CtrlK
BlogDocsLog inGet started
Tessl Logo
PluginPublic

service-factory/gds-assessment-plugin

Granular 4-phase, 4-role GDS Service Standard assurance skills, panel orchestrator, and synthesis engine.

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Overview
Quality
Evals
Security
Files

coverage.mdskills/gds-assessment-how-to/evidence-kit/

Coverage

Fill the folder for the phase you are in. Each folder contains only the files that phase should hold.

Discovery

Decide the problem, the users, and whether to proceed, join another service, or stop. Do not add prototypes, a target architecture, an accessibility audit, performance figures, or a runbook.

FilePoints
00-service-context.md2
research/cohort-map.md1
research/session.md1, 2
design/as-is-journey.md2
design/channels.md3
decisions/hypotheses.md7
decisions/decision-log.md7
team/team.md6
technology/current-systems.md9, 11
technology/constraints.md9, 11
privacy/data-and-privacy.md9
platforms/platforms-to-test.md13

Alpha

Test the risky questions and discard some options. Spikes and prototypes stay disposable. Do not add a signed-off beta interface, production hosting, an audit, or published performance.

FilePoints
00-service-context.md2
research/cohort-map.md1
research/session.md1, 2
design/channels.md3
design/prototypes.md2, 4
decisions/hypotheses.md7
decisions/decision-log.md7
team/team.md6
technology/spikes.md8, 11
technology/buy-versus-build.md11, 13
technology/risk-register.md8, 9, 11
privacy/data-and-privacy.md9
platforms/commitments.md13

Point 5 is not a fail at Alpha. Record the assisted-digital sketch in design/prototypes.md. Do not commission a WCAG audit.

Beta

The private beta is the evidence. The panel scores all 14 points. Assistive-technology sessions and an independent audit are both required.

FilePoints
00-service-context.md2
research/cohort-map.md1
research/session.md1, 2, 5
design/journey.md2
design/channels.md3, 5
decisions/hypotheses.md7
decisions/decision-log.md7
team/team.md6
technology/architecture-decisions.md11
technology/buy-versus-build.md11, 13
technology/risk-register.md8, 9, 11
privacy/data-and-privacy.md9
accessibility/accessibility.md5
performance/performance.md10
operations/operations.md8, 14
platforms/common-platforms.md13
platforms/open-source.md12

A disaster-recovery drill can be planned. The result is a Live requirement.

Live

Show that the service is being run and changed. Do not resubmit the beta pack. Update 00-what-changed.md when the purpose, journey, stack, or contract has changed. Points 2, 11, 12, and 13 stay on the previous evidence unless that file says they changed.

FilePoints
00-what-changed.md2, 11, 12, 13 when something material changed
research/cohort-map.md1
research/session.md1
design/channels.md3, 4, 5
decisions/hypotheses.md7
decisions/decision-log.md7
team/team.md6
technology/risk-register.md8, 9
privacy/data-and-privacy.md9
accessibility/accessibility.md5
performance/performance.md10
operations/operations.md8, 14

Panel dialogue

panel/dialogue.md sits beside the phase folders. It is not a phase file. It stores the full chat after each question is closed. The panel asks in the conversation, one question at a time, and waits. A story with no record leaves the evidence outstanding. Later assessments read the file with the other evidence.

Red lines

PhaseThe point fails when
DiscoveryThe pack contains production code, a signed-off interface, or a decision that Alpha will happen
AlphaA production environment is described as the beta platform
AlphaOne design is presented as the beta interface, with nothing discarded
AlphaConcept tests were only with confident digital users, colleagues, or stakeholders
AlphaEvery experiment confirmed the opening plan
BetaNo participant used a screen reader, a magnifier, or speech input
BetaThere is no independent WCAG 2.2 AA audit, with issues marked fixed, accepted, or open
BetaA user cannot finish the real task
BetaPeople who cannot use the digital service have no staffed alternative
BetaReal personal data is processed, and any of the privacy assessment, the security scan in the pipeline, or a tested rollback is missing
BetaThe team built its own identity, payments, notifications, or form runner, with no tested decision against the GOV.UK service
LiveThe incident runbook has not been used or rehearsed
LiveThere is no disaster-recovery drill result
LiveThere is no exercised way to leave the contract
LiveThe department cannot change the service without the supplier
LiveResearch and published performance stopped at launch
LiveA known drop-off has no owner

skills

gds-assessment-how-to

build_past_assessment_catalogue.py

create-evidence-kit.py

create-example.py

library_paths.py

reports_mcp_server.py

scrape_gds_reports.py

SKILL.md

.mcp.json

README.md

tile.json