resilience-review

Resilience Review

Repo/code changes: run /deslop before commit, push, PR, or merge. Murphy pass: find every plausible unhappy path, then block, guard, recover, observe.

Use when

Run /resilience-review for diffs touching forms, validation, submit, async/data, mutations, cache, retries, state machines, mode/union switches, config/resource choice, destructive actions, or loading/empty/error/success UI.

Skip docs/test/style/trivial pure logic only; record reason.

Workflow

1. Risk surface: user action, path, state change, side effects, deps.
2. Unhappy-path inventory: normal-user mistakes, stale state, disabled-control edge, invalid input, race, outage, recovery.
3. Probes:
   • Input: empty, null, duplicate, malformed, stale, huge, out-of-order.
   • Timing: double submit, tab race, retry, slow net, timeout, cancel.
   • System: partial outage, 500, stale cache, deleted resource, permission drift.
   • UX: unclear disabled state, lost errors, fake success, no recovery.
4. Defenses: Precondition -> Postcondition -> Fallback -> Observability.
5. Finding loop: /diagnosing-bugs feedback loop -> /tdd RED test/snapshot -> /visual-review for UI validation.

Output

## Resilience review
Risk surface:
- ...
Failure matrix:
| Scenario | Trigger | Expected behavior | Guard | Test | Observability |
Finding queue:
| Finding | Repro/diagnosing-bugs loop | RED test or snapshot | Owner | Visual review needed |
Required tests:
- ...
Polish gaps:
- ...
Verdict: PASS | NEEDS_GUARDS | BLOCKED

Rules: cite files/routes/forms/API. Docs/help text not enough when code can prevent bad state. Real gap unfixed -> PR evidence with owner/deferral.

See REFERENCE.md.