spec-to-code-compliance

Extract Spec-IR and Code-IR to verify blockchain code against documentation.

965|142|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/vigolium/vigolium --skill spec-to-code-compliance-vigolium
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spec-to-code-compliance
Source: https://github.com/vigolium/vigolium/tree/main/platform/vigolium-audit/src/content/skills/spec-to-code-compliance
Command: npx skills add https://github.com/vigolium/vigolium --skill spec-to-code-compliance-vigolium

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

spec-to-code-compliance helps you verify that blockchain code implements exactly what the documentation claims, so you can find gaps between intended behavior and actual on-chain logic with evidence-based, audit-grade traceability.

Core Features & Use Cases

  • Documentation-to-IR extraction: Builds a Spec-IR by extracting purpose, actors/roles, trust boundaries, invariants, pre/postconditions, flows, math formulas, and security requirements from whitepapers, design docs, transcripts, and similar materials.
  • Deterministic code semantics mapping: Constructs a Code-IR via line-by-line and block-by-block analysis of functions, state reads/writes, control flow, revert conditions, external calls, events, and storage/authorization logic.
  • Traceable alignment and divergence: Produces an Alignment-IR comparing every Spec-IR item to corresponding Code-IR evidence, classifying full matches, partial matches, mismatches, missing claims, and strength inversions—then outputs a structured compliance report with severity-ranked divergence findings.

Quick Start

Use the spec-to-code-compliance skill to compare your protocol whitepaper against your smart contract codebase and generate an audit-grade compliance report.

Frequently Asked Questions about spec-to-code-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify smart contract code matches protocol whitepaper specifications?

Smart contract compliance verification extracts an evidence-backed Spec-IR from documentation and performs line-by-line Code-IR analysis for full traceability. It compares invariants, preconditions, and flows to identify mismatches with audit-grade reporting.

What is the best way to audit blockchain code for spec compliance?

Spec compliance auditing builds a deterministic Code-IR through block-by-block analysis of state reads, control flow, and external calls, mapping them to design document requirements to produce severity-ranked divergence findings.

How does line-by-line analysis trace invariants from design docs to code?

Line-by-line analysis traces invariants by constructing an Alignment-IR that links every Spec-IR item to Code-IR evidence, classifying full matches, partial matches, and strength inversions with confidence scoring.

Can I use whitepapers and design documents to check protocol compliance?

Whitepapers and design documents are valid inputs for protocol compliance checks. The process extracts purpose, actors, trust boundaries, math formulas, and security requirements into a Spec-IR for alignment verification.

Does spec compliance reporting classify missing claims and ambiguity in blockchain code?

Spec compliance reporting classifies missing claims and ambiguity by comparing Spec-IR items to Code-IR evidence. It identifies full matches, partial matches, mismatches, and strength inversions with confidence scoring.

When should I not use deterministic spec-to-code alignment for smart contract auditing?

Deterministic spec-to-code alignment requires structured documentation artifacts and a target codebase. It is not suited for unstructured requirements, ambiguous specifications lacking invariants, or projects without formal design documents.