What problem does it solve? Shipping changes to tools you rely on daily is risky: a broken merge can disrupt real workflows, but manually reviewing every PR for risk slows everything down. This Skill automates the full ship pipeline while pausing only when a change actually touches risk surfaces like user-facing flows, schemas, or auth code. ## Core Features & Use Cases - Full Ship Pipeline: Runs code review (Claude + codex in parallel), definition-of-done checks, PR creation, CI monitoring, and Copilot review monitoring. - Risk Surface Assessment: Evaluates the diff against five concrete risk surfaces (user-facing flows, removed features, schema/storage changes, perf-sensitive paths, external integrations) before merging. - Conditional Pause: Merges autonomously when no risk surface is touched; otherwise sends a single message with the implicated files, failure-mode assessment, suggested smoke test, and a merge/hold/split recommendation. - Use Case: You maintain a CLI tool you use every day. A dependency bump PR touches nothing risky, so it merges automatically; a PR modifying auth flow pauses with a targeted smoke-test suggestion before you approve the squash merge. ## Quick Start Use the ship-guarded skill to review, open, and merge the current branch's PR, pausing for my approval only if the diff touches user-facing flows, schemas, or other risk surfaces.