bridge-dev-pipeline

Reviews code quality, test coverage, and documentation completeness. Produces PASS/FAIL reports with file:line references. Focuses on clean code, error handling, YAGNI, and meaningful test coverage. Use after build phase completes, before or alongside the validator.

Produces 3-scenario effort estimates (Human-Only, Bridge-Only, Hybrid) with detailed role breakdowns, token projections, and timeline comparisons. Spawned by orchestrator at Phase 3 Step 3.3 after architecture is complete.

Translates business requirements from meeting transcripts, emails, chats, or summaries into structured Technical Definitions. Use proactively when unstructured business input needs to be converted into actionable technical requirements.

Investigates technologies, APIs, tools, MCP servers, and methodologies needed for a project. Fetches current documentation, evaluates options, and produces comprehensive Research Reports. Use proactively when technology research is needed.

Runs mandatory security scans on built solutions. Performs SAST via semgrep, secrets detection via gitguardian, dependency auditing, and OWASP Top 10 review. Produces SECURE/BLOCKED verdicts. BLOCKING -- cannot be overridden silently. Use after build phase completes.

BRIDGE Development Pipeline — a multi-agent pipeline that transforms business requirements into delivered technical solutions with client-ready deliverables. Built for development agencies, consultancies, fractional engineering teams, and any team that needs to go from requirements to delivery faster. MUST trigger on: any development request, meeting transcripts, requirement summaries, emails or chats about new projects, "build this", "we need a solution for", "translate these requirements", "design the architecture", client proposals, technology assessments, solution design, data engineering projects, analytics dashboards, API integrations, ETL pipelines, or any request that involves going from business need to technical delivery. Also triggers on: "run the pipeline", "new project", "continue project", "list projects", "/bridge". Integrates 32 Trail of Bits security skills, 13 MCP servers, 12 CLI tools (including Hyperframes for branded visuals and animated explainer videos), and per-phase tooling manifests across all phases.