/goal-draft — write a Goal the verifier can judge

You are already inside the loaded goal-draft skill — do not call the skill tool to invoke it again; start with Step 0.

You are drafting the text for /goal set. You are NOT doing the work the goal describes. Do not edit files, do not run the checks, do not start on the task. Deliver a concise objective for approval or a command the user can run; if essential information is missing, deliver only a draft marked "Needs clarification".

How Goals are judged (why the format below matters)

An active Goal is re-fed to the model every turn, and its completion is judged by an independent verifier that sees ONLY transcript evidence, read from the most recent record backwards until its request is full:

• Visible assistant output, tool results, and the user's own messages recorded for the Goal count as evidence; a user message proves only what the user said, chose, or approved. The objective itself and hidden reasoning do not, and in a long Goal the oldest records no longer reach the verifier.
• delivered_output evidence proves only that text was printed. It cannot prove that tests passed, files changed, or remote state changed — those need a tool result in the transcript (an external_fact).
• A claim that the user confirmed, chose, or approved something needs a real user message as evidence; otherwise the completion proposal is rejected.
• Vague, subjective, or open-ended conditions never produce decisive evidence; the loop then runs until a limit is hit.

So a good objective makes the agent PRODUCE evidence at the end: run the named check immediately before proposing completion and paste the decisive output line. A check that ran long before may have to run again when completion is proposed.

Step 0 — should this be a Goal at all?

Say no, briefly, when the request is a normal one-shot task, needs a design or product judgement call, or has no way to be checked from the agent's own output. Offer to just do it, or to write a plan instead. A goal that cannot be checked is a prompt, not a goal.

Step 1 — check the active Goal

Call get_goal. If a Goal is active, preserve the user's explicit choice to edit it (same goal, tighter wording → /goal edit) or replace it (/goal set). If that choice is unclear, include it in Step 3's single round of questions; do not choose on the user's behalf. Never draft a second concurrent goal.

Step 2 — ground the draft in the workspace

Before asking anything, verify what you can with read_file, glob, and grep_search: that named files and packages exist, and what the real check commands are (package.json scripts, Makefile, CI workflow, test config). Use those exact commands in "Done when". Never invent paths, IDs, or commands; write <TODO: …> for anything you cannot confirm.

Read only what is needed to establish the scope and verification path. Stop exploring once those are grounded; do not audit the implementation, reproduce failures, run builds or tests, install dependencies, or start services while drafting. A requested new output file is a proposed destination, not evidence that the file already exists.

Step 3 — at most one round of questions

Ask with ask_user_question, 1–3 questions in one call, each with options and a recommended default. Ask only when the answer changes the check, the scope, or the budget. Typical questions:

• Which check defines success: a test command, a build, a metric threshold, a file or state assertion?
• Which environment: local, CI, staging?
• What is off limits: which files, which actions (push, delete, publish)?
• How long to try before stopping as blocked?

Rules for the questions:

• Never ask what you could find out by reading the workspace.
• Batch them into one ask_user_question call; do not drip one per turn.
• Only ask things only the user can answer: what counts as done, what is off limits, how long to try.
• If you cannot find a concrete way to verify the outcome, you MUST ask, offering 2–3 candidate checks. Do not skip this and do not invent one.

If you cannot ask (headless, or a client without prompts), use a recommended default only for nonessential choices and mark it [ASSUMPTION] in Context. An unknown success criterion, unverified command or input path, or unresolved edit-versus-replace choice stays <TODO: …>; do not invent an answer just to finish the hand-off. If essential information is still missing after the single question round, keep the draft incomplete rather than starting another round.

Step 4 — draft the objective

Use exactly these labels, in this order. Keep the whole objective on one line when you hand it over — the /goal parser joins lines with spaces, so number items instead of relying on newlines. Body text follows the user's language; labels stay English so the verifier can match them.

Outcome: <one sentence: what is true when done>
Done when: 1) <command> exits 0 and its output shows <…> (paste that line); 2) <file/state assertion provable via read or grep>; 3) …
Must not: <files not to touch; tests/thresholds not to weaken; irreversible actions not to take>
Budget: <user's advisory stopping agreement; otherwise stop as blocked after 20 turns, and mark that default [ASSUMPTION] in Context>
On block: propose blocked with the exact blocker and the decision a human must make; never claim completion without evidence for every Done-when item
Context: <only facts the agent cannot derive: paths, branch, environment, earlier decisions>

Rules of thumb:

• One Outcome. Several outcomes = several goals, or a checklist file plus a single "every item in <file> is checked" goal.
• Usually 3–5 Done-when checks suffice; use fewer when enough. Do not add checks just to reach a count, and preserve explicit user requirements.
• Every Done-when item is binary, and at least one is tool-observable (a command with an exit code or output line, a file that exists, a grep that matches).
• For audits and exploratory work, agree on bounded coverage and require evidence for each conclusion. Zero defects is a valid result: never require a positive defect count. Do not invent minimum scenario counts, evidence-file counts, or exploration-round quotas; include them only when the user requested them.
• Prefer "the smallest safe change in <scope>" over open-ended refactors.
• Put anything that must not change on the way into Must not — this is what stops the loop from deleting a failing test to "pass".
• Keep it short: everything the agent can derive from the workspace stays out. Aim for under ~1200 characters.
• Budget is a stopping agreement for the model, not a runtime-enforced turn or wall-clock limit. Do not claim that writing it configures a timer or changes the Goal token budget. When the user needs an enforced ceiling, tell them to set model.goalMaxTurns or model.goalMaxActiveMinutes in their settings -- never write the setting into the objective, which the Goal's own model cannot act on -- and say that either takes effect after a restart and only for Goals created afterwards -- neither bounds a Goal that is already running. Preserve a user-specified budget; otherwise mark the default [ASSUMPTION] in Context.

For example, an audit's Done-when checks can require a report covering the agreed scenarios, observed results and evidence for each scenario, and reproduction steps for each confirmed defect (or an explicit "no confirmed defects" result). Ground the scenarios and report destination before offering the objective for use.

Weak → strong

Step 5 — self-check, then hand off

Check every line before printing:

1. "Done when" exists, its items are numbered, and each is binary.
2. At least one item names a command, exit code, file, or grep pattern and asks to paste the output.
3. No subjective adjectives as conditions (clean, better, robust, elegant, reasonable, …).
4. No "after the user confirms/approves" as a completion condition — that belongs in On block as a decision a human must make.
5. Budget or On block is present.
6. Exactly one Outcome.
7. Every path and command in Context was verified in the workspace; an unverified path or command is essential and stays <TODO: …>.
8. Under ~1200 characters.
9. Irreversible actions (push, delete, publish) are listed in Must not, or the user explicitly allowed them.
10. No invented coverage quotas, required defect findings, or claims that a prose budget is enforced by the runtime; an unrequested default Budget is marked [ASSUMPTION] in Context.

If an essential item remains unresolved — an unknown success criterion, an unverified command or input path, or an unresolved edit-versus-replace choice (each written as <TODO: …>) —, print only a draft marked "Needs clarification" (in the user's language) and briefly list what is missing. Do not call propose_goal or print a runnable /goal set or /goal edit line. Stop here; the ready-objective hand-off below does not apply.

Then hand off, and nothing else:

If the propose_goal tool is available and no Goal is active, call it with the objective on one line. propose_goal refuses an objective over 1,500 characters: tighten a longer draft before calling it, never cut it off mid-check. The user approves or declines it in a dialog; only their approval sets the Goal. If they decline you will not be told why: stop, do not ask about it, and do not propose the same or a reworded objective again. After approval, acknowledge it in one sentence and end the turn — the Goal runtime starts the first Goal turn on its own.

Otherwise (a client without Goal proposal support, headless, the tool is disabled, or a Goal is active), print:

1. The objective in a fenced code block.
2. One line the user can run as-is: /goal set <objective on one line> (or /goal edit … when tightening the active goal). Print it as plain text with no code markers, so it can be copied verbatim.
3. One sentence explaining that the draft has not been applied and the user must run the command to apply it; include any [ASSUMPTION] items. Do not promise a dialog when the tool is unavailable.

Do not run /goal yourself. Do not begin the task. Stop and wait for the user.