What problem does it solve? Changing CI/CD pipelines or deployment configuration without documentation or a rollback plan risks broken builds, leaked secrets, and untraceable failures. This Skill enforces a mandatory gate that records every pipeline change in .ai/DEVOPS.md before any edits happen. ## Core Features & Use Cases - Mandatory Change Documentation: Records what is changing, why, security implications (new secrets, network access, permissions), and a rollback plan in .ai/DEVOPS.md before edits. - Pipeline Order Enforcement: Enforces the canonical stage order — lint, typecheck, test, build, deploy — with deploy restricted to protected branches. - Audited Skip Mechanism: Blocks --no-verify bypasses; deliberate skips require AI_OS_CI_SKIP=1 with a recorded reason (D-072). - Use Case: Before adding a new deployment step to a GitHub Actions workflow, the gate requires you to document the new secrets it needs and how to revert it, then verify the change on a branch with ai ci run before merging. ## Quick Start Ask the agent to update the GitHub Actions deploy workflow and require the CI gate documentation in .ai/DEVOPS.md first.