From 4e9a516485753462a803e618df8e8eb8a22184b0 Mon Sep 17 00:00:00 2001 From: yaojingang Date: Sun, 14 Jun 2026 14:48:05 +0800 Subject: [PATCH] chore: refresh shared html rendering evidence --- registry/index.json | 2 +- registry/packages/yao-meta-skill.json | 6 +- reports/benchmark_reproducibility.json | 56 +++++--- reports/benchmark_reproducibility.md | 33 ++--- reports/install_simulation.json | 2 +- reports/output_execution_runs.json | 20 +-- reports/output_execution_runs.md | 20 +-- reports/package_verification.json | 4 +- reports/package_verification.md | 2 +- reports/registry_audit.json | 8 +- reports/registry_audit.md | 4 +- reports/review-studio.html | 14 +- reports/review-studio.json | 180 +++++++++++++++---------- reports/review-viewer.json | 50 +++---- reports/security_trust_report.json | 30 ++++- reports/security_trust_report.md | 11 +- reports/skill-overview.html | 2 +- reports/skill-overview.json | 50 +++---- reports/skill_os2_coverage.json | 4 +- reports/skill_os2_coverage.md | 4 +- reports/upgrade_check.json | 4 +- 21 files changed, 286 insertions(+), 220 deletions(-) diff --git a/registry/index.json b/registry/index.json index c94df14..30903a9 100644 --- a/registry/index.json +++ b/registry/index.json @@ -16,7 +16,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] } diff --git a/registry/packages/yao-meta-skill.json b/registry/packages/yao-meta-skill.json index f84068c..22758f9 100644 --- a/registry/packages/yao-meta-skill.json +++ b/registry/packages/yao-meta-skill.json @@ -16,8 +16,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -48,7 +48,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" diff --git a/reports/benchmark_reproducibility.json b/reports/benchmark_reproducibility.json index dc527ea..9fbe61a 100644 --- a/reports/benchmark_reproducibility.json +++ b/reports/benchmark_reproducibility.json @@ -3,23 +3,36 @@ "ok": true, "generated_at": "2026-06-14", "skill_dir": ".", - "commit": "a39964faef674746a31363db2215460cff9e1931", + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "git_status": { "available": true, - "dirty": false, - "changed_file_count": 0, - "sample": [], + "dirty": true, + "changed_file_count": 14, + "sample": [ + " M registry/index.json", + " M registry/packages/yao-meta-skill.json", + " M reports/install_simulation.json", + " M reports/output_execution_runs.json", + " M reports/output_execution_runs.md", + " M reports/package_verification.json", + " M reports/package_verification.md", + " M reports/registry_audit.json", + " M reports/registry_audit.md", + " M reports/security_trust_report.json", + " M reports/security_trust_report.md", + " M reports/skill_os2_coverage.json" + ], "scope": "generation-time status before this report is written" }, "summary": { "reproducibility_ready": true, - "release_lock_ready": true, + "release_lock_ready": false, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, - "evidence_bundle_sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c", - "source_contract_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "evidence_bundle_sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83", + "source_contract_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "output_case_count": 5, "failure_disclosure_count": 3, "command_count": 21, @@ -37,14 +50,15 @@ "world_class_source_pass_count": 6, "world_class_source_blocked_count": 7, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": false, - "changed_file_count": 0 + "public_claim_blocker_count": 5, + "working_tree_dirty": true, + "changed_file_count": 14 }, "public_claim": { "ready": false, "scope": "public benchmark or world-class readiness claim", "blockers": [ + "release lock is not clean or commit is unavailable", "provider-backed model holdout evidence is incomplete", "human blind-review adjudication is incomplete", "world-class evidence is not accepted yet (4 open gaps, 4 ledger pending)", @@ -53,10 +67,10 @@ "policy": "Local reproducibility can pass before public claims; public claims require provider evidence, human adjudication, clean release lock, accepted world-class evidence, and complete source checks." }, "release_lock": { - "ready": true, - "commit": "a39964faef674746a31363db2215460cff9e1931", + "ready": false, + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "status_scope": "generation-time status before this report is written", - "reason": "clean generation-time HEAD" + "reason": "working tree was dirty at generation time" }, "evidence_bundle": { "algorithm": "sha256(path,label,exists,artifact_sha256)", @@ -64,7 +78,7 @@ "existing_count": 24, "missing_count": 0, "missing_paths": [], - "sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c" + "sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83" }, "methodology": { "path": "reports/benchmark_methodology.md", @@ -138,7 +152,7 @@ "path": "reports/output_execution_runs.json", "exists": true, "bytes": 7966, - "sha256": "ae868a54cec479c2427de198bd33ab871d553855ccd41527f7bd08a795dcc512" + "sha256": "a59b750aebed61481e2fa9a66bd196f1a8c87e5d5857c4e615c85eab156594ad" }, { "label": "blind_review", @@ -172,8 +186,8 @@ "label": "trust_report", "path": "reports/security_trust_report.json", "exists": true, - "bytes": 99433, - "sha256": "a49ddfd11d3e4a9c54973547f25a9673f49446005d64165140a4df5c9f42f395" + "bytes": 100003, + "sha256": "0415c413f6f024e413df0afb4adea17e2c2efc1e3a37d2e8689e6a05241e153e" }, { "label": "python_compatibility", @@ -187,21 +201,21 @@ "path": "reports/registry_audit.json", "exists": true, "bytes": 3183, - "sha256": "2c7799ff267bd856bd244e59160d01ea98b3cf11b1af966e02009c59141ab56f" + "sha256": "a3e00a3b9653da411f20ec24d488067efca021d1270b528f8e2facd1e9ddf743" }, { "label": "package_verification", "path": "reports/package_verification.json", "exists": true, "bytes": 19325, - "sha256": "22c585f95229deebc627b5a103ae2bbfbf9c678535e2048f3472b373a70877c6" + "sha256": "3ca24a8ae4b7a3ab68398022754abdec97a5a4b8d451b969d9e7d062244a9617" }, { "label": "install_simulation", "path": "reports/install_simulation.json", "exists": true, "bytes": 8604, - "sha256": "1ed7ce5266c2dd7ee8daf83a3a5c65cdb69ade1567a33b88b77b619d3f5afa16" + "sha256": "f0d1820d3da26ebc93187b64ec0cde14fa32cbef47dc865dd96200e43e9767b4" }, { "label": "skill_os2_audit", diff --git a/reports/benchmark_reproducibility.md b/reports/benchmark_reproducibility.md index 1aa40b6..06a70e0 100644 --- a/reports/benchmark_reproducibility.md +++ b/reports/benchmark_reproducibility.md @@ -1,19 +1,19 @@ # Benchmark Reproducibility Generated at: `2026-06-14` -Commit: `a39964faef674746a31363db2215460cff9e1931` -Working tree dirty at generation: `false` -Evidence bundle SHA256: `afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c` +Commit: `6f5f4db4a79c6178a7621f750063b6840e129fd8` +Working tree dirty at generation: `true` +Evidence bundle SHA256: `0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83` ## Summary - reproducibility ready: `true` -- release lock ready: `true` +- release lock ready: `false` - methodology complete: `true` - required artifacts: `24` - missing artifacts: `0` -- source contract sha256: `2e0e0877e481` -- archive sha256: `581db0878142` +- source contract sha256: `23d757678bc6` +- archive sha256: `2a3600e27e24` - output cases: `5` - disclosed failure cases: `3` - reproduction commands: `21` @@ -22,8 +22,8 @@ Evidence bundle SHA256: `afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b2 - world-class ready: `false` - world-class source checks: `6` pass / `13` total; `7` blocked - public claim ready: `false` -- public claim blockers: `4` -- changed files at generation: `0` +- public claim blockers: `5` +- changed files at generation: `14` This report proves local benchmark reproducibility only. It keeps external provider and human-review gaps visible instead of counting them as complete. The git commit is generation-time context; the evidence bundle SHA is the durable anchor for the artifacts listed below. @@ -35,6 +35,7 @@ This report proves local benchmark reproducibility only. It keeps external provi | Blocker | | --- | +| release lock is not clean or commit is unavailable | | provider-backed model holdout evidence is incomplete | | human blind-review adjudication is incomplete | | world-class evidence is not accepted yet (4 open gaps, 4 ledger pending) | @@ -42,15 +43,15 @@ This report proves local benchmark reproducibility only. It keeps external provi ## Release Lock -- ready: `true` -- reason: clean generation-time HEAD +- ready: `false` +- reason: working tree was dirty at generation time - status scope: generation-time status before this report is written ## Evidence Bundle - algorithm: `sha256(path,label,exists,artifact_sha256)` - artifacts: `24` / `24` -- sha256: `afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c` +- sha256: `0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83` ## Methodology Sections @@ -72,16 +73,16 @@ This report proves local benchmark reproducibility only. It keeps external provi | output_cases | `evals/output/cases.jsonl` | present | `a6ae96857116` | | output_schema | `evals/output/schema.json` | present | `8ee340c95064` | | output_scorecard | `reports/output_quality_scorecard.json` | present | `0806258a8e08` | -| output_execution | `reports/output_execution_runs.json` | present | `ae868a54cec4` | +| output_execution | `reports/output_execution_runs.json` | present | `a59b750aebed` | | blind_review | `reports/output_blind_review_pack.json` | present | `bbe2db8ec277` | | review_adjudication | `reports/output_review_adjudication.json` | present | `240485a721af` | | trigger_scorecard | `reports/route_scorecard.json` | present | `c164e83e36d0` | | runtime_conformance | `reports/conformance_matrix.json` | present | `8251329e663d` | -| trust_report | `reports/security_trust_report.json` | present | `a49ddfd11d3e` | +| trust_report | `reports/security_trust_report.json` | present | `0415c413f6f0` | | python_compatibility | `reports/python_compatibility.json` | present | `ae16e17266e4` | -| registry_audit | `reports/registry_audit.json` | present | `2c7799ff267b` | -| package_verification | `reports/package_verification.json` | present | `22c585f95229` | -| install_simulation | `reports/install_simulation.json` | present | `1ed7ce5266c2` | +| registry_audit | `reports/registry_audit.json` | present | `a3e00a3b9653` | +| package_verification | `reports/package_verification.json` | present | `3ca24a8ae4b7` | +| install_simulation | `reports/install_simulation.json` | present | `f0d1820d3da2` | | skill_os2_audit | `reports/skill_os2_audit.json` | present | `6bb2dcb0e1e5` | | world_class_evidence_plan | `reports/world_class_evidence_plan.json` | present | `164803bb1cea` | | world_class_evidence_ledger | `reports/world_class_evidence_ledger.json` | present | `7b3d12cd3087` | diff --git a/reports/install_simulation.json b/reports/install_simulation.json index 5b66b9c..08069ed 100644 --- a/reports/install_simulation.json +++ b/reports/install_simulation.json @@ -8,7 +8,7 @@ "installed_skill_dir": "dist/install-simulation/simulate-yao-meta-skill/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 577, + "archive_entry_count": 579, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, diff --git a/reports/output_execution_runs.json b/reports/output_execution_runs.json index d341716..7cd6f80 100644 --- a/reports/output_execution_runs.json +++ b/reports/output_execution_runs.json @@ -34,7 +34,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.93, + "duration_ms": 31.59, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -62,7 +62,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.0, + "duration_ms": 32.08, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -85,7 +85,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.51, + "duration_ms": 33.46, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -113,7 +113,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 32.06, + "duration_ms": 35.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -136,7 +136,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.08, + "duration_ms": 31.18, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -164,7 +164,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.69, + "duration_ms": 31.3, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -187,7 +187,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.64, + "duration_ms": 31.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -214,7 +214,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.79, + "duration_ms": 31.32, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -237,7 +237,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 28.87, + "duration_ms": 31.75, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -266,7 +266,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.79, + "duration_ms": 32.17, "provider": "local-output-eval-runner", "model": "", "usage": { diff --git a/reports/output_execution_runs.md b/reports/output_execution_runs.md index a30e851..d898b38 100644 --- a/reports/output_execution_runs.md +++ b/reports/output_execution_runs.md @@ -23,16 +23,16 @@ Command runner evidence is present. This proves the eval harness executed an ext | Case | Variant | Mode | Model | Duration ms | Tokens | Score | Status | | --- | --- | --- | --- | ---: | ---: | ---: | --- | -| skill-package-contract | baseline | command | local-output-eval-runner | 30.93 | 33 | 0.0 | pass | -| skill-package-contract | with_skill | command | local-output-eval-runner | 30.0 | 73 | 100.0 | pass | -| output-eval-expectation | baseline | command | local-output-eval-runner | 33.51 | 36 | 0.0 | pass | -| output-eval-expectation | with_skill | command | local-output-eval-runner | 32.06 | 80 | 100.0 | pass | -| ir-before-packaging | baseline | command | local-output-eval-runner | 30.08 | 33 | 0.0 | pass | -| ir-before-packaging | with_skill | command | local-output-eval-runner | 29.69 | 80 | 100.0 | pass | -| near-neighbor-boundary | baseline | command | local-output-eval-runner | 29.64 | 36 | 0.0 | pass | -| near-neighbor-boundary | with_skill | command | local-output-eval-runner | 29.79 | 65 | 100.0 | pass | -| file-backed-governed-package | baseline | command | local-output-eval-runner | 28.87 | 37 | 0.0 | pass | -| file-backed-governed-package | with_skill | command | local-output-eval-runner | 31.79 | 98 | 100.0 | pass | +| skill-package-contract | baseline | command | local-output-eval-runner | 31.59 | 33 | 0.0 | pass | +| skill-package-contract | with_skill | command | local-output-eval-runner | 32.08 | 73 | 100.0 | pass | +| output-eval-expectation | baseline | command | local-output-eval-runner | 33.46 | 36 | 0.0 | pass | +| output-eval-expectation | with_skill | command | local-output-eval-runner | 35.55 | 80 | 100.0 | pass | +| ir-before-packaging | baseline | command | local-output-eval-runner | 31.18 | 33 | 0.0 | pass | +| ir-before-packaging | with_skill | command | local-output-eval-runner | 31.3 | 80 | 100.0 | pass | +| near-neighbor-boundary | baseline | command | local-output-eval-runner | 31.55 | 36 | 0.0 | pass | +| near-neighbor-boundary | with_skill | command | local-output-eval-runner | 31.32 | 65 | 100.0 | pass | +| file-backed-governed-package | baseline | command | local-output-eval-runner | 31.75 | 37 | 0.0 | pass | +| file-backed-governed-package | with_skill | command | local-output-eval-runner | 32.17 | 98 | 100.0 | pass | ## Next Fixes diff --git a/reports/package_verification.json b/reports/package_verification.json index b19681f..e840fbb 100644 --- a/reports/package_verification.json +++ b/reports/package_verification.json @@ -8,8 +8,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", - "archive_entry_count": 577, + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", + "archive_entry_count": 579, "failure_count": 0, "warning_count": 0 }, diff --git a/reports/package_verification.md b/reports/package_verification.md index 751efcd..f5baac9 100644 --- a/reports/package_verification.md +++ b/reports/package_verification.md @@ -4,7 +4,7 @@ - Package directory: `dist` - Targets: `4 / 4` adapters present - Archive present: `True` -- Archive SHA256: `581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943` +- Archive SHA256: `2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc` - Failures: `0` - Warnings: `0` diff --git a/reports/registry_audit.json b/reports/registry_audit.json index f3d02b7..4673595 100644 --- a/reports/registry_audit.json +++ b/reports/registry_audit.json @@ -21,8 +21,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -53,7 +53,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -78,7 +78,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, diff --git a/reports/registry_audit.md b/reports/registry_audit.md index a93cf24..1f13e16 100644 --- a/reports/registry_audit.md +++ b/reports/registry_audit.md @@ -6,8 +6,8 @@ - Maturity: `governed` - Owner: `Yao Team` - License: `MIT` -- Package SHA256: `2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2` -- Archive SHA256: `581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943` +- Package SHA256: `23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed` +- Archive SHA256: `2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc` - Install simulated: `True` ## Compatibility diff --git a/reports/review-studio.html b/reports/review-studio.html index bafd7c8..8d5b12d 100644 --- a/reports/review-studio.html +++ b/reports/review-studio.html @@ -543,12 +543,12 @@

核心指标

-
Skill IR2.0.0

5 targets in platform-neutral contract

Compiler5/5

target contracts compiled from Skill IR

Output Delta100.0

5 cases; 1 file-backed

Exec Runs10

command 10; model 0; recorded 0

Blind A/B5

review pairs hide baseline vs with-skill labels

Review Kit0/5

pending 5; answer key hidden

Review A/B0/5

adjudication decisions; pending 5

Public Claimblocked

4 blockers; local reproducible true

Blueprint20/20

2.0 coverage; evidence pending 4

Runtime5/5

target conformance pass rate

Perm Probe4/4

0 native; 4 installer-enforced

Trust0

98 scripts scanned; secrets found

Py Compat0

159 files scanned for Python 3.11

Arch Debt0

891 largest lines; 34 CLI handlers

Atlas5

12 scanned skills; route collisions

Driftlow

1 metadata events; 0 missed triggers

Waivers0

0 gates covered; human risk decisions

Intake4/4

0 valid submissions; 0 invalid

Claim Guard0

73 public surfaces scanned

Notes0/0

0 open blocker annotations

Registry1.1.0

5 targets; MIT license

Archivepass

577 zip entries; package verification

Installpass

4 adapters; 12 permissions enforced; 0 permission failures

Upgrademinor

declared minor; 0 breaking changes

+
Skill IR2.0.0

5 targets in platform-neutral contract

Compiler5/5

target contracts compiled from Skill IR

Output Delta100.0

5 cases; 1 file-backed

Exec Runs10

command 10; model 0; recorded 0

Blind A/B5

review pairs hide baseline vs with-skill labels

Review Kit0/5

pending 5; answer key hidden

Review A/B0/5

adjudication decisions; pending 5

Public Claimblocked

5 blockers; local reproducible true

Blueprint20/20

2.0 coverage; evidence pending 4

Runtime5/5

target conformance pass rate

Perm Probe4/4

0 native; 4 installer-enforced

Trust0

99 scripts scanned; secrets found

Py Compat0

159 files scanned for Python 3.11

Arch Debt0

891 largest lines; 34 CLI handlers

Atlas5

12 scanned skills; route collisions

Driftlow

1 metadata events; 0 missed triggers

Waivers0

0 gates covered; human risk decisions

Intake4/4

0 valid submissions; 0 invalid

Claim Guard0

73 public surfaces scanned

Notes0/0

0 open blocker annotations

Registry1.1.0

5 targets; MIT license

Archivepass

579 zip entries; package verification

Installpass

4 adapters; 12 permissions enforced; 0 permission failures

Upgrademinor

declared minor; 0 breaking changes

审查闸门

-
通过

意图画布

intent confidence 100/100; Intent is clear enough to package the first routeable version.

reports/intent-confidence.json 证据
通过

触发实验

13 trigger cases; 0 misroutes; 0 ambiguous

reports/route_scorecard.json 证据
关注

输出实验

5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5

reports/output_quality_scorecard.json 证据
通过

上下文

initial load 960/1000; deferred 388370/120000; top deferred scripts 340634; resource governance governed; quality density 135.4

reports/context_budget.json 证据
通过

运行矩阵

5 / 5 targets pass

reports/conformance_matrix.json 证据
通过

信任报告

0 secrets; 98 scripts; 3 network-capable scripts; 0 help smoke failures

reports/security_trust_report.json 证据
通过

Python 兼容

Python 3.11; 159 files; 0 compatibility issues; 0 syntax; 0 f-string 3.11 hazards

reports/python_compatibility.json 证据
通过

架构维护

156 Python files; 0 hotspots; 0 blockers; largest 891 lines; 34 CLI handlers

reports/architecture_maintainability.json 证据
通过

权限批准

3/3 permissions approved; gaps 0; required file_write, network, subprocess

reports/security_trust_report.json + security/permission_policy.json 证据
通过

权限探针

4/4 targets probed; native 0; metadata fallback 4; installer 4; residual risks 4

reports/runtime_permission_probes.json 证据
通过

组合治理

12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues

reports/skill_atlas.json 证据
通过

运营回路

1 metadata events; adoption 0; missed 0; bad-output 0; risk low

reports/adoption_drift_report.json 证据
关注

人工批准

0 active waivers; 1 warning gates still need reviewer decision

reports/review_waivers.json 证据
关注

世界证据

4 pending world-class evidence entries; 1 human pending; 3 external pending; source checks 6/13 pass; 7 blocked; overclaim guard true

reports/world_class_evidence_ledger.json 证据
通过

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

reports/registry_audit.json + reports/install_simulation.json 证据
通过

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

reports/promotion_decisions.json + reports/upgrade_check.json + docs/migration-v2.md 证据
+
通过

意图画布

intent confidence 100/100; Intent is clear enough to package the first routeable version.

reports/intent-confidence.json 证据
通过

触发实验

13 trigger cases; 0 misroutes; 0 ambiguous

reports/route_scorecard.json 证据
关注

输出实验

5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5

reports/output_quality_scorecard.json 证据
通过

上下文

initial load 960/1000; deferred 388370/120000; top deferred scripts 340634; resource governance governed; quality density 135.4

reports/context_budget.json 证据
通过

运行矩阵

5 / 5 targets pass

reports/conformance_matrix.json 证据
通过

信任报告

0 secrets; 99 scripts; 3 network-capable scripts; 0 help smoke failures

reports/security_trust_report.json 证据
通过

Python 兼容

Python 3.11; 159 files; 0 compatibility issues; 0 syntax; 0 f-string 3.11 hazards

reports/python_compatibility.json 证据
通过

架构维护

156 Python files; 0 hotspots; 0 blockers; largest 891 lines; 34 CLI handlers

reports/architecture_maintainability.json 证据
通过

权限批准

3/3 permissions approved; gaps 0; required file_write, network, subprocess

reports/security_trust_report.json + security/permission_policy.json 证据
通过

权限探针

4/4 targets probed; native 0; metadata fallback 4; installer 4; residual risks 4

reports/runtime_permission_probes.json 证据
通过

组合治理

12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues

reports/skill_atlas.json 证据
通过

运营回路

1 metadata events; adoption 0; missed 0; bad-output 0; risk low

reports/adoption_drift_report.json 证据
关注

人工批准

0 active waivers; 1 warning gates still need reviewer decision

reports/review_waivers.json 证据
关注

世界证据

4 pending world-class evidence entries; 1 human pending; 3 external pending; source checks 6/13 pass; 7 blocked; overclaim guard true

reports/world_class_evidence_ledger.json 证据
通过

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

reports/registry_audit.json + reports/install_simulation.json 证据
通过

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

reports/promotion_decisions.json + reports/upgrade_check.json + docs/migration-v2.md 证据
@@ -615,7 +615,7 @@
-

信任报告

Secret
0
脚本数
98
网络脚本
3
Help 失败
0
包体哈希
2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2
+

信任报告

Secret
0
脚本数
99
网络脚本
3
Help 失败
0
包体哈希
23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed

安全边界

高风险 secret、远程 inline execution、缺失依赖策略或无法解释的脚本接口应阻断 governed release。

@@ -673,8 +673,8 @@
-

公开声明

本地复现
是
发布锁
是
可公开声明
否
声明阻断
4
Provider 证据
否
人审完成
否
世界级就绪
否
-

声明阻断

  • 阻断provider-backed model holdout evidence is incomplete
  • 阻断human blind-review adjudication is incomplete
  • 阻断world-class evidence is not accepted yet (4 open gaps, 4 ledger pending)
  • 阻断world-class source checks are not all accepted (6/13 pass, 7 blocked)
+

公开声明

本地复现
是
发布锁
否
可公开声明
否
声明阻断
5
Provider 证据
否
人审完成
否
世界级就绪
否
+

声明阻断

  • 阻断release lock is not clean or commit is unavailable
  • 阻断provider-backed model holdout evidence is incomplete
  • 阻断human blind-review adjudication is incomplete
  • 阻断world-class evidence is not accepted yet (4 open gaps, 4 ledger pending)
  • 阻断world-class source checks are not all accepted (6/13 pass, 7 blocked)
@@ -694,12 +694,12 @@

注册审计

yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures

-

包体元数据

名称
yao-meta-skill
版本
1.1.0
Maturity
governed
Owner
Yao Team
License
MIT
信任级别
local
目标平台
openai, claude, generic, agent-skills-compatible, vscode
兼容通过
6/6
归档哈希
581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943
+

包体元数据

名称
yao-meta-skill
版本
1.1.0
Maturity
governed
Owner
Yao Team
License
MIT
信任级别
local
目标平台
openai, claude, generic, agent-skills-compatible, vscode
兼容通过
6/6
归档哈希
2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc

发布路线

0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended

-

包体验证

目标数
4
Adapter
4
归档存在
是
Zip 条目
577
失败数
0
警告数
0
归档哈希
581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943
+

包体验证

目标数
4
Adapter
4
归档存在
是
Zip 条目
579
失败数
0
警告数
0
归档哈希
2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc
diff --git a/reports/review-studio.json b/reports/review-studio.json index 5738c9f..1da1783 100644 --- a/reports/review-studio.json +++ b/reports/review-studio.json @@ -59,7 +59,7 @@ "key": "trust-report", "label": "信任报告", "status": "pass", - "detail": "0 secrets; 98 scripts; 3 network-capable scripts; 0 help smoke failures", + "detail": "0 secrets; 99 scripts; 3 network-capable scripts; 0 help smoke failures", "evidence": "reports/security_trust_report.json", "link": "security_trust_report.md" }, @@ -851,7 +851,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -866,7 +866,7 @@ "file_count": 203 } ], - "file_count": 365, + "file_count": 366, "folder_count": 4, "distribution": [ { @@ -891,7 +891,7 @@ }, { "label": "scripts", - "value": 98 + "value": 99 }, { "label": "evals", @@ -1020,7 +1020,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -1332,13 +1332,13 @@ "ok": true, "summary": { "reproducibility_ready": true, - "release_lock_ready": true, + "release_lock_ready": false, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, - "evidence_bundle_sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c", - "source_contract_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "evidence_bundle_sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83", + "source_contract_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "output_case_count": 5, "failure_disclosure_count": 3, "command_count": 21, @@ -1356,11 +1356,11 @@ "world_class_source_pass_count": 6, "world_class_source_blocked_count": 7, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": false, - "changed_file_count": 0 + "public_claim_blocker_count": 5, + "working_tree_dirty": true, + "changed_file_count": 14 }, - "commit": "a39964faef674746a31363db2215460cff9e1931", + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "missing_artifacts": [], "limitations": [ "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.", @@ -1444,9 +1444,9 @@ "failures": [] }, "trust_security": { - "scanned_files": 182, - "script_count": 98, - "internal_module_count": 21, + "scanned_files": 183, + "script_count": 99, + "internal_module_count": 22, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -1464,8 +1464,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 182, - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_hash_file_count": 183, + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" }, "skill_atlas": { "skill_count": 12, @@ -1503,8 +1503,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -1535,7 +1535,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1551,8 +1551,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", - "archive_entry_count": 577, + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", + "archive_entry_count": 579, "failure_count": 0, "warning_count": 0 }, @@ -1563,7 +1563,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 577, + "archive_entry_count": 579, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1630,12 +1630,12 @@ { "field": "archive_sha256", "from": "", - "to": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "to": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "to": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, @@ -3967,7 +3967,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.93, + "duration_ms": 31.59, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -3995,7 +3995,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.0, + "duration_ms": 32.08, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4018,7 +4018,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 33.51, + "duration_ms": 33.46, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4046,7 +4046,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 32.06, + "duration_ms": 35.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4069,7 +4069,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 30.08, + "duration_ms": 31.18, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4097,7 +4097,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.69, + "duration_ms": 31.3, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4120,7 +4120,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.64, + "duration_ms": 31.55, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4147,7 +4147,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 29.79, + "duration_ms": 31.32, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4170,7 +4170,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 28.87, + "duration_ms": 31.75, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4199,7 +4199,7 @@ "execution_mode": "command", "model_executed": false, "command_executed": true, - "duration_ms": 31.79, + "duration_ms": 32.17, "provider": "local-output-eval-runner", "model": "", "usage": { @@ -4920,23 +4920,36 @@ "ok": true, "generated_at": "2026-06-14", "skill_dir": ".", - "commit": "a39964faef674746a31363db2215460cff9e1931", + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "git_status": { "available": true, - "dirty": false, - "changed_file_count": 0, - "sample": [], + "dirty": true, + "changed_file_count": 14, + "sample": [ + " M registry/index.json", + " M registry/packages/yao-meta-skill.json", + " M reports/install_simulation.json", + " M reports/output_execution_runs.json", + " M reports/output_execution_runs.md", + " M reports/package_verification.json", + " M reports/package_verification.md", + " M reports/registry_audit.json", + " M reports/registry_audit.md", + " M reports/security_trust_report.json", + " M reports/security_trust_report.md", + " M reports/skill_os2_coverage.json" + ], "scope": "generation-time status before this report is written" }, "summary": { "reproducibility_ready": true, - "release_lock_ready": true, + "release_lock_ready": false, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, - "evidence_bundle_sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c", - "source_contract_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "evidence_bundle_sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83", + "source_contract_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "output_case_count": 5, "failure_disclosure_count": 3, "command_count": 21, @@ -4954,14 +4967,15 @@ "world_class_source_pass_count": 6, "world_class_source_blocked_count": 7, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": false, - "changed_file_count": 0 + "public_claim_blocker_count": 5, + "working_tree_dirty": true, + "changed_file_count": 14 }, "public_claim": { "ready": false, "scope": "public benchmark or world-class readiness claim", "blockers": [ + "release lock is not clean or commit is unavailable", "provider-backed model holdout evidence is incomplete", "human blind-review adjudication is incomplete", "world-class evidence is not accepted yet (4 open gaps, 4 ledger pending)", @@ -4970,10 +4984,10 @@ "policy": "Local reproducibility can pass before public claims; public claims require provider evidence, human adjudication, clean release lock, accepted world-class evidence, and complete source checks." }, "release_lock": { - "ready": true, - "commit": "a39964faef674746a31363db2215460cff9e1931", + "ready": false, + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "status_scope": "generation-time status before this report is written", - "reason": "clean generation-time HEAD" + "reason": "working tree was dirty at generation time" }, "evidence_bundle": { "algorithm": "sha256(path,label,exists,artifact_sha256)", @@ -4981,7 +4995,7 @@ "existing_count": 24, "missing_count": 0, "missing_paths": [], - "sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c" + "sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83" }, "methodology": { "path": "reports/benchmark_methodology.md", @@ -5055,7 +5069,7 @@ "path": "reports/output_execution_runs.json", "exists": true, "bytes": 7966, - "sha256": "ae868a54cec479c2427de198bd33ab871d553855ccd41527f7bd08a795dcc512" + "sha256": "a59b750aebed61481e2fa9a66bd196f1a8c87e5d5857c4e615c85eab156594ad" }, { "label": "blind_review", @@ -5089,8 +5103,8 @@ "label": "trust_report", "path": "reports/security_trust_report.json", "exists": true, - "bytes": 99433, - "sha256": "a49ddfd11d3e4a9c54973547f25a9673f49446005d64165140a4df5c9f42f395" + "bytes": 100003, + "sha256": "0415c413f6f024e413df0afb4adea17e2c2efc1e3a37d2e8689e6a05241e153e" }, { "label": "python_compatibility", @@ -5104,21 +5118,21 @@ "path": "reports/registry_audit.json", "exists": true, "bytes": 3183, - "sha256": "2c7799ff267bd856bd244e59160d01ea98b3cf11b1af966e02009c59141ab56f" + "sha256": "a3e00a3b9653da411f20ec24d488067efca021d1270b528f8e2facd1e9ddf743" }, { "label": "package_verification", "path": "reports/package_verification.json", "exists": true, "bytes": 19325, - "sha256": "22c585f95229deebc627b5a103ae2bbfbf9c678535e2048f3472b373a70877c6" + "sha256": "3ca24a8ae4b7a3ab68398022754abdec97a5a4b8d451b969d9e7d062244a9617" }, { "label": "install_simulation", "path": "reports/install_simulation.json", "exists": true, "bytes": 8604, - "sha256": "1ed7ce5266c2dd7ee8daf83a3a5c65cdb69ade1567a33b88b77b619d3f5afa16" + "sha256": "f0d1820d3da26ebc93187b64ec0cde14fa32cbef47dc865dd96200e43e9767b4" }, { "label": "skill_os2_audit", @@ -5432,7 +5446,7 @@ "label": "Trust Security", "status": "pass", "objective": "Scripts, dependencies, permissions, secrets, and package hash are reviewable for team distribution.", - "current": "98 scripts; secrets 0; help failures 0", + "current": "99 scripts; secrets 0; help failures 0", "command": "python3 scripts/yao.py trust .", "test": "python3 tests/verify_trust_check.py", "evidence": [ @@ -5506,7 +5520,7 @@ "label": "Registry Distribution", "status": "pass", "objective": "Skill packages are installable, versioned, checksumed, and upgrade-reviewable.", - "current": "archive entries 577; install failures 0", + "current": "archive entries 579; install failures 0", "command": "python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .", "test": "python3 tests/verify_registry_audit.py", "evidence": [ @@ -10792,9 +10806,9 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 182, - "script_count": 98, - "internal_module_count": 21, + "scanned_files": 183, + "script_count": 99, + "internal_module_count": 22, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -10812,8 +10826,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 182, - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_hash_file_count": 183, + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" }, "failures": [], "warnings": [], @@ -11038,6 +11052,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/html_rendering.py", + "interface": "internal-module", + "interface_declared": true, + "interface_reason": "Used by report renderers to escape HTML while preserving meaningful falsey values.", + "has_argparse": false, + "has_main_guard": false, + "uses_input": false, + "uses_network": false, + "uses_file_write": false, + "uses_subprocess": false, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/import_telemetry_events.py", "interface": "cli", @@ -12243,7 +12271,7 @@ "checked_count": 77, "passed_count": 77, "failed_count": 0, - "skipped_count": 21, + "skipped_count": 22, "failed_scripts": [], "results": [ { @@ -13018,6 +13046,10 @@ } ], "skipped": [ + { + "path": "scripts/html_rendering.py", + "reason": "internal module" + }, { "path": "scripts/review_studio_actions.py", "reason": "internal module" @@ -18427,8 +18459,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -18459,7 +18491,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -18484,7 +18516,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, @@ -18507,8 +18539,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", - "archive_entry_count": 577, + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", + "archive_entry_count": 579, "failure_count": 0, "warning_count": 0 }, @@ -19173,7 +19205,7 @@ "installed_skill_dir": "dist/install-simulation/simulate-yao-meta-skill/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 577, + "archive_entry_count": 579, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -19515,12 +19547,12 @@ { "field": "archive_sha256", "from": "", - "to": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "to": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "to": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, diff --git a/reports/review-viewer.json b/reports/review-viewer.json index e57a168..d7ac7d5 100644 --- a/reports/review-viewer.json +++ b/reports/review-viewer.json @@ -438,7 +438,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -453,7 +453,7 @@ "file_count": 203 } ], - "file_count": 365, + "file_count": 366, "folder_count": 4, "distribution": [ { @@ -478,7 +478,7 @@ }, { "label": "scripts", - "value": 98 + "value": 99 }, { "label": "evals", @@ -607,7 +607,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -919,13 +919,13 @@ "ok": true, "summary": { "reproducibility_ready": true, - "release_lock_ready": true, + "release_lock_ready": false, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, - "evidence_bundle_sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c", - "source_contract_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "evidence_bundle_sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83", + "source_contract_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "output_case_count": 5, "failure_disclosure_count": 3, "command_count": 21, @@ -943,11 +943,11 @@ "world_class_source_pass_count": 6, "world_class_source_blocked_count": 7, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": false, - "changed_file_count": 0 + "public_claim_blocker_count": 5, + "working_tree_dirty": true, + "changed_file_count": 14 }, - "commit": "a39964faef674746a31363db2215460cff9e1931", + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "missing_artifacts": [], "limitations": [ "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.", @@ -1031,9 +1031,9 @@ "failures": [] }, "trust_security": { - "scanned_files": 182, - "script_count": 98, - "internal_module_count": 21, + "scanned_files": 183, + "script_count": 99, + "internal_module_count": 22, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -1051,8 +1051,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 182, - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_hash_file_count": 183, + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" }, "skill_atlas": { "skill_count": 12, @@ -1090,8 +1090,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -1122,7 +1122,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1138,8 +1138,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", - "archive_entry_count": 577, + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", + "archive_entry_count": 579, "failure_count": 0, "warning_count": 0 }, @@ -1150,7 +1150,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 577, + "archive_entry_count": 579, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1217,12 +1217,12 @@ { "field": "archive_sha256", "from": "", - "to": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "to": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "to": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, diff --git a/reports/security_trust_report.json b/reports/security_trust_report.json index 6a68cc2..80addf0 100644 --- a/reports/security_trust_report.json +++ b/reports/security_trust_report.json @@ -2,9 +2,9 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 182, - "script_count": 98, - "internal_module_count": 21, + "scanned_files": 183, + "script_count": 99, + "internal_module_count": 22, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -22,8 +22,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 182, - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_hash_file_count": 183, + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" }, "failures": [], "warnings": [], @@ -248,6 +248,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/html_rendering.py", + "interface": "internal-module", + "interface_declared": true, + "interface_reason": "Used by report renderers to escape HTML while preserving meaningful falsey values.", + "has_argparse": false, + "has_main_guard": false, + "uses_input": false, + "uses_network": false, + "uses_file_write": false, + "uses_subprocess": false, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/import_telemetry_events.py", "interface": "cli", @@ -1453,7 +1467,7 @@ "checked_count": 77, "passed_count": 77, "failed_count": 0, - "skipped_count": 21, + "skipped_count": 22, "failed_scripts": [], "results": [ { @@ -2228,6 +2242,10 @@ } ], "skipped": [ + { + "path": "scripts/html_rendering.py", + "reason": "internal module" + }, { "path": "scripts/review_studio_actions.py", "reason": "internal module" diff --git a/reports/security_trust_report.md b/reports/security_trust_report.md index 6bd6398..dfd8a6e 100644 --- a/reports/security_trust_report.md +++ b/reports/security_trust_report.md @@ -1,9 +1,9 @@ # Security Trust Report - OK: `True` -- Scanned files: `182` -- Scripts: `98` -- Internal script modules: `21` +- Scanned files: `183` +- Scripts: `99` +- Internal script modules: `22` - Secret findings: `0` - Network-capable scripts: `3` - Network policy covered scripts: `3` @@ -15,8 +15,8 @@ - CLI help smoke failures: `0` - Interactive scripts: `0` - Package hash scope: `source-contract-without-generated-reports` -- Package hash files: `182` -- Package SHA256: `2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2` +- Package hash files: `183` +- Package SHA256: `23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed` ## Failures @@ -77,6 +77,7 @@ | scripts/export_skill_ir.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/github_benchmark_scan.py | cli | False | True | True | False | True | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/governance_check.py | cli | False | True | True | False | False | False | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | +| scripts/html_rendering.py | internal-module | True | False | False | False | False | False | False | Used by report renderers to escape HTML while preserving meaningful falsey values. | | scripts/import_telemetry_events.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/init_skill.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/judge_blind_eval.py | cli | False | True | True | False | False | False | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | diff --git a/reports/skill-overview.html b/reports/skill-overview.html index 275eba7..02fcf4e 100644 --- a/reports/skill-overview.html +++ b/reports/skill-overview.html @@ -771,7 +771,7 @@

让 reviewer 快速确认关键文件、目录和资产分布。Lets reviewers confirm key files, directories, and asset distribution quickly.

-
资产分布365项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
+
资产分布366项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
diff --git a/reports/skill-overview.json b/reports/skill-overview.json index 22756d1..49c3608 100644 --- a/reports/skill-overview.json +++ b/reports/skill-overview.json @@ -437,7 +437,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -452,7 +452,7 @@ "file_count": 203 } ], - "file_count": 365, + "file_count": 366, "folder_count": 4, "distribution": [ { @@ -477,7 +477,7 @@ }, { "label": "scripts", - "value": 98 + "value": 99 }, { "label": "evals", @@ -606,7 +606,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 98 + "file_count": 99 }, { "path": "evals", @@ -918,13 +918,13 @@ "ok": true, "summary": { "reproducibility_ready": true, - "release_lock_ready": true, + "release_lock_ready": false, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, - "evidence_bundle_sha256": "afc5bc7f282664d81209118651c4dbec918f745eb3d2ef4d52570b26c9c3aa9c", - "source_contract_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "evidence_bundle_sha256": "0b7c79cf4a585bdbd7acd1b328fb6dbceee35ef27999e609b0cf0a2e3c2ece83", + "source_contract_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "output_case_count": 5, "failure_disclosure_count": 3, "command_count": 21, @@ -942,11 +942,11 @@ "world_class_source_pass_count": 6, "world_class_source_blocked_count": 7, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": false, - "changed_file_count": 0 + "public_claim_blocker_count": 5, + "working_tree_dirty": true, + "changed_file_count": 14 }, - "commit": "a39964faef674746a31363db2215460cff9e1931", + "commit": "6f5f4db4a79c6178a7621f750063b6840e129fd8", "missing_artifacts": [], "limitations": [ "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.", @@ -1030,9 +1030,9 @@ "failures": [] }, "trust_security": { - "scanned_files": 182, - "script_count": 98, - "internal_module_count": 21, + "scanned_files": 183, + "script_count": 99, + "internal_module_count": 22, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -1050,8 +1050,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 182, - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "package_hash_file_count": 183, + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" }, "skill_atlas": { "skill_count": 12, @@ -1089,8 +1089,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2", - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "package_sha256": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, "compatibility": { "openai": "pass", @@ -1121,7 +1121,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1137,8 +1137,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943", - "archive_entry_count": 577, + "archive_sha256": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc", + "archive_entry_count": 579, "failure_count": 0, "warning_count": 0 }, @@ -1149,7 +1149,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 577, + "archive_entry_count": 579, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1216,12 +1216,12 @@ { "field": "archive_sha256", "from": "", - "to": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "to": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "to": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] }, diff --git a/reports/skill_os2_coverage.json b/reports/skill_os2_coverage.json index eec2f10..c35ba72 100644 --- a/reports/skill_os2_coverage.json +++ b/reports/skill_os2_coverage.json @@ -122,7 +122,7 @@ "label": "Trust Security", "status": "pass", "objective": "Scripts, dependencies, permissions, secrets, and package hash are reviewable for team distribution.", - "current": "98 scripts; secrets 0; help failures 0", + "current": "99 scripts; secrets 0; help failures 0", "command": "python3 scripts/yao.py trust .", "test": "python3 tests/verify_trust_check.py", "evidence": [ @@ -196,7 +196,7 @@ "label": "Registry Distribution", "status": "pass", "objective": "Skill packages are installable, versioned, checksumed, and upgrade-reviewable.", - "current": "archive entries 577; install failures 0", + "current": "archive entries 579; install failures 0", "command": "python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .", "test": "python3 tests/verify_registry_audit.py", "evidence": [ diff --git a/reports/skill_os2_coverage.md b/reports/skill_os2_coverage.md index 3a60763..d85778a 100644 --- a/reports/skill_os2_coverage.md +++ b/reports/skill_os2_coverage.md @@ -21,9 +21,9 @@ This report maps the Skill OS 2.0 upgrade blueprint to concrete local artifacts, | Skill IR | `pass` | schema 2.0.0; targets 5 | `python3 scripts/yao.py skill-ir .` | `python3 tests/verify_skill_ir.py` | | Output Eval Lab | `pass` | 5 cases; delta 100.0; execution 10 | `python3 scripts/yao.py output-exec . && python3 scripts/yao.py output-review .` | `python3 tests/verify_output_eval_lab.py` | | Runtime Conformance | `pass` | 5/5 targets pass | `python3 scripts/yao.py conformance .` | `python3 tests/verify_conformance_suite.py` | -| Trust Security | `pass` | 98 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | +| Trust Security | `pass` | 99 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | | Skill Atlas | `pass` | 12 scanned skills; actionable collisions 0 | `python3 scripts/yao.py skill-atlas --workspace-root .` | `python3 tests/verify_skill_atlas.py` | -| Registry Distribution | `pass` | archive entries 577; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | +| Registry Distribution | `pass` | archive entries 579; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | | Review Studio | `pass` | 16 gates; decision review; warnings 3 | `python3 scripts/yao.py review-studio .` | `python3 tests/verify_review_studio.py` | | Telemetry Drift | `pass` | events 1; recipes 5; risk low | `python3 scripts/yao.py telemetry-hooks . && python3 scripts/yao.py adoption-drift .` | `python3 tests/verify_telemetry_hooks.py` | diff --git a/reports/upgrade_check.json b/reports/upgrade_check.json index da3faea..afb7bdc 100644 --- a/reports/upgrade_check.json +++ b/reports/upgrade_check.json @@ -70,12 +70,12 @@ { "field": "archive_sha256", "from": "", - "to": "581db0878142fdd7e63c2ff0e229d97e6a860986cd526ab8951a56993dae9943" + "to": "2a3600e27e24fc5799cce599f82763f78bbc6a682a96f08ecd9034f4510344bc" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "2e0e0877e481b2ffcf329c979d47c96a6be31858d091d6210624fed9154c72f2" + "to": "23d757678bc61e183af53ac0724e02f44128857f51481984e6b6ffe6575fdfed" } ] },
路径Path作用Role类型Type
SKILL.mdSkill 入口文件Skill entrypoint文件file
README.md人类可读使用说明Human-readable usage guide文件file
agents/interface.yaml跨平台接口元数据Neutral interface metadata文件file
manifest.json生命周期与打包元数据Lifecycle and portability metadata文件file
references扩展指导与复用资料Extended guidance and reusable notes目录folder
scripts确定性脚本或本地工具Deterministic helpers or local tooling目录folder
evals触发与质量检查Trigger and quality checks目录folder
reports生成的证据与总结报告Generated evidence and overview artifacts目录folder