From 78f94e47fd7ab999fdfc6d18ffb9917cf8848dba Mon Sep 17 00:00:00 2001 From: yaojingang Date: Sun, 14 Jun 2026 11:33:51 +0800 Subject: [PATCH] docs: refresh review studio waiver evidence --- registry/index.json | 2 +- registry/packages/yao-meta-skill.json | 6 ++-- reports/architecture_maintainability.json | 20 +++++------ reports/architecture_maintainability.md | 8 ++--- reports/compiled_targets.json | 2 +- reports/context_budget.json | 20 +++++------ reports/context_budget.md | 2 +- reports/context_budget_summary.json | 10 +++--- reports/install_simulation.json | 2 +- reports/package_verification.json | 4 +-- reports/package_verification.md | 2 +- reports/python_compatibility.json | 8 ++++- reports/python_compatibility.md | 2 +- reports/registry_audit.json | 8 ++--- reports/registry_audit.md | 4 +-- reports/security_trust_report.json | 30 ++++++++++++---- reports/security_trust_report.md | 11 +++--- reports/skill-overview.html | 2 +- reports/skill-overview.json | 44 +++++++++++------------ reports/skill_atlas.json | 1 + reports/skill_os2_audit.json | 4 +-- reports/skill_os2_audit.md | 4 +-- reports/skill_os2_coverage.json | 4 +-- reports/skill_os2_coverage.md | 4 +-- reports/upgrade_check.json | 4 +-- skill_atlas/catalog.json | 1 + 26 files changed, 118 insertions(+), 91 deletions(-) diff --git a/registry/index.json b/registry/index.json index 24498389..97d463d1 100644 --- a/registry/index.json +++ b/registry/index.json @@ -16,7 +16,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" } ] } diff --git a/registry/packages/yao-meta-skill.json b/registry/packages/yao-meta-skill.json index e8ca550a..90be1812 100644 --- a/registry/packages/yao-meta-skill.json +++ b/registry/packages/yao-meta-skill.json @@ -16,8 +16,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca", - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa" + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8" }, "compatibility": { "openai": "pass", @@ -48,7 +48,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" diff --git a/reports/architecture_maintainability.json b/reports/architecture_maintainability.json index 9f02b0e8..6bd41b0e 100644 --- a/reports/architecture_maintainability.json +++ b/reports/architecture_maintainability.json @@ -4,10 +4,10 @@ "generated_at": "2026-06-14", "skill_dir": ".", "summary": { - "python_file_count": 155, - "script_file_count": 96, + "python_file_count": 156, + "script_file_count": 97, "test_file_count": 59, - "internal_module_count": 22, + "internal_module_count": 23, "cli_script_count": 76, "command_handler_count": 34, "warn_line_threshold": 900, @@ -81,6 +81,13 @@ "severity": "pass", "recommendation": "Watch this file before adding new responsibilities; extract a helper module when one concern dominates." }, + { + "path": "tests/verify_review_studio.py", + "lines": 674, + "kind": "test", + "severity": "pass", + "recommendation": "Break broad integration assertions into focused verifier helpers when the next behavior change lands." + }, { "path": "scripts/skill_report_layout.py", "lines": 653, @@ -88,13 +95,6 @@ "severity": "pass", "recommendation": "Watch this file before adding new responsibilities; extract a helper module when one concern dominates." }, - { - "path": "tests/verify_review_studio.py", - "lines": 647, - "kind": "test", - "severity": "pass", - "recommendation": "Break broad integration assertions into focused verifier helpers when the next behavior change lands." - }, { "path": "scripts/render_reference_synthesis.py", "lines": 644, diff --git a/reports/architecture_maintainability.md b/reports/architecture_maintainability.md index 828eebd7..bf55d65b 100644 --- a/reports/architecture_maintainability.md +++ b/reports/architecture_maintainability.md @@ -5,10 +5,10 @@ Generated at: `2026-06-14` ## Summary - decision: `pass` -- python files: `155` -- scripts: `96` +- python files: `156` +- scripts: `97` - tests: `59` -- internal modules: `22` +- internal modules: `23` - CLI scripts: `76` - Yao CLI command handlers: `34` - largest file lines: `888` @@ -34,8 +34,8 @@ No file-size hotspots found. | `scripts/trust_check.py` | `714` | `internal-module` | `pass` | | `scripts/render_review_viewer.py` | `685` | `cli-script` | `pass` | | `scripts/build_skill_atlas.py` | `674` | `cli-script` | `pass` | +| `tests/verify_review_studio.py` | `674` | `test` | `pass` | | `scripts/skill_report_layout.py` | `653` | `internal-module` | `pass` | -| `tests/verify_review_studio.py` | `647` | `test` | `pass` | | `scripts/render_reference_synthesis.py` | `644` | `cli-script` | `pass` | ## Release Rule diff --git a/reports/compiled_targets.json b/reports/compiled_targets.json index fddc3890..32a31912 100644 --- a/reports/compiled_targets.json +++ b/reports/compiled_targets.json @@ -1,7 +1,7 @@ { "schema_version": "1.0", "ok": true, - "generated_at": "2026-06-13", + "generated_at": "2026-06-14", "skill_dir": ".", "summary": { "target_count": 5, diff --git a/reports/context_budget.json b/reports/context_budget.json index 94835d24..7fafd0a1 100644 --- a/reports/context_budget.json +++ b/reports/context_budget.json @@ -6,16 +6,16 @@ "context_budget_tier": "production", "context_budget_limit": 1000, "skill_body_tokens": 751, - "other_text_tokens": 1195706, + "other_text_tokens": 1201358, "estimated_initial_load_tokens": 944, - "estimated_total_text_tokens": 1196457, - "deferred_resource_tokens": 386007, + "estimated_total_text_tokens": 1202109, + "deferred_resource_tokens": 387121, "deferred_resource_warn_threshold": 120000, "deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 338524, - "file_count": 96 + "estimated_tokens": 339638, + "file_count": 97 }, { "path": "references", @@ -31,8 +31,8 @@ "large_deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 338524, - "file_count": 96 + "estimated_tokens": 339638, + "file_count": 97 } ], "deferred_resource_governance": { @@ -54,14 +54,14 @@ ], "missing": [], "path": "scripts", - "estimated_tokens": 338524, - "file_count": 96, + "estimated_tokens": 339638, + "file_count": 97, "rationale": "Script resources are deterministic deferred tools, not initial-load prompt context." } ], "summary": "Large deferred resources are indexed and backed by evidence." }, - "relevant_file_count": 506, + "relevant_file_count": 508, "unused_resource_dirs": [], "quality_signal_points": 130, "quality_density": 137.7 diff --git a/reports/context_budget.md b/reports/context_budget.md index ccaf151b..a5134d2e 100644 --- a/reports/context_budget.md +++ b/reports/context_budget.md @@ -2,7 +2,7 @@ | Target | Path | Tier | Limit | Initial | SKILL | Deferred | Resource Governance | Large Deferred Dirs | Quality Density | Unused Dirs | Status | | --- | --- | --- | ---: | ---: | ---: | ---: | --- | --- | ---: | --- | --- | -| root | `.` | `production` | 1000 | 944 | 751 | 386007 | `governed` | scripts:338524 | 137.7 | - | ok | +| root | `.` | `production` | 1000 | 944 | 751 | 387121 | `governed` | scripts:339638 | 137.7 | - | ok | | complex-release-orchestrator | `examples/complex-release-orchestrator/generated-skill` | `production` | 1000 | 790 | 718 | 1657 | `not-required` | - | 164.6 | - | ok | | governed-incident-command | `examples/governed-incident-command/generated-skill` | `production` | 1000 | 760 | 658 | 1030 | `not-required` | - | 171.1 | - | ok | diff --git a/reports/context_budget_summary.json b/reports/context_budget_summary.json index 0730989f..b6bde37d 100644 --- a/reports/context_budget_summary.json +++ b/reports/context_budget_summary.json @@ -8,12 +8,12 @@ "budget_limit": 1000, "initial_tokens": 944, "skill_body_tokens": 751, - "deferred_resource_tokens": 386007, + "deferred_resource_tokens": 387121, "large_deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 338524, - "file_count": 96 + "estimated_tokens": 339638, + "file_count": 97 } ], "deferred_resource_governance": { @@ -35,8 +35,8 @@ ], "missing": [], "path": "scripts", - "estimated_tokens": 338524, - "file_count": 96, + "estimated_tokens": 339638, + "file_count": 97, "rationale": "Script resources are deterministic deferred tools, not initial-load prompt context." } ], diff --git a/reports/install_simulation.json b/reports/install_simulation.json index be32b237..9932c69f 100644 --- a/reports/install_simulation.json +++ b/reports/install_simulation.json @@ -8,7 +8,7 @@ "installed_skill_dir": "dist/install-simulation/simulate-yao-meta-skill/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 575, + "archive_entry_count": 576, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, diff --git a/reports/package_verification.json b/reports/package_verification.json index 5c91a131..cf8bf3c5 100644 --- a/reports/package_verification.json +++ b/reports/package_verification.json @@ -8,8 +8,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa", - "archive_entry_count": 575, + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8", + "archive_entry_count": 576, "failure_count": 0, "warning_count": 0 }, diff --git a/reports/package_verification.md b/reports/package_verification.md index 10bdb868..c9bc5865 100644 --- a/reports/package_verification.md +++ b/reports/package_verification.md @@ -4,7 +4,7 @@ - Package directory: `dist` - Targets: `4 / 4` adapters present - Archive present: `True` -- Archive SHA256: `afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa` +- Archive SHA256: `0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8` - Failures: `0` - Warnings: `0` diff --git a/reports/python_compatibility.json b/reports/python_compatibility.json index dedac11f..f70fb9b4 100644 --- a/reports/python_compatibility.json +++ b/reports/python_compatibility.json @@ -5,7 +5,7 @@ "root": ".", "summary": { "target_python": "3.11", - "file_count": 158, + "file_count": 159, "issue_count": 0, "syntax_error_count": 0, "fstring_311_violation_count": 0, @@ -454,6 +454,12 @@ "issue_count": 0, "issues": [] }, + { + "path": "scripts/review_studio_waivers.py", + "ok": true, + "issue_count": 0, + "issues": [] + }, { "path": "scripts/review_studio_world_class.py", "ok": true, diff --git a/reports/python_compatibility.md b/reports/python_compatibility.md index a63fbd60..8f0e1c69 100644 --- a/reports/python_compatibility.md +++ b/reports/python_compatibility.md @@ -6,7 +6,7 @@ Generated at: `2026-06-14` - decision: `pass` - target python: `3.11` -- files scanned: `158` +- files scanned: `159` - issues: `0` - syntax errors: `0` - f-string 3.11 violations: `0` diff --git a/reports/registry_audit.json b/reports/registry_audit.json index c536ce55..9b890c07 100644 --- a/reports/registry_audit.json +++ b/reports/registry_audit.json @@ -21,8 +21,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca", - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa" + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8" }, "compatibility": { "openai": "pass", @@ -53,7 +53,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -78,7 +78,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" } ] }, diff --git a/reports/registry_audit.md b/reports/registry_audit.md index 4ac5f459..d4f61e51 100644 --- a/reports/registry_audit.md +++ b/reports/registry_audit.md @@ -6,8 +6,8 @@ - Maturity: `governed` - Owner: `Yao Team` - License: `MIT` -- Package SHA256: `e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca` -- Archive SHA256: `afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa` +- Package SHA256: `e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f` +- Archive SHA256: `0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8` - Install simulated: `True` ## Compatibility diff --git a/reports/security_trust_report.json b/reports/security_trust_report.json index 8eb5588d..1214455c 100644 --- a/reports/security_trust_report.json +++ b/reports/security_trust_report.json @@ -2,9 +2,9 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 180, - "script_count": 96, - "internal_module_count": 19, + "scanned_files": 181, + "script_count": 97, + "internal_module_count": 20, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -22,8 +22,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 180, - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "package_hash_file_count": 181, + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" }, "failures": [], "warnings": [], @@ -1012,6 +1012,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/review_studio_waivers.py", + "interface": "internal-module", + "interface_declared": true, + "interface_reason": "Imported by render_review_studio.py to keep waiver candidate layout out of the main renderer.", + "has_argparse": false, + "has_main_guard": false, + "uses_input": false, + "uses_network": false, + "uses_file_write": false, + "uses_subprocess": false, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/review_studio_world_class.py", "interface": "internal-module", @@ -1425,7 +1439,7 @@ "checked_count": 77, "passed_count": 77, "failed_count": 0, - "skipped_count": 19, + "skipped_count": 20, "failed_scripts": [], "results": [ { @@ -2224,6 +2238,10 @@ "path": "scripts/review_studio_output_review.py", "reason": "internal module" }, + { + "path": "scripts/review_studio_waivers.py", + "reason": "internal module" + }, { "path": "scripts/review_studio_world_class.py", "reason": "internal module" diff --git a/reports/security_trust_report.md b/reports/security_trust_report.md index 7b95224c..c8c91cad 100644 --- a/reports/security_trust_report.md +++ b/reports/security_trust_report.md @@ -1,9 +1,9 @@ # Security Trust Report - OK: `True` -- Scanned files: `180` -- Scripts: `96` -- Internal script modules: `19` +- Scanned files: `181` +- Scripts: `97` +- Internal script modules: `20` - Secret findings: `0` - Network-capable scripts: `3` - Network policy covered scripts: `3` @@ -15,8 +15,8 @@ - CLI help smoke failures: `0` - Interactive scripts: `0` - Package hash scope: `source-contract-without-generated-reports` -- Package hash files: `180` -- Package SHA256: `e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca` +- Package hash files: `181` +- Package SHA256: `e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f` ## Failures @@ -131,6 +131,7 @@ | scripts/review_studio_gates.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_studio.py to keep Review Studio gate evaluation separate from HTML rendering. | | scripts/review_studio_layout.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_studio.py to keep Review Studio layout and CSS out of gate logic. | | scripts/review_studio_output_review.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_studio.py to render output review checklist cards. | +| scripts/review_studio_waivers.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_studio.py to keep waiver candidate layout out of the main renderer. | | scripts/review_studio_world_class.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_studio.py to render world-class evidence cards. | | scripts/review_viewer_data.py | internal-module | True | False | False | False | False | False | False | Imported by render_review_viewer.py to assemble Review Viewer data before HTML rendering. | | scripts/run_conformance_suite.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | diff --git a/reports/skill-overview.html b/reports/skill-overview.html index 494540f1..a8a3ca20 100644 --- a/reports/skill-overview.html +++ b/reports/skill-overview.html @@ -771,7 +771,7 @@

让 reviewer 快速确认关键文件、目录和资产分布。Lets reviewers confirm key files, directories, and asset distribution quickly.

-
资产分布363项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
+
资产分布364项SKILL.mdREADME.mdagents/interface.yamlmanifest.jsonreferencesscripts
资产分布图展示当前包体的文件和目录重心。
diff --git a/reports/skill-overview.json b/reports/skill-overview.json index e7b0cd54..3f3f3d9c 100644 --- a/reports/skill-overview.json +++ b/reports/skill-overview.json @@ -437,7 +437,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 96 + "file_count": 97 }, { "path": "evals", @@ -452,7 +452,7 @@ "file_count": 203 } ], - "file_count": 363, + "file_count": 364, "folder_count": 4, "distribution": [ { @@ -477,7 +477,7 @@ }, { "label": "scripts", - "value": 96 + "value": 97 }, { "label": "evals", @@ -606,7 +606,7 @@ "path": "scripts", "label": "Deterministic helpers or local tooling", "kind": "folder", - "file_count": 96 + "file_count": 97 }, { "path": "evals", @@ -918,7 +918,7 @@ "ok": true, "summary": { "reproducibility_ready": true, - "release_lock_ready": false, + "release_lock_ready": true, "methodology_complete": true, "required_artifact_count": 24, "missing_artifact_count": 0, @@ -939,11 +939,11 @@ "world_class_task_count": 4, "world_class_ledger_pending_count": 4, "public_claim_ready": false, - "public_claim_blocker_count": 4, - "working_tree_dirty": true, - "changed_file_count": 14 + "public_claim_blocker_count": 3, + "working_tree_dirty": false, + "changed_file_count": 0 }, - "commit": "17000ab0fd1b93da0c1a27b587036ec53c42bdff", + "commit": "1488957a6cec5bacd9e682ab66836bd47518e29f", "missing_artifacts": [], "limitations": [ "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.", @@ -1027,9 +1027,9 @@ "failures": [] }, "trust_security": { - "scanned_files": 180, - "script_count": 96, - "internal_module_count": 19, + "scanned_files": 181, + "script_count": 97, + "internal_module_count": 20, "secret_findings": 0, "dependency_files": [ "requirements-ci.txt" @@ -1047,8 +1047,8 @@ "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 180, - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "package_hash_file_count": 181, + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" }, "skill_atlas": { "skill_count": 12, @@ -1086,8 +1086,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca", - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa" + "package_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8" }, "compatibility": { "openai": "pass", @@ -1118,7 +1118,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa", + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -1134,8 +1134,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa", - "archive_entry_count": 575, + "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8", + "archive_entry_count": 576, "failure_count": 0, "warning_count": 0 }, @@ -1146,7 +1146,7 @@ "ok": true, "summary": { "archive_present": true, - "archive_entry_count": 575, + "archive_entry_count": 576, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, @@ -1213,12 +1213,12 @@ { "field": "archive_sha256", "from": "", - "to": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa" + "to": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "to": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" } ] }, diff --git a/reports/skill_atlas.json b/reports/skill_atlas.json index b81ae76a..0098e053 100644 --- a/reports/skill_atlas.json +++ b/reports/skill_atlas.json @@ -133,6 +133,7 @@ "scripts/review_studio_gates.py", "scripts/review_studio_layout.py", "scripts/review_studio_output_review.py", + "scripts/review_studio_waivers.py", "scripts/review_studio_world_class.py", "scripts/review_viewer_data.py", "scripts/run_conformance_suite.py", diff --git a/reports/skill_os2_audit.json b/reports/skill_os2_audit.json index b27281a8..3f294d80 100644 --- a/reports/skill_os2_audit.json +++ b/reports/skill_os2_audit.json @@ -197,7 +197,7 @@ "key": "trust-security", "label": "Trust Security", "status": "pass", - "current": "secrets 0; scripts 96; help failures 0", + "current": "secrets 0; scripts 97; help failures 0", "target": "Secrets, scripts, dependencies, permissions, and package hash are reviewable", "evidence": [ { @@ -285,7 +285,7 @@ "key": "registry-distribution", "label": "Registry Distribution", "status": "pass", - "current": "zip entries 575; install failures 0; permission failures 0", + "current": "zip entries 576; install failures 0; permission failures 0", "target": "Package metadata, archive checksum, package verification, and install simulation pass", "evidence": [ { diff --git a/reports/skill_os2_audit.md b/reports/skill_os2_audit.md index b44f2264..f09ab071 100644 --- a/reports/skill_os2_audit.md +++ b/reports/skill_os2_audit.md @@ -23,11 +23,11 @@ Generated at: `2026-06-14` | Human Adjudication | human-required | 0/5 decisions; pending 5 | Real reviewer decisions recorded before claiming output review completion | Record real A/B choices in the decision template, then regenerate adjudication. | | Benchmark Reproducibility | pass | artifacts 24; missing 0; failures 3 | Public methodology, reproducible commands, required artifacts, and failure disclosure are machine-checkable | Keep the manifest current with every benchmark, package, and release evidence change. | | Runtime Conformance | pass | 5/5 targets pass | Target package structure, metadata, relative paths, and degradation notes pass | Keep target conformance fixtures updated as platform contracts change. | -| Trust Security | pass | secrets 0; scripts 96; help failures 0 | Secrets, scripts, dependencies, permissions, and package hash are reviewable | Keep high-permission approvals scoped, expiring, and target-mapped. | +| Trust Security | pass | secrets 0; scripts 97; help failures 0 | Secrets, scripts, dependencies, permissions, and package hash are reviewable | Keep high-permission approvals scoped, expiring, and target-mapped. | | Permission Metadata | pass | 4/4 target probes pass; metadata fallback 4; installer enforcement 4 | Packaged adapters expose explicit permission metadata, residual risks, and installer enforcement evidence when available | Preserve residual-risk notes until real native enforcement exists. | | Native Permission Enforcement | external-required | native-enforced targets 0; installer-enforced targets 4 | At least one target/client enforces approved permissions at runtime | Integrate a real target-client or external installer runtime guard before claiming native permission enforcement. | | Skill Atlas | pass | 12 skills; actionable collisions 0 | Workspace catalog, route overlap, stale/owner gaps, drift, and no-route opportunities | Feed real drift data into Atlas once client telemetry is installed. | -| Registry Distribution | pass | zip entries 575; install failures 0; permission failures 0 | Package metadata, archive checksum, package verification, and install simulation pass | Regenerate registry after package verification so checksums stay aligned. | +| Registry Distribution | pass | zip entries 576; install failures 0; permission failures 0 | Package metadata, archive checksum, package verification, and install simulation pass | Regenerate registry after package verification so checksums stay aligned. | | Review Studio | pass | decision review; warnings 3; score 91 | One page shows gates, evidence paths, blockers, warnings, actions, waivers, and annotations | Resolve human/external warning gates before claiming full release readiness. | | Telemetry Drift | pass | events 1; risk low; recipes 5 | Local-first metadata-only event contract, aggregate drift report, hook recipes, and import path | Keep raw JSONL out of distributed packages and use aggregate reports for Atlas. | | Native Client Telemetry | external-required | external source events 0; adoption samples 1 | A real Browser/Chrome/provider client sends production metadata events | Install a real client against the native host and import production metadata-only events. | diff --git a/reports/skill_os2_coverage.json b/reports/skill_os2_coverage.json index 5c834951..6588bfb1 100644 --- a/reports/skill_os2_coverage.json +++ b/reports/skill_os2_coverage.json @@ -122,7 +122,7 @@ "label": "Trust Security", "status": "pass", "objective": "Scripts, dependencies, permissions, secrets, and package hash are reviewable for team distribution.", - "current": "96 scripts; secrets 0; help failures 0", + "current": "97 scripts; secrets 0; help failures 0", "command": "python3 scripts/yao.py trust .", "test": "python3 tests/verify_trust_check.py", "evidence": [ @@ -196,7 +196,7 @@ "label": "Registry Distribution", "status": "pass", "objective": "Skill packages are installable, versioned, checksumed, and upgrade-reviewable.", - "current": "archive entries 575; install failures 0", + "current": "archive entries 576; install failures 0", "command": "python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .", "test": "python3 tests/verify_registry_audit.py", "evidence": [ diff --git a/reports/skill_os2_coverage.md b/reports/skill_os2_coverage.md index b4de84b4..8c338332 100644 --- a/reports/skill_os2_coverage.md +++ b/reports/skill_os2_coverage.md @@ -21,9 +21,9 @@ This report maps the Skill OS 2.0 upgrade blueprint to concrete local artifacts, | Skill IR | `pass` | schema 2.0.0; targets 5 | `python3 scripts/yao.py skill-ir .` | `python3 tests/verify_skill_ir.py` | | Output Eval Lab | `pass` | 5 cases; delta 100.0; execution 10 | `python3 scripts/yao.py output-exec . && python3 scripts/yao.py output-review .` | `python3 tests/verify_output_eval_lab.py` | | Runtime Conformance | `pass` | 5/5 targets pass | `python3 scripts/yao.py conformance .` | `python3 tests/verify_conformance_suite.py` | -| Trust Security | `pass` | 96 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | +| Trust Security | `pass` | 97 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | | Skill Atlas | `pass` | 12 scanned skills; actionable collisions 0 | `python3 scripts/yao.py skill-atlas --workspace-root .` | `python3 tests/verify_skill_atlas.py` | -| Registry Distribution | `pass` | archive entries 575; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | +| Registry Distribution | `pass` | archive entries 576; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | | Review Studio | `pass` | 16 gates; decision review; warnings 3 | `python3 scripts/yao.py review-studio .` | `python3 tests/verify_review_studio.py` | | Telemetry Drift | `pass` | events 1; recipes 5; risk low | `python3 scripts/yao.py telemetry-hooks . && python3 scripts/yao.py adoption-drift .` | `python3 tests/verify_telemetry_hooks.py` | diff --git a/reports/upgrade_check.json b/reports/upgrade_check.json index a71278c6..78e77fa3 100644 --- a/reports/upgrade_check.json +++ b/reports/upgrade_check.json @@ -70,12 +70,12 @@ { "field": "archive_sha256", "from": "", - "to": "afd00946e7ba23d2317d67cd365e31f4434cdc3b7fb6b2f52ff6d635050482aa" + "to": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8" }, { "field": "package_sha256", "from": "0000000000000000000000000000000000000000000000000000000000000000", - "to": "e68243a9ecd99be64ffbc9fccaecbf6ba2453156121feec94b8f85250c6d88ca" + "to": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f" } ] }, diff --git a/skill_atlas/catalog.json b/skill_atlas/catalog.json index 50324891..318d55f5 100644 --- a/skill_atlas/catalog.json +++ b/skill_atlas/catalog.json @@ -89,6 +89,7 @@ "scripts/review_studio_gates.py", "scripts/review_studio_layout.py", "scripts/review_studio_output_review.py", + "scripts/review_studio_waivers.py", "scripts/review_studio_world_class.py", "scripts/review_viewer_data.py", "scripts/run_conformance_suite.py",
路径Path作用Role类型Type
SKILL.mdSkill 入口文件Skill entrypoint文件file
README.md人类可读使用说明Human-readable usage guide文件file
agents/interface.yaml跨平台接口元数据Neutral interface metadata文件file
manifest.json生命周期与打包元数据Lifecycle and portability metadata文件file
references扩展指导与复用资料Extended guidance and reusable notes目录folder
scripts确定性脚本或本地工具Deterministic helpers or local tooling目录folder
evals触发与质量检查Trigger and quality checks目录folder
reports生成的证据与总结报告Generated evidence and overview artifacts目录folder