident_responsechange_lifecyclesecurity_posturerecovery_assuranceautomation_engineeringops_insightrefinementThis is not an execution skill for host work.
It is the canonical template and governance layer for the ops-skill family.
The family must stay:
Use this template before changing a family skill.
These invariants are locked unless an outer governance decision explicitly changes them.
discovery_rundiscovery_capturediscovery_entitydiscovery_relationdiscovery_evidenceskill_key, not through new parallel table families.Read references/family-invariants.md before changing shared family behavior.
Every ops skill in this family should be structured in the same layers:
SKILL.md
scripts/
references/
Read references/template-skeleton.md for the canonical section layout.
For this family, the default section policy is:
namedescriptionThese may be proposed, but not silently promoted:
Read references/refinement-escalation.md for the escalation ladder.
System-specific adaptation should not be the first reason to rewrite a family skill.
Handle system specifics in this order:
The system-specific joker layer is therefore:
Not:
refinement must apply this order:
SKILL.mdIf a lower step can solve the problem, higher steps are not allowed.
When updating or creating a family skill, always state:
This is mandatory. If the boundary is fuzzy, the skill is not ready.
Every family skill must produce a user-facing answer that is understandable to an operator.
The answer must clearly distinguish:
The answer must not begin with internal persistence details such as database writes or entity counts.
The default response order for family skills is:
If a skill starts a high-impact or multi-step task and does not finish it in the same slice, the answer must also:
prepared or blocked