Definition Of Done Builder

Definition of Done Builder

Purpose: Transform vague outcome language into measurable, verifiable DoD criteria.

Every criterion must be binary: either PROVEN or not. No "mostly done."

When to Use

Use this skill when:

• A user asks what "done" means for a feature or project
• An outcome translation has been produced and needs formal criteria
• A milestone requires explicit acceptance criteria before work begins
• A completion claim needs to be verified against agreed criteria

Do NOT use this skill for:

• Tasks that already have a written spec with explicit acceptance criteria
• Simple bug fixes with obvious verification (e.g., "fix the 500 error")

Inputs

• The outcome phrase or goal description
• (Optional) Current system state (what's already proven)
• (Optional) Scope constraints (e.g., "payments not in scope yet")

Procedure

Step 1: Categorise the goal

Map the goal to one or more of these production categories:

Step 2: Generate criteria per category

For each relevant category, write criteria as binary statements:

Format: □ [Verb] [measurable condition] — Proof: [exact artifact]

Examples (good):

• □ Production URL responds with HTTP 200 — Proof: curl -I output
• □ Test suite passes with 0 failures — Proof: pytest/vitest output
• □ No rounded-lg classes in component — Proof: grep search output

Examples (bad — rejected):

• □ The UI looks nice (not measurable)
• □ Tests are passing (no proof specified)
• □ It works (not binary)

Step 3: Assign status to each criterion

For each criterion, assign status based on current evidence:

Step 4: Identify proof artifact per UNKNOWN criterion

For every UNKNOWN item, specify:

UNKNOWN — requires: [exact command or action to verify]

Example:

UNKNOWN — requires: curl -I https://production-url.com
UNKNOWN — requires: Run pnpm test and capture full output
UNKNOWN — requires: Screenshot of production login flow

Output Format

DEFINITION OF DONE
═══════════════════════════════════════════════════
Goal: [restated goal]
Scope: [categories included]

FRONTEND
─────────
□ [criterion] — PROVEN | Proof: [artifact]
□ [criterion] — UNKNOWN | requires: [action]
□ [criterion] — MISSING | Fix: [remediation]

BACKEND
─────────
□ [criterion] — PROVEN | Proof: [artifact]
...

[CONTINUE FOR EACH RELEVANT CATEGORY]

SUMMARY
─────────
PROVEN:  [N] criteria
UNKNOWN: [N] criteria — must verify
MISSING: [N] criteria — must fix

GATE: ALL criteria must be PROVEN before completion can be claimed.
═══════════════════════════════════════════════════

Validation Gates

Before outputting the DoD:

• [ ] Every criterion is binary (pass/fail, not percentage)
• [ ] Every UNKNOWN has a specific verification action
• [ ] Every MISSING has a specific remediation
• [ ] Proof artifact is exact (not "run the tests" but "run pnpm test and capture output")

Failure Modes

Eval Examples

Good Example

Input: "The auth flow is done"

Output:

DEFINITION OF DONE
═══════════════════════════════════════════════════
Goal: Authentication flow complete
Scope: Frontend, Backend, Security

FRONTEND
─────────
□ Login page renders without console errors — UNKNOWN | requires: Browser screenshot + console log
□ Login form submits and redirects to dashboard — UNKNOWN | requires: Playwright test run
□ Logout clears JWT cookie and redirects to login — UNKNOWN | requires: Browser network tab screenshot

BACKEND
─────────
□ POST /api/auth/login returns 200 with JWT — UNKNOWN | requires: curl -X POST output
□ Invalid credentials return 401 — UNKNOWN | requires: curl with wrong password output
□ Protected routes reject requests without JWT — UNKNOWN | requires: curl without Authorization header output

SECURITY
─────────
□ JWT secret is not the default value — UNKNOWN | requires: Check JWT_SECRET_KEY env var
□ Token expiry is set to <= 60 minutes — UNKNOWN | requires: Check JWT_EXPIRE_MINUTES env var
□ Rate limiting active on /api/auth/login — UNKNOWN | requires: 10 rapid requests + response log

SUMMARY
─────────
PROVEN:  0 criteria
UNKNOWN: 9 criteria — must verify
MISSING: 0 criteria

GATE: ALL criteria must be PROVEN before auth flow can be claimed complete.
═══════════════════════════════════════════════════

Bad Example (rejected)

Input: "Is auth done?" Output: "The auth looks complete, tests are passing."

Reason rejected: No criteria listed, no proof artifacts, vague summary.