Quality commands

The Quality group is the verification and safety surface. See Verification gates for how these compose.

`forge verify`

Independent verification gate — tests + hallucinated-symbol + provenance.

forge verify
forge verify --deep       # multi-lens consensus (v0.19+)

forge verify --deep reports a four-state status instead of a plain pass/fail:

Status	Meaning
`PASS`	Every lens agreed and the core `forge verify` tests status is also `PASS`.
`FAIL`	At least one lens reported a real failure.
`INCOMPLETE`	A lens could not finish (timeout, crash, missing dependency) — treat as not proven.
`NOT_CONFIGURED`	No lenses are wired up for this repo — nothing was actually checked.

Only PASS counts as verified. --deep deliberately refuses to promote a consensus to PASS when the underlying forge verify tests status is anything other than PASS, so a green deep run always implies a green base run.

`forge scan`

Skill-gate — vet a skill or MCP server for injection / RCE / exfil before install.

forge scan <path-to-SKILL.md-or-.mcp.json>

`forge spec`

Spec-as-contract — init (OpenSpec), lock, and check drift.

forge spec init
forge spec lock
forge spec check

`forge taste`

Enable one UI-taste tool for this repo (no arg lists the options).

forge taste                # list the profiles
forge taste <profile>      # brutalist · corporate · editorial · minimalist · playful

Writes DESIGN.md and parameterizes the uicheck design gate thresholds.

`forge uicheck`

Deterministic UI checks.

forge uicheck contrast <fg> <bg>     # WCAG contrast ratio
forge uicheck fingerprint <file...>  # deterministic design fingerprint
forge uicheck design <file...>       # slop-distance + conformance gate
forge uicheck visual <file-or-url>   # Playwright-rendered check (opt-in tier)

`forge harden`

Wire security controls — gitleaks pre-commit + sandbox settings.

forge harden

`forge precommit` _v0.19+

Commit-level gate — runs the verification floor at commit time so partial or unverified work is caught before it lands.

forge precommit

`forge radar` _v0.19+

Dependency-currency rings — groups the project’s dependencies by how current they are, so stale or drifting dependencies surface before they bite.

forge radar

See the Keeping dependencies current guide for how to read the rings.

​forge verify

​forge scan

​forge spec

​forge taste

​forge uicheck

​forge harden

​forge precommit v0.19+

​forge radar v0.19+