quality-engineering-business-analysis
Investigate requirements with atomic AC decomposition, actor/permission matrix, platform parity audit, truth table verification, and edge case discovery. Also enforces User Story authoring standards: story structure, scope fences, platform tags, toggle contracts, market isolation, and deferral patterns. Use when writing, reviewing, or improving User Stories, acceptance criteria, or doing impact analysis — especially for stories with multi-condition AC, feature toggles, market variants (VN/MY/SG), or undefined platform behavior.
What this skill does
# Business Analysis Standards (Deep Analysis + Story Authoring) ## **Priority: P0 (CRITICAL)** ## 1. Deep Investigation Protocol - **Atomic AC Decomposition**: Split **Acceptance Criteria (AC)** into **1-Condition** logic units (e.g., "User can X and Y" -> "User can X", "User can Y"). - **Variable Identification**: Extract all **Feature Toggles**, **Market Rules** (VN/MY/SG), and **User Roles**. - **Platform Parity**: Verify if logic applies to both **Web** and **Mobile**; Flag divergent behavior early. - **Truth Table Verification**: Map complex multi-condition logic to **Logic Truth Table**. ## 2. Dynamic Actor & Permission Mapping - Identify all **Actors** (e.g., `Customer`, `Sales Rep`, `Admin`). - Use **Actor/Permission Matrix** to map specific constraints per Actor. - [Permissions Patterns](references/analysis_patterns.md) ## 3. Edge Case & Boundary Analysis - **State Validation**: Verify behavior across all entity (e.g., `Active`, `Suspended`) and network states. - **Boundary Detection**: Analyze **currency**, **date**, and **count limits**. - **Negative Testing**: Identify flows for **Unauthorized Access**, **Invalid Input**, and **Null-safety**. ## 4. Anti-Patterns (Analysis) - **No Surface Reading**: investigate _implications_, don't restate. - **No Assumption**: Flag undefined states (e.g., Offline) as P0 blockers. - **No Loose Mapping**: Ensure AC aligns 100% with Technical Impact notes. ## 5. User Story Authoring Standards - **Story Structure**: Every story must use `As a [Actor], I want [Goal], so that [Value]`. - **AC Format**: Each AC must one `Given / When / Then` block — one condition per block. - **Platform Tag**: Prefix each AC with `[WEB]`, `[MOBILE]`, or `[BOTH]` — never mix platforms in one AC block. - **Toggle Contract**: Each feature flag AC must name flag and state: `Toggle: <FlagName> = ON/OFF`. - **Market Isolation**: Any market-specific AC must prefixed `[Market: VN]`, `[Market: MY]`, etc. - **Scope Fence**: Include explicit `## In Scope`, `## Out of Scope`, and `## Deferred` sections. Deferred items must link to Jira ticket — never write "to discuss". - **Translation AC**: Language/locale behavior separate AC, not inline note. See [User Story Template](references/user_story_template.md) for full authoring template. ## 6. Anti-Patterns (Story Authoring) - **No mixed-platform AC**: `[MOBILE ONLY]` buried inline hides parity gaps — use platform tags. - **No "to discuss"**: Replace with linked Jira ticket in `## Deferred`. - **No implicit toggle states**: Always declare both ON and OFF behavior per AC. - **No bundled AC**: "User sees X and Y and Z" → split into three separate AC blocks. ## 7. Validation Checklist Run after authoring or reviewing any User Story before marking it ready for development: - [ ] Every AC `[WEB]`, `[MOBILE]`, or `[BOTH]` platform tag - [ ] Every toggle AC declares both `= ON` and `= OFF` states explicitly - [ ] No AC block contains more than one `And` condition (split if it ) - [ ] No "to discuss" text anywhere — replaced by Jira link in `## Deferred` - [ ] Story `## In Scope`, `## Out of Scope`, and `## Deferred` sections - [ ] Story uses `As a / I want / So that` header - [ ] Market-specific ACs prefixed `[Market: VN]`, `[Market: MY]`, etc. - [ ] Translation / locale behavior its own AC or deferred with Jira link
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.