SKILLS · ARCHITECTURE · v2 · MOBILE · v2.0

opchain skills ecosystem

Checkpoint-driven pipeline · 36 skills · 6 phases · 11 tri-agent · 3 audit gates · spine ordinals · v1.7 Seams & Signals · v1.8 quality-gate rail · v1.9 assurance rail · v2.0 learning rail

Foundation · cross-cutting
PROTOCOLoc-checkpoint-protocol
JSON schema written by every skill: phase · progress · blockers · next_actions · wire 1.1: cost · eval_scores · telemetry_handle. Single source of truth — no database, no vendor lock-in.
ORCHoc-orchestrator
/oc-ops · routing · cross-project status · gate enforcement.
RAILInstrumentation rail · v1.6
oc-cost-ops + oc-telemetry-ops · NEW · gated · tap every band ↓

1DiscoverPhase 1 of 6

1oc-reverse-specSpecialist · Workflow/oc-rev-spec · /oc-rev-full

Reverse-engineer existing codebases into structured spec documents. The output feeds oc-app-architect as a Phase 2 baseline so the oc-orchestrator never starts from a cold context. Optional — greenfield projects skip this band entirely.

CPphase · codebase_scan · spec_output

2PlanPhase 2 of 6

oc-scale-opsAdvisor/oc-scale · perf · capacitychains-to ↓↑ advisoryoc-stack-forgeAdvisor/oc-stack · /oc-stack-decidechains-to ↓↑ advisory2oc-app-architectTri-agent · OrchestratorGenerator / Evaluator · QA ≥ 7/10/oc-app · /oc-discover · /oc-spec/oc-design · /oc-build · /oc-launchchains to: stack-forge · ux-engineerchains-to ↓↑ advisoryoc-migration-opsSpecialist/oc-migrate · schema · platformoc-modularize-opsSpecialist · gated ops · NEW v1.7/oc-modularize · → migration↓ spine 2 → 3 (build)

oc-app-architect anchors the spine, auto-invoking oc-stack-forge for platform decisions, taking advisory input from oc-scale-ops on capacity, and routing oc-migration-ops when a live system needs a schema, framework, or platform change. The plan checkpoint is the master record downstream skills consume. In v1.5, /oc-discover gained an “AI app?” branch that routes to the new AI phase.

CPphase · stack_decision · capacity · migration_plan
Pack fabricv1.5 · 36

oc-stack-forge owns the registry; 6 skills consume it. Source: skills/oc-stack-forge/packs/<id>/pack.yml

LANGUAGES13
buncsharpdenoelixirgojavakotlinphppythonrubyrustswifttypescript
FRAMEWORKS9
dotnet-aspnetlaravel-phpphoenixremixsolidspring-javaspring-kotlinsveltekitswiftui
MOBILE4
kotlin-androidflutterios-swiftuireact-native-expo
DEPLOY6
app-storeaws-amplifyplay-storeherokunetlifyrailway
VECTOR-DB · NEW v1.54
pgvectorpineconesupabase-vectorsturbopuffer
consumed by oc-stack-forge · oc-app-architect · oc-migration-ops · oc-api-dev · oc-deploy-ops · oc-rag-forgeView /coverage →

3AIPhase 3 of 6 · NEW

↑ “AI app?” branch off oc-app-architectoc-claude-apiSpecialist · Advisor/oc-claude-api · model routingNEW · v1.5 · gatedoc-rag-forgeTri-agent · Designer/Builder/Eval/oc-rag · vector DB · evalNEW · v1.5 · gatedoc-agent-forgeTri-agent · Planner/Builder/Eval/oc-agent · Agent SDKNEW · v1.5 · gatedoc-prompt-opsSpecialist · prompt-as-code/oc-prompt · eval · regressionNEW · v1.5 · gated↓ checkpoints → oc-app-architect → build

v1.5 adds an AI-native phase. When /oc-discover flags an AI app, oc-app-architect chains to four new skills — oc-claude-api (model routing · caching · tool use · migration), the tri-agent pair oc-rag-forge (vector DB · embeddings · hybrid search · retrieval eval) and oc-agent-forge (Agent SDK · subagents · tool budgets · agent eval), and oc-prompt-ops (prompt versioning · eval datasets · regression). All four ship gated behind skills.registry.<id>.enabled and return checkpoints to oc-app-architect; oc-rag-forge consumes the vector-db packs.

CPphase · model_routing · retrieval · agent_topology · prompt_versions

4BuildPhase 4 of 6

oc-ux-engineerTri-agent · Planner / Generator / Eval/oc-uxe · /oc-designbranches → oc-dash-forgeoc-dash-forgeSpecialist · Tufte-density UI/oc-data-forge · /dashboardparallel build track ↓PARALLEL · API + INTEGRATIONSoc-api-devTri-agent · OpenAPI / GraphQLfirst-party API surfacebranches → oc-code-auditoroc-integrations-engineerTri-agent · Planner / Builder / Tester/oc-integrate · OAuth · webhooksbranches → oc-code-auditor↑ ALL 4 RETURN CHECKPOINTSto oc-app-architect (Phase 2)oc-signal-forgeTri-agent · Designer/Builder/Eval/oc-signal · frame · verify · wire↓ spine 3 (ship)

Three tri-agent loops (oc-ux-engineer · oc-api-dev · oc-integrations-engineer) plus the dense-UI specialist (oc-dash-forge) work in parallel. oc-ux-engineer hands data-heavy screens to oc-dash-forge; oc-api-dev produces an OpenAPI/GraphQL contract that the deploy-time drift gate later enforces. All four feed checkpoints back to oc-app-architect.

CPphase · ux_specs · api_surface · integrations · dashboards

5ShipPhase 5 of 6

oc-bug-checkAudit gate · pre-committype · lint · secrets · vuln/oc-bugcheck3oc-git-opsSpecialist · Workflow/oc-git · /oc-commit · /oc-pr · /oc-pushauto-runs oc-bug-check pre-commit ↑↓ MUST PASS BEFORE PRODoc-code-auditorTri-agent · gates prodAuditor · Fixer · Verifier/oc-audit · score ≥ 7/10branches → oc-security-auditoroc-security-auditorAudit gate · posture reviewSTRIDE · OWASP · TLS · CSP/oc-security · /oc-threat-model3rd of 3 gates3 GATES PASSED → RELEASE4oc-release-opsSpecialist · Workflowplandraftbumpannounceshipactivates at release boundaries only/oc-release · changelog · semver · tickethand off5oc-deploy-opsOrchestrator · Workflow/oc-deploygates → prod → rollbackenforces all 3 audit gatesoc-fleet-opsSpecialist · gated ops · NEW v1.7/oc-fleet · ↔ deploy peer↓ spine 5 → 6 (monitor)

Three audit gates (oc-bug-check pre-commit, oc-code-auditor for code-level findings, oc-security-auditor for STRIDE/OWASP/infra) all must pass before oc-deploy-ops will run the production sequence. At release boundaries the spine threads oc-git-ops → oc-release-ops → oc-deploy-ops; oc-release-ops produces the changelog · version bump · release ticket · announcement, then hands off (it is not itself a deployer). v1.5 taught oc-code-auditor prompt-injection and tool-use safety rules for AI apps.

CPphase · audit_score · posture · branch · pr · release_tag · deploy_status

6MonitorPhase 6 of 6

6oc-monitoring-opsSpecialist · observability/oc-monitor · uptime · SLO+ oc-api-dev SLO/drift manifest

oc-deploy-ops hands off to oc-monitoring-ops once production is green. oc-monitoring-ops also receives oc-api-dev's SLO + drift manifest so contract violations alert the same way uptime errors do. Incident response runbooks and postmortems live here.

CPphase · slo_status · alert_rules · incident_log
Quality-gate railv1.8 · PR gate
COMMIT · 1 gateoc-bug-checktype · lint · secrets · vuln/oc-bugcheckPR · 2 new gates · v1.8oc-docs-forgedocs packet · README · changelog · ADR/oc-docs · pre-PR & releaseoc-repo-opsPR-readiness gate · drift · hygiene/oc-repo · blocks PR until cleanDEPLOY · 2 gatescode-auditor · security-auditortri-agent ≥7/10 · STRIDE · OWASP · CSPboth must pass → prod/oc-audit · /oc-security

v1.8 reframes every gate onto one boundary timeline. The new piece is the PR rail: oc-git-ops chains to oc-docs-forge (writes the docs packet — README, changelog, ADR, PR body) then oc-repo-ops (repo hygiene + generated-file/catalog drift), which fails closed when the repo is not ready. It is a sequence oc-git-ops follows — unlike the commit gate, no hook enforces it. The commit gate (oc-bug-check) and the two deploy gates (oc-code-auditor, oc-security-auditor) are unchanged — they also appear in the Ship band above.

CPdocs-forge + repo-ops write phase · pr_docs · readiness · drift
Assurance railv1.9 · 4 new
PLAN + BUILD · 2 new · v1.9oc-qa-opsSpecialist · test-pyramid strategy/oc-qa · coverage · contracts · loadplanwrites .opchain/qa.yaml → oc-bug-checkoc-data-opsTri-agent #9 · pipeline design + build/oc-data-ops · contracts · build · verify.opchain/data-contracts/*.yamlDEPLOY GATE · +2 rows · v1.9oc-compliance-opsStanding register · evidence bundles/oc-comply · register · evidence · gapsinert without .opchain/compliance.yamloc-security-hardeningRemediation operator · per-deploy gate/oc-harden · baseline · fix · cspverifies .opchain/hardening.yamlboth rows are conditional — still 3 audit gates

v1.9 lands four skills as one cross-cutting rail rather than four more boxes in the phase bands. oc-qa-ops decides which tests exist — split out of oc-bug-check, which still executes them at the commit gate — and writes .opchain/qa.yaml; a coverage-budget miss warns by default, and only coverage.enforce: fail makes it block. oc-data-ops is the 9th tri-agent (Designer / Builder / Contract-Verifier), invoked by oc-app-architect when discovery surfaces a data-heavy backend; the warehouse and queue choice still comes from oc-stack-forge. oc-compliance-ops keeps a standing control register and is inert until a project adds .opchain/compliance.yaml. oc-security-hardening is the execution half of a pair — oc-security-auditor assesses, this one executes. The last two each attach a conditional row to oc-deploy-ops' existing audit gate, so the ecosystem still has three gates, not five.

CPall four write phase · qa.yaml · data-contracts/*.yaml · compliance.yaml · hardening.yaml
Learning railv2.0
v2.0 · SHARED LEARNING RUNTIMEshared runtimescored outcomes · stable event IDshistory → .opchain/learning/duplicate IDs do not add resultsOutcome Scorecardshared runtime · explicit commandsrecurring weak results at N ≥ 3learning scorecard reportoc-hindsightTri-agent · governed operational memoryCurator · Lesson Gen · Retrieval Eval/oc-hindsight · approved lessons★ external reviewer signatureoc-evolveTri-agent · governed behaviour changeReflector · Rule Gen · Adversarial Eval/oc-evolve · reviewed rules · expires★ external reviewer signaturecontext query · approved advisory data

Learn from completed work. Opchain 2.0 contains 36 skills, including oc-update, Hindsight and Evolve. The shared runtime stores scored outcomes in .opchain/learning/, checks recurring weak results and returns approved lessons as advisory context. Evolve uses recorded task runs and an externally trusted reviewer signature. Your team configures provider access, reviewer keys and separate evaluator sessions. Context is delivered through explicit commands.

CPshared runtime · scored history · task evidence · external review
Appendix A · Cross-cutting

Checkpoint Protocol — sync topology

Skills use a shared checkpoint protocol to save progress. The updater preserves existing checkpoints. The oc-orchestrator both reads from and writes to each — bidirectional sync. Diagram below shows 6 representative connections; the same topology extends to all 36 skills.

CPoc-reverse-specCPoc-app-architectCPoc-git-opsoc-orchestrator/oc-ops · routing · syncreads + writes all CPsCPoc-deploy-opsCPmonitor-opsCPoc-code-auditor
{
  "skill": "oc-app-architect",
  "phase": "build",
  "progress_table": { "discover": "complete" },
  "context_primer": "2-sentence summary...",
  "blockers": ["waiting on API key"],
  "next_actions": ["/oc-git-sync"],
  "cost": { "total_usd": 1.81 },
  "eval_scores": [{ "rubric": "oc-bug-check" }],
  "telemetry_handle": { "enabled": false }
}
Appendix B · Cross-cutting

Orchestrator — routing decision flow

When a request enters /oc-ops, the oc-orchestrator reads source-skill checkpoint state, decides the next skill, and dispatches. All three states shown together (desktop version animates each in sequence).

source skillwrites CP · requests nextrequestoc-orchestratorread source CPmatch next_actions to registryenforce gates → dispatchdispatchtarget skillactivates · writes new CP

Legend

Connections · markers · skill types
N
Spine ordinal
Numbered mint pill on the 6 primary-spine skills marks handoff position. Replaces directional arrows between bands — vertical reading order is the sequence.
1 oc-reverse-spec → 2 oc-app-architect → 3 oc-git-ops → 4 oc-release-ops → 5 oc-deploy-ops → 6 oc-monitoring-ops
Chains to
A documented handoff: the calling skill's own instructions bring the next one in while it runs, so you don't invoke it separately. A convention the assistant follows — not a background trigger.
e.g. oc-app-architect → oc-stack-forge · oc-app-architect → oc-ux-engineer
Advisory
Non-blocking recommendations passed via checkpoint. The receiver can accept or override. No hard dependency.
e.g. oc-scale-ops → oc-app-architect · oc-migration-ops ↔ oc-app-architect
Audit gate
Pipeline blocks until the gate writes a passing result. Three gates in this ecosystem: oc-bug-check (pre-commit), oc-code-auditor (code-level), oc-security-auditor (posture).
score ≥ 7/10 · STRIDE clean · zero critical CVEs
CP · checkpoint indicator
Solid ember dot in each skill's top-right corner indicates the skill writes a checkpoint. The CP badge marks checkpoint participation — desktop version shows full CP badge on each rect; mobile uses the dot for legibility.
.checkpoints/<skill>.checkpoint.json · phase · progress · blockers · next_actions
ORC · oc-orchestrator indicator
Faded ember dot adjacent to the CP dot indicates the skill participates in /oc-ops routing. All 36 skills carry ORC — every skill is route-addressable by the oc-orchestrator.
/oc-ops · cross-project routing · gate enforcement · "what should I do next"
Skill types
Tri-agent
Skills running an internal Planner / Generator / Evaluator loop. The Evaluator scores output (≥ 7/10 to advance); failure triggers Generator retry until threshold or max iterations.
oc-app-architect · oc-ux-engineer · oc-api-dev · oc-integrations-engineer · oc-code-auditor · oc-rag-forge · oc-agent-forge · oc-signal-forge · oc-data-ops (v1.9)
Advisor
Non-orchestrating skills that return recommendations or analysis. No tri-agent loop. Results fed back via checkpoint; caller can override.
oc-stack-forge · oc-scale-ops
Standalone specialist
Single-purpose skills that produce a concrete artifact and hand it off. No internal loop, no orchestration of others.
oc-reverse-spec · oc-dash-forge · oc-git-ops · oc-release-ops · oc-migration-ops · oc-monitoring-ops · oc-cost-ops · oc-telemetry-ops (v1.6) · oc-qa-ops (v1.9)
Workflow / oc-orchestrator
Skills that drive structured, sequential pipelines. oc-app-architect orchestrates the build; oc-deploy-ops orchestrates the ship; oc-orchestrator routes across projects.
oc-app-architect · oc-deploy-ops · oc-orchestrator
Audit gate
Quality enforcement skills that block pipeline progression until thresholds are met. Three in this ecosystem cover three layers: pre-commit, code-level (also tri-agent — see yellow stroke on oc-code-auditor), security posture.
oc-bug-check · oc-code-auditor · oc-security-auditor
v1.9 assurance rail
Gold rail chrome marks the four skills added in v1.9. The accent is chrome only — every panel inside the rail keeps its own archetype colour (specialist mint · tri-agent gold · gate rose). Two clusters: plan/build strategy, and two conditional rows on the existing deploy gate.
oc-qa-ops · oc-data-ops · oc-compliance-ops · oc-security-hardening
v2.0 learning rail
Opchain 2.0 has 36 skills. Its shared runtime records scores, returns approved lessons and tests proposed rules. The star marks an external review requirement.
oc-hindsight · oc-evolve · Outcome Scorecard · shared runtime

Reference

Pipeline patterns at a glance

Spine Ordinals

  • Mint pills on the 6 spine skills mark the handoff sequence
  • 1 oc-reverse-spec → 2 oc-app-architect → 3 oc-git-ops → 4 oc-release-ops → 5 oc-deploy-ops → 6 oc-monitoring-ops
  • Direction is implicit from vertical reading order
  • Branch handoffs noted inline as captions:
  •   oc-ux-engineer → oc-dash-forge
  •   oc-api-dev / integ-eng → oc-code-auditor
  •   oc-code-auditor → oc-security-auditor

Tri-Agent Patterns

  • oc-app-architect: Generator / Evaluator
  • oc-ux-engineer: Planner / Generator / Evaluator
  • oc-api-dev: Designer / Builder / Conformance
  • oc-integrations-engineer: Planner / Builder / Tester
  • oc-code-auditor: Auditor / Fixer / Verifier
  • oc-rag-forge: Designer / Builder / Evaluator (v1.5)
  • oc-agent-forge: Planner / Builder / Evaluator (v1.5)
  • oc-signal-forge: Designer / Builder / Evaluator (v1.7)
  • oc-data-ops: Designer / Builder / Contract-Verifier (v1.9)
  • oc-hindsight: Curator / Lesson Gen / Retrieval Eval (v2.0)
  • oc-evolve: Reflector / Rule Gen / Adversarial Eval (v2.0)

Audit Gates (3)

  • oc-bug-check — pre-commit type/lint/secret scan
  • oc-code-auditor — code-level Auditor/Fixer/Verifier
  • oc-security-auditor — STRIDE / OWASP / posture assessment
  • All three must pass before oc-deploy-ops ships
  • v1.9 adds 2 conditional rows to the deploy gate — oc-compliance-ops evidence, oc-security-hardening manifest-verify. Still 3 gates.
  • v2.0 adds ★ human gates on promote and adopt — not audit gates. Still 3.

Checkpoint Protocol

  • JSON files at .checkpoints/<skill>.checkpoint.json
  • Keys: phase · progress_table · context_primer · blockers · next_actions
  • All 36 skills share checkpoint access (no ACL)
  • 2.0 · shared history and task evidence · checkpoint wire 1.1
  • Resume order: own → upstream → novice mode
  • Framework-agnostic — no platform lock-in

Routing Key

  • Bus pattern: 1 trunk + N branches for fan-outs/fan-ins
  • Width: spine 2px · secondary 1.8px · advisory 1.5px · gate 2px
  • Style: solid for spine handoffs · dashed for chains-to / advisory / gate
  • Bidirectional: paired arrows when the receiver also sends back (advisor pattern)
  • Mobile note: vertical reading order replaces left-right gutter routing from desktop