Final Check - Final Validation System

VETO POWER

WARNING: This skill HAS VETO POWER. If rule violated, MUST:

1. STOP and list violations
2. REQUIRE fix before approving
3. Re-validate after fixes

---

Purpose

This skill is the LAST check before task completion:

• Validates all CLAUDE.md rules
• Verifies all skills were consulted
• Confirms documentation was updated
• Ensures nothing was forgotten
• Blocks incomplete tasks

---

Mega Validation Checklist

1. CODEBASE-KNOWLEDGE

• Affected domain consulted BEFORE implementing?
• Domain file UPDATED after implementing?
• Commit hash added?
• Connections verified?

2. DOCS-TRACKER

• Changes detected via git diff?
• New documentation created (if needed)?
• Existing documentation updated?
• Changelog updated?

3. TEST-COVERAGE

• New files have test or exemption?
• New tRPC routes have unit test?
• New pages have E2E spec?
• E2E uses

  auth.helper.ts

  correctly?
• No

  .skip()

  added?
• All tests pass?

4. UI-UX-AUDIT

• Competitors researched (if UI)?
• Accessibility validated?
• Responsiveness tested?
• Skeleton created (if new component)?
• Zero horizontal overflow?

5. SECURITY-SCAN

• User ID always from session?
• Sensitive data not sent to frontend?
• Zod validation on all routes?
• OWASP Top 10 verified?
• No pending VETO?

6. QUALITY-GATE

• bun run typecheck

  passes?

• bun run lint

  passes?

• bun run test

  passes?

• bun run test:e2e

  passes?

• bun run build

  passes?

---

Checklist by Task Type

New Feature

### Before Implementation

- [ ] Consulted codebase-knowledge domain?
- [ ] Researched competitors (if UI)?

### During Implementation

- [ ] Followed code patterns?
- [ ] Created skeleton for components?
- [ ] Validated inputs with Zod?
- [ ] User ID always from session?

### After Implementation

- [ ] Created unit tests?
- [ ] Created E2E tests?
- [ ] Updated codebase-knowledge?
- [ ] Updated docs/flows (if applicable)?
- [ ] Ran full quality-gate?
- [ ] Security-scan approved?

Bug Fix

### Before

- [ ] Consulted affected domain?
- [ ] Identified root cause?

### During

- [ ] Fix is minimal and focused?
- [ ] Doesn't introduce regression?

### After

- [ ] Test covering the bug?
- [ ] Updated domain with commit?
- [ ] Quality-gate passes?

Refactor

### Before

- [ ] Consulted affected domains?
- [ ] Mapped all dependencies?

### During

- [ ] Maintained existing behavior?
- [ ] Didn't break tests?

### After

- [ ] All tests pass?
- [ ] Updated affected domains?
- [ ] Quality-gate passes?

---

Validation Flow

TASK COMPLETE? (developer thinks done)
        ↓
1. VERIFY CODEBASE-KNOWLEDGE → Consulted? Updated?
        ↓
2. VERIFY DOCS-TRACKER → Docs updated? Changelog?
        ↓
3. VERIFY TEST-COVERAGE → All files have tests? Pass?
        ↓
4. VERIFY UI-UX-AUDIT (if UI) → Research? Accessibility?
        ↓
5. VERIFY SECURITY-SCAN → No VETO? OWASP OK?
        ↓
6. VERIFY QUALITY-GATE → All checks pass?
        ↓
    ┌─────────┴─────────┐
    ↓                   ↓
VIOLATION           ALL OK
→ VETO              → APPROVED
→ LIST ISSUES       → CAN COMMIT

---

Output Format

Approved

## FINAL CHECK - APPROVED

### Task Summary

- **Type:** Feature
- **Domain:** [domain]
- **Files:** X modified

### Verifications

- [x] Codebase-Knowledge: Consulted and updated
- [x] Docs-Tracker: Changelog updated
- [x] Test-Coverage: Unit 3/3, E2E 2/2 pass
- [x] UI-UX-Audit: Competitors researched, accessible
- [x] Security-Scan: No vulnerabilities
- [x] Quality-Gate: All checks pass

**STATUS: APPROVED** - Ready to commit

Vetoed

## FINAL CHECK - VETOED

### Task Summary

- **Type:** Feature
- **Domain:** [domain]

### Violations Found

#### ❌ Codebase-Knowledge

- **Violation:** Domain NOT updated after implementation
- **Action:** Update domain file with commit hash

#### ❌ Test-Coverage

- **Violation:** New file without test
- **File:** `components/NewComponent.tsx`
- **Action:** Create E2E spec

**STATUS: VETOED** - 2 violations. Fix before commit.

### Next Steps

1. Update domain file
2. Create test for new component
3. Re-run final-check

---

VETO Rules

IMMEDIATE VETO

1. Security-scan found critical vulnerability
2. Quality-gate doesn't pass
3. Tests failing
4. Codebase-knowledge not updated

VETO BEFORE MERGE

1. Docs not updated
2. Skeleton missing (if new component)
3. Changelog not updated

WARNING (No veto)

1. Coverage below ideal (but critical tests exist)
2. Optional docs missing

---

Quick Command

# Run full validation
bun run typecheck && bun run lint && bun run test && bun run test:e2e && bun run build

# If all pass, manually verify:
# - codebase-knowledge updated?
# - docs updated?
# - skeleton created?

---

Critical Rules

1. HAS VETO POWER - Last barrier before commit
2. VERIFIES EVERYTHING - All skills, all rules
3. NO EXCUSES - Rule is rule
4. DOCUMENTS VIOLATIONS - For learning

---

Version

• v2.0.0 - Generic template