self-audit

Self-audit YOUR OWN plan before ExitPlanMode. This is an attention-gap backstop: the verify-plan checklist already exists in this blueprint (the `verify-plan` agent), but knowing a check and applying it at the right moment are different things. This skill forces the full checklist to run against the plan you just wrote, catching blind spots you missed while heads-down in planning. ## When this runs - **Automatically**: before every non-trivial `ExitPlanMode` (per the Plan-First rule in CLAUDE.md). A plan is non-trivial if it touches more than one file, changes behavior, or modifies config or a shared resource. - **On demand**: when the user says "audit yourself", "did you check everything", and similar. Skip only for genuinely trivial plans (a single-line typo fix). ## What it does 1. **Read the current plan**: the plan file named in the plan-mode system message. 2. **Run the verify-plan checklist against the plan, IN ORDER.** Do not re-derive it: spawn the `verify-plan` agent (or read `agents/verify-plan.md` and follow its checklist) so the same checks that would review someone else's plan now review yours. Report a table: Check | Status (PASS / FAIL / UNCLEAR) | Finding. 3. **Emphasis on the Consumer Audit, the highest-value and most-missed check:** - Identify every SHARED RESOURCE the plan changes: a token or credential, an env key, a file path, a DB table, an API field, or any string referenced from more than one place. - For each, grep BOTH the target repo AND...