---
name: knowzcode-audit
description: Read-only quality audit comparing implementation against specs. Triggers on audit requests, quality checks, security reviews, and compliance verification.
---
<!-- Generated by KnowzCode v0.7.3 -->

# /knowzcode:audit — Quality Audit

Perform a READ-ONLY audit comparing implementation against specs.

## Instructions

Read these files:
- `knowzcode/knowzcode_loop.md` — Phase 2B methodology
- `knowzcode/journal/` — in-flight WorkGroups are folders under `knowzcode/journal/*/*/` with no `arc-completion` or `workgroup-abandoned` shard

**CRITICAL: This is a READ-ONLY audit. Do NOT modify source files.**

1. Compare implementation against all VERIFY statements in specs from `knowzcode/specs/`
2. Calculate completion percentage per NodeID and overall
3. Identify gaps: missing features, incomplete criteria, untested paths
4. Check for security concerns
5. Assess risk for any gaps found

### Standalone Audit Types
- **spec**: Audit spec quality and VERIFY statement coverage
- **architecture**: Compare architecture doc against codebase
- **security**: OWASP top 10, input validation, auth flows
- **integration**: API contracts, dependency health

**STOP** — Present audit results with completion percentage and gap list.