derive-quality-profile-from-epics

Aggregate epic-level constraints into an ISO 25010 quality profile and risk register.

3|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/kapilvirenahuja/garura --skill derive-quality-profile-from-epics
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: derive-quality-profile-from-epics
Source: https://github.com/kapilvirenahuja/garura/tree/main/core/components/skills/derive-quality-profile-from-epics
Command: npx skills add https://github.com/kapilvirenahuja/garura --skill derive-quality-profile-from-epics

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It aggregates constraints and experiential warnings from validated intent epics into a product-level ISO 25010 quality profile and risk register, so architecture and delivery can stay deterministic across contexts.

Core Features & Use Cases

  • ISO 25010 characteristic aggregation: Maps epic-level constraints into the nine ISO 25010 characteristics and computes measurable product targets.
  • Strict ratcheting and strictest-wins logic: Resolves conflicts by selecting the strictest target per dimension and keeps traceability to source epics.
  • Risk register from experiential warnings: Dedupe warnings, infer severity from epic frequency, and derive mitigation guidance.
  • Security profile derivation and decision surfacing: Builds a derived security profile from business rules and compliance constraints while emitting a decision-manifest for orchestration.

Quick Start

Use the derive-quality-profile-from-epics skill with a validated intent epics directory and an output path to generate the quality-profile.yaml handoff artifact for arch (214.7).

Frequently Asked Questions about derive-quality-profile-from-epics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map epic-level NFRs to an ISO 25010 quality profile?▼

To derive an ISO 25010 quality profile, this skill aggregates constraints from validated intent epics into the nine ISO 25010 characteristics, computing measurable product-level targets for deterministic delivery.

What is the best way to resolve conflicting non-functional requirements across epics?▼

The best way to resolve conflicting non-functional requirements across epics is using strict ratcheting and strictest-wins logic, which selects the strictest target per dimension while maintaining traceability back to the source epics.

How do I generate a risk register from product specification warnings?▼

You generate a risk register from product specification warnings by deduplicating experiential warnings across intent epics, inferring severity from epic frequency, and deriving mitigation guidance for the product specification.

How do I build a security profile from compliance constraints during product specification?▼

To build a security profile from compliance constraints, this skill derives it from business rules and compliance constraints found in intent epics, emitting a decision-manifest for downstream architectural orchestration.

Do I need validated intent epics to generate a product-level quality profile?▼

Yes, you need validated intent epics to generate a product-level quality profile, because the skill requires strict validation gating and only accepts epic-sourced targets to ensure deterministic delivery results.