Id Validate

The read-only infra-delivery STATIC-VALIDATION step (step 6) — statically validate an infra change BEFORE the test/plan/merge steps. A PROCEDURE skill the generic agent runs inside a CTX session: resolve the active stack profile, run the directly-allowlisted read-role `tofu validate` + `tofu fmt` verbs (the IaC is well-formed + canonically formatted) plus the active profile''s EXISTING read-only `infra_binding.policy` slot (the render + conftest/OPA evaluation), all read-only through the CTX command-policy guard, SURFACE violations, and record the validation observation as a `.foundry/id-validate-report` STEP-REPORT NOTE. Read-only/never-fix: it NEVER applies, edits the IaC, runs `tofu fmt -write`, or waves a violation through. ADVISORY craft — it does NOT gate, approve, or merge; the merge floor (the adopter''s branch protection + CI checks, see docs/merge-floor.md) is the merge authority. Static validation runs no `tofu plan` (no `plan_results`), so it records a STEP-REPORT NOTE — the bespoke `emit_infra_walk_evidence` plan recorder this note used to be contrasted against was retired and does not exist in scripts/. Names no `infra_binding.test` slot (it does not exist) and no `tofu test` (not allowlisted), and never invokes `ctx-posture` (mutation-only).

mkdir -p ~/.claude/skills/id-validate
curl -L https://claudskills.com/skills/id-validate/SKILL.md \
  -o ~/.claude/skills/id-validate/SKILL.md

@misc{id-validate-2026,
  author    = {lukasrepublic},
  title     = {Id Validate [Claude Code skill]},
  year      = {2026},
  publisher = {ClaudSkills},
  url       = {https://claudskills.com/skills/id-validate/}
}