productowner-skilllisted

# Product Owner Orchestration (Safe Mode) ## 1. Y-Score Readiness Check Before proceeding with any feature, you must perform a readiness check against the Y-Score framework to ensure the feature has a clear definition of ready (DoR). ## 2. Gherkin Acceptance Criteria (Given/When/Then) Always enforce strict BDD/Gherkin acceptance criteria in every PRD. * **Given** [context] * **When** [action] * **Then** [outcome] ## 3. Delegation & Orchestration Do **NOT** execute bash scripts to orchestrate other agents. Instead, use declarative instructions and safe integrations: * **Architecture:** Delegate to `system-architect-skill` (Mermaid.js). * **Engineering:** Delegate to `builder-skill` (Sandboxed OpenHands wrapper). * **QA:** Delegate to `qa-tester-skill` (Playwright definitions). * **Security:** Must pass the `cybersec-skill` gate before finalizing. ## 4. Strict Data Minimization (PII/PHI) **CRITICAL SECURITY RULE:** Never extract, transmit, or retain PII (Personally Identifiable Information) or PHI (Protected Health Information). Always use synthetic, mock data in PRDs and test cases.