Quality commands

Verification and safety: verify, scan, spec, taste, uicheck, and harden — plus the v0.19+ precommit and radar gates.

The Quality group is the verification and safety surface. See Verification gates for how these compose.

forge verify

Independent verification gate — tests + hallucinated-symbol + provenance.

forge verify
forge verify --deep       # multi-lens consensus (v0.19+)

forge scan

Skill-gate — vet a skill or MCP server for injection / RCE / exfil before install.

forge scan <path-to-SKILL.md-or-.mcp.json>

forge spec

Spec-as-contract — init (OpenSpec), lock, and check drift.

forge spec init
forge spec lock
forge spec check

forge taste

Enable one UI-taste tool for this repo (no arg lists the options).

forge taste                # list the profiles
forge taste <profile>      # brutalist · corporate · editorial · minimalist · playful

Writes DESIGN.md and parameterizes the uicheck design gate thresholds.

forge uicheck

Deterministic UI checks.

forge uicheck contrast <fg> <bg>     # WCAG contrast ratio
forge uicheck fingerprint <file...>  # deterministic design fingerprint
forge uicheck design <file...>       # slop-distance + conformance gate
forge uicheck visual <file-or-url>   # Playwright-rendered check (opt-in tier)

forge harden

Wire security controls — gitleaks pre-commit + sandbox settings.

forge harden

forge precommit _v0.19+

Commit-level gate — runs the verification floor at commit time so partial or unverified work is caught before it lands.

forge precommit

forge radar _v0.19+

Dependency-currency rings — groups the project’s dependencies by how current they are, so stale or drifting dependencies surface before they bite.

forge radar

See the Keeping dependencies current guide for how to read the rings.