derive-quality-profile-from-epics

Aggregate epic-level constraints into an ISO 25010 quality profile and risk register.

3|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/kapilvirenahuja/garura --skill derive-quality-profile-from-epics
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: derive-quality-profile-from-epics
Source: https://github.com/kapilvirenahuja/garura/tree/main/core/components/skills/derive-quality-profile-from-epics
Command: npx skills add https://github.com/kapilvirenahuja/garura --skill derive-quality-profile-from-epics

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It aggregates constraints and experiential warnings from validated intent epics into a product-level ISO 25010 quality profile and risk register, so architecture and delivery can stay deterministic across contexts.

Core Features & Use Cases

  • ISO 25010 characteristic aggregation: Maps epic-level constraints into the nine ISO 25010 characteristics and computes measurable product targets.
  • Strict ratcheting and strictest-wins logic: Resolves conflicts by selecting the strictest target per dimension and keeps traceability to source epics.
  • Risk register from experiential warnings: Dedupe warnings, infer severity from epic frequency, and derive mitigation guidance.
  • Security profile derivation and decision surfacing: Builds a derived security profile from business rules and compliance constraints while emitting a decision-manifest for orchestration.

Quick Start

Use the derive-quality-profile-from-epics skill with a validated intent epics directory and an output path to generate the quality-profile.yaml handoff artifact for arch (214.7).

Frequently Asked Questions about derive-quality-profile-from-epics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map epic-level NFRs to an ISO 25010 quality profile?

To derive an ISO 25010 quality profile, this skill aggregates constraints from validated intent epics into the nine ISO 25010 characteristics, computing measurable product-level targets for deterministic delivery.

What is the best way to resolve conflicting non-functional requirements across epics?

The best way to resolve conflicting non-functional requirements across epics is using strict ratcheting and strictest-wins logic, which selects the strictest target per dimension while maintaining traceability back to the source epics.

How do I generate a risk register from product specification warnings?

You generate a risk register from product specification warnings by deduplicating experiential warnings across intent epics, inferring severity from epic frequency, and deriving mitigation guidance for the product specification.

How do I build a security profile from compliance constraints during product specification?

To build a security profile from compliance constraints, this skill derives it from business rules and compliance constraints found in intent epics, emitting a decision-manifest for downstream architectural orchestration.

Do I need validated intent epics to generate a product-level quality profile?

Yes, you need validated intent epics to generate a product-level quality profile, because the skill requires strict validation gating and only accepts epic-sourced targets to ensure deterministic delivery results.