A brief may carry an optional `## Threat Model` with one line per bullet, `- Inside: <text>` or `- Outside: <text>`. Present and malformed (no such bullet, another label or form, empty text, two sections) is BRIEF_THREAT_MODEL_MALFORMED; absent is today's rule. No brief_version bump (the ceremony / artifact_store precedent). Sections are found fence- and comment-aware through intent-approval's new sectionTexts, so the validator and the hash count the same sections; brief-validator exports parseThreatModel for the reader. The intent hash covers `## Threat Model` when present (two sections -> null hash, as Intent and Goal), so an edited, added or removed threat model makes the approval stale; a brief without one hashes exactly as before. The stale message and the /trekplan halt table name the section. /trekbrief offers the section in its question round when the task touches a guard, a gate, untrusted input, secrets or publishing, writes it only when given, shows it verbatim at the Phase 4h approval, and --approve reads it out. The template documents it; brief-gate-coverage pairs the new code. Part 2, step 2.1 of the E plan. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7.1 KiB
| type | brief_version | created | task | slug | project_dir | research_topics | research_status | auto_research | interview_turns | source | framing | ceremony | artifact_store | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| trekbrief | 2.2 |
|
{one-line task description} |
|
.claude/projects/{YYYY-MM-DD}-{slug}/ |
|
pending | false |
|
|
|
|
|
Task: {title}
Generated by
/trekbriefon {YYYY-MM-DD}. This brief is the contract between requirements and planning./trekplanreads it to produce the implementation plan. Every decision in the plan must trace back to content in this brief.
TL;DR
≤ 5 lines. The framing-anchored one-glance summary: what this brief asks for and how it relates to prior operator intent (framing: {preserve | refine | replace | new-direction}). Written FIRST so a reader catches a wrong premise before reading the full brief. Required at brief_version ≥ 2.2.
{≤5-line summary.}
Intent
Why are we doing this? What is the motivation, user need, or strategic context? 3-5 sentences. Load-bearing for the plan — every implementation decision must trace back to this intent.
{Intent paragraph. Answers "why bother?".}
Goal
What does success look like concretely? What state will the system be in when this is done? 1 paragraph. Specific enough to disagree with.
{Goal paragraph.}
Non-Goals
What is explicitly out of scope? Prevents plan-critic and scope-guardian from flagging gaps for things we deliberately do not do.
- {non-goal 1}
- {non-goal 2}
Constraints
Technical, time, or resource limitations. Hard boundaries the plan must respect.
- {constraint 1}
- {constraint 2}
Preferences
Preferred patterns, frameworks, libraries, or approaches. Soft constraints (the plan may deviate with justification).
- {preference 1}
- {preference 2}
Non-Functional Requirements
Performance, security, accessibility, scalability, or other quality attributes. Quantified where possible.
- {NFR 1 — e.g., "p95 response time < 200ms"}
- {NFR 2 — e.g., "Zero new npm dependencies"}
Threat Model
Optional: write it only when the task touches a guard, a gate, untrusted input,
secrets or publishing, and leave the whole section out otherwise (absent = every
security finding counts). One line per bullet, each - Inside: <text> (what the
work must defend against) or - Outside: <text> (what it deliberately does not);
any other bullet makes the brief invalid (BRIEF_THREAT_MODEL_MALFORMED).
Voyage's own security findings block inside it; one that quotes an Outside:
line's text exactly becomes a listed known issue. The intent approval covers
this section: editing it afterwards makes the approval stale.
- Inside: {e.g., "a crafted file name in a pull request reaches the shell"}
- Outside: {e.g., "a local user who can already edit the repo's hooks"}
Success Criteria
Falsifiable, command-checkable conditions that define "done". Each must be verifiable by running a specific command or observing a specific system behavior.
- {criterion — e.g., "All existing tests pass:
npm testexits 0"} - {criterion — e.g., "New endpoint answers ok:
bash tests/health.shexits 0 (the script calls the endpoint and checks the status field)"} - {criterion — e.g., "No TypeScript errors:
npm run typecheckexits 0"}
Each command is written by the voyage:writing-criteria skill: the first
backticked span on the line, one command the criteria runner accepts, a script
under tests/ for anything more, and able to go red. Otherwise the review
reports the criterion as NOT RUN.
Do NOT write vague criteria:
- "It should work" (not testable)
- "The feature is implemented" (not falsifiable)
- "Performance is acceptable" (no baseline given)
Research Plan
Explicit research topics that must be answered before /trekplan can
produce a high-confidence plan. Each topic is phrased as a research question ready
to feed into /trekresearch. Topics may be empty (N=0) for trivial tasks
where the codebase alone is sufficient context.
{If research_topics = 0, write a single line: "No external research needed — the codebase and this brief contain sufficient context for planning."}
Topic 1: {Short title}
- Why this matters: {How the plan depends on this answer. Which steps or decisions cannot be made confidently without it.}
- Research question: "{Exact question to feed to /trekresearch.
One sentence, ends in
?.}" - Suggested invocation:
/trekresearch --project {project_dir} --external "{question}" - Required for plan steps: {which kinds of steps will consume this — e.g., "migration strategy", "library selection", "threat model"}
- Confidence needed: {high | medium | low}
- Estimated cost: {quick — inline research | standard — agent swarm | deep — with contrarian}
- Scope hint: {local | external | both}
Topic 2: {Short title}
- Why this matters: ...
- Research question: "..."
- Suggested invocation:
/trekresearch --project {project_dir} ... - Required for plan steps: ...
- Confidence needed: ...
- Estimated cost: ...
- Scope hint: ...
Open Questions / Assumptions
Things still uncertain after the interview. These are carried as [ASSUMPTION]
entries into the plan and flagged to the user for review.
- {question or assumption 1}
- {question or assumption 2}
Prior Attempts
What has been tried before and what happened. Leave blank for fresh tasks. Prior attempts are load-bearing — they prevent the plan from repeating known failures.
{Prior attempts narrative, or "None — fresh task."}
Metadata
- Created: {YYYY-MM-DD}
- Interview turns: {N}
- Auto-research opted in: {yes | no}
- Source: {trekbrief interview | manual}
How to continue
Manual (default):
# Run each research topic (order does not matter):
/trekresearch --project {project_dir} --external "{Topic 1 question}"
/trekresearch --project {project_dir} --external "{Topic 2 question}"
# Then plan:
/trekplan --project {project_dir}
# Then execute:
/trekexecute --project {project_dir}
Auto (opt-in during /trekbrief): research and planning run
automatically; only execution is manual.