# Common Sdlc Metrics

Define delivery metrics from authorized observations and labeled artifact/git proxies...

- Repository: https://github.com/HoangNguyen0403/agent-skills-standard (582 stars)
- Category: Git and review
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-sdlc-metrics -g -a claude-code -y`
Codex: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-sdlc-metrics -g -a codex -y`
Cursor: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-sdlc-metrics -g -a cursor -y`
Gemini CLI: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-sdlc-metrics -g -a gemini-cli -y`

## Description

Define delivery metrics from authorized observations and labeled artifact/git proxies; use for DORA, SDLC outcomes, reporting, or control bands.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# SDLC Metrics Standard

## **Priority: P2 (MEDIUM)**

Measure handoffs, not keystrokes. A missing input is unavailable, never zero; a proxy is never a measurement.

## Use and verify

- Emit `artifacts/sdlc-metrics.md` at a workflow terminal state, alongside `artifacts/session-cost.md`.
- Direct delivery measures come only from the authorized local export `artifacts/metrics/delivery-observations.json`; never read it from the network or place it under `artifacts/runs/`.
- Load [the metrics schema](references/metrics-schema.md) for the report skeleton, input contract, and derivation details.
- Generate the report with `rtk pnpm metrics:report --json`; run `rtk pnpm test:metrics` for the metrics suite. Do not overwrite existing metrics/history artifacts.

## DORA

Measured rows require linked deployment/defect observations and complete relevant coverage.

- **Deployment frequency:** production deployments by `deployed_at`.
- **Lead time:** `first_change_at` to `deployed_at`.
- **Change failure rate:** deployments with a hotfix/rollback defect divided by eligible deployments. Without incident coverage, a deployment is not failure-free.
- **Time to restore:** `restored_at` minus `detected_at`; restoration beyond coverage or the report horizon is censored.
- Select deployment and incident populations by domain timestamps, never export `observed_at`. Use the half-open report period `[currentSince, currentUntil)`.
- Incomplete population coverage yields a partial count or unavailable rate, never a complete result.
- Without observations, keep measured DORA unavailable. Label deploy-tag frequency, commit-to-tag lag, and revert/fix-commit tag share as git proxies.

## Accepted-change measures

The rest: https://github.com/HoangNguyen0403/agent-skills-standard/blob/HEAD/.codex/skills/common/common-sdlc-metrics/SKILL.md