rune-audit

Invoke the audit with /rune audit or ask for a project health check. It runs eight phases covering dependencies, security, code quality, architecture, performance, infrastructure, documentation, and mesh analytics, then writes AUDIT-REPORT.md to the project root.

The score uses a weighted formula: Security 25%, Code Quality 20%, Architecture 15%, Dependencies 15%, Performance 10%, Infrastructure 8%, and Documentation 7%. Scores map to grades from Excellent (90-100) down to Critical (0-39) with a PASS, WARNING, or FAIL verdict.

DX review mode, triggered by /rune audit dx, evaluates developer experience using Addy Osmani's 8 principles, including time to hello world, setup friction, error message quality, and recovery from mistakes. It runs separately from the standard 8-phase health audit.

Yes, it detects the stack during project discovery and applies targeted checks for React/Next.js, Node.js/Express, Python (Django/Flask/FastAPI), Go, Rust, and mobile frameworks like React Native and Flutter. Irrelevant framework checks are skipped entirely.

A phase is marked incomplete when a delegated sub-skill such as sentinel or dependency-doctor times out, in which case the dimension receives an N/A score rather than fabricated findings. Every reported finding requires a specific file:line citation with over 80% confidence.