Contents

[Project] 5. My Skills — Enterprise Development Workflows as Executable Claude Code Skills

One-Line Summary

A complete requirement-driven development framework that turns the full software lifecycle — requirement analysis, technical design, coding, security audit, cleanup, compliance review, verification, and archival — into 8 executable skills for Claude Code, with checkpoint recovery and formal change management.

Why This Exists

The biggest problem with AI-generated code isn’t that it “can’t write code” — it’s that it writes without discipline:

  • Starts coding before understanding requirements
  • Makes a bunch of changes but can’t tell if they’re correct
  • Interruptions mean starting over
  • Security vulnerabilities go unchecked
  • Requirements drift silently

This framework turns software development best practices into executable AI skills. Claude Code follows a structured process instead of winging it.

8-Stage Workflow

diagram
StageSkillWhat it does
1. Requirement Analysis/req-analyzeBreak loose ideas into formal specs
2. Technical Design/req-techArchitecture, module decomposition, PlantUML diagrams
3. Implementation/req-codeTDD + parallel agents + per-module commits
4. Security Review/req-security6-dimension vulnerability scanning
5. Code Cleanup/req-cleanupStructural optimization without behavior changes
6. Compliance Review/req-reviewItem-by-item requirement verification
7. Verification/req-verifyBuild + test suite + E2E
8. Archive/req-doneMark complete, generate milestone summary

A central /req orchestrator routes work through the pipeline. Each stage can also run independently.

Highlight 1: Diverge-Converge Decision Pattern

For complex design decisions, instead of one agent deciding, three agents explore different directions in parallel:

diagram

Three perspectives:

  • A (MVP): Cut to minimum viable, ship fast
  • B (Product): Think long-term, cover edge cases
  • C (Challenger): Identify the fundamental tension between A and B

Users see real tradeoffs instead of one agent’s “I think we should do this”.

Highlight 2: Checkpoint Recovery

What happens when development is interrupted (shutdown, task switch, next day)?

1
2
3
4
5
6
7
/req REQ-003

System auto-checks:
  ✅ requirement.md exists → skip requirement analysis
  ✅ technical.md exists → skip technical design  
  ⚠️ src/ partially exists → resume coding, skip completed modules
  ❌ security review not done → continue from here

No starting over. Partial progress is preserved.

Highlight 3: Formal Change Management

Documents cannot be edited directly. Changes go through a formal process:

diagram
  • Declare affected scope before editing
  • System auto-diffs to catch undeclared modifications (mismod detection)
  • Changelog grows monotonically — each version adds a row, old rows never change

Most teams lack this rigor. If you’ve managed requirement changes on large projects, you know why it matters.

Highlight 4: TDD is Built-In, Not Optional

The coding stage workflow:

1
2
3
4
1. Generate test cases from requirement acceptance criteria (tests first)
2. Implement code module by module (make tests pass)
3. Commit each module separately
4. All tests pass → proceed to security review

Tests aren’t “something you add after coding”. They’re the precondition for coding.

Highlight 5: Security Review is a Formal Stage

Not a code review comment. Not a linting tool. A dedicated stage scanning 6 dimensions:

DimensionWhat’s checked
InjectionSQL, XSS, command injection
Auth & AuthZPermission checks, session management
Data ProtectionEncryption, PII handling
DependenciesKnown CVEs, supply chain risks
ConfigurationHardcoded secrets, debug endpoints
Logging & AuditSensitive data leaking to logs

Critical/High findings are fixed immediately. Medium/Low are presented to the user. Results documented and committed.

Orchestration Architecture

diagram

Key design: The orchestrator owns all routing logic. Sub-skills are stateless executors — read context, do work, write results, return. This makes the system predictable and auditable.

Project Structure

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
skills/
├── _shared/                # Shared standards (state machine, recovery, commits)
├── req/                    # Orchestrator — 8-stage workflow
├── req-analyze/            # Stage 1: Requirement analysis (diverge-converge)
├── req-tech/               # Stage 2: Technical design
├── req-code/               # Stage 3: Coding (TDD + parallel agents)
│   ├── python.md           # Python coding conventions
│   └── java.md             # Java coding conventions
├── req-security/           # Stage 4: Security review (6 dimensions)
├── req-cleanup/            # Stage 5: Code cleanup
├── req-review/             # Stage 6: Compliance review
├── req-verify/             # Stage 7: Build + test
├── req-done/               # Stage 8: Archive
├── req-amend/              # Formal change management
├── req-archive/            # Batch archive + milestone summaries
├── task/                   # Lightweight pipeline (no formal docs)
├── write-doc/              # Structured document authoring
├── create-skill/           # Guide for creating new skills
└── puml2svg/               # PlantUML to SVG converter

One-Paragraph Summary

An 8-stage development workflow turned into executable Claude Code skills, coordinated by a central orchestrator. Complex decisions use a diverge-converge pattern (three agents explore MVP, completionist, and challenger perspectives in parallel). Document changes go through formal change management with automatic out-of-scope modification detection. Interruptions are handled by checkpoint recovery that detects partial progress and resumes without redoing work. Tests are written before code, not after. Security is a formal stage, not a comment. The result: AI writes code with discipline instead of winging it.