From b261f089c367a8781cdb1b393d75d9575497c046 Mon Sep 17 00:00:00 2001 From: yaojingang Date: Mon, 15 Jun 2026 23:00:12 +0800 Subject: [PATCH] Refresh adaptive apply evidence --- registry/index.json | 2 +- registry/packages/yao-meta-skill.json | 6 +-- reports/adoption_drift_report.json | 2 +- reports/architecture_maintainability.json | 22 +++++------ reports/architecture_maintainability.md | 10 ++--- reports/context_budget.json | 22 +++++------ reports/context_budget.md | 2 +- reports/context_budget_summary.json | 10 ++--- reports/install_simulation.json | 2 +- reports/package_verification.json | 4 +- reports/package_verification.md | 2 +- reports/python_compatibility.json | 8 +++- reports/python_compatibility.md | 2 +- reports/registry_audit.json | 8 ++-- reports/registry_audit.md | 4 +- reports/security_trust_report.json | 46 ++++++++++++++++++----- reports/security_trust_report.md | 19 +++++----- reports/skill_os2_audit.json | 4 +- reports/skill_os2_audit.md | 4 +- reports/skill_os2_coverage.json | 4 +- reports/skill_os2_coverage.md | 4 +- 21 files changed, 110 insertions(+), 77 deletions(-) diff --git a/registry/index.json b/registry/index.json index 9c2ee29..d8c9966 100644 --- a/registry/index.json +++ b/registry/index.json @@ -16,7 +16,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4" + "package_sha256": "7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff" } ] } diff --git a/registry/packages/yao-meta-skill.json b/registry/packages/yao-meta-skill.json index 7bb7f39..fdb54c9 100644 --- a/registry/packages/yao-meta-skill.json +++ b/registry/packages/yao-meta-skill.json @@ -16,8 +16,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4", - "archive_sha256": "798153ff8e1569408e8f658be5aea1f144ee44bfe4edf658c71d6a2f0275c1c8" + "package_sha256": "7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff", + "archive_sha256": "f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a" }, "compatibility": { "openai": "pass", @@ -48,7 +48,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "798153ff8e1569408e8f658be5aea1f144ee44bfe4edf658c71d6a2f0275c1c8", + "archive_sha256": "f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" diff --git a/reports/adoption_drift_report.json b/reports/adoption_drift_report.json index 0796c3a..4d9a463 100644 --- a/reports/adoption_drift_report.json +++ b/reports/adoption_drift_report.json @@ -1,7 +1,7 @@ { "ok": true, "schema_version": "2.0", - "generated_at": "2026-06-15T14:35:15Z", + "generated_at": "2026-06-15T14:58:53Z", "skill_dir": ".", "privacy_contract": { "storage": "local-first", diff --git a/reports/architecture_maintainability.json b/reports/architecture_maintainability.json index 8117c3a..c16c931 100644 --- a/reports/architecture_maintainability.json +++ b/reports/architecture_maintainability.json @@ -4,12 +4,12 @@ "generated_at": "2026-06-15", "skill_dir": ".", "summary": { - "python_file_count": 172, - "script_file_count": 109, + "python_file_count": 173, + "script_file_count": 110, "test_file_count": 63, "internal_module_count": 31, - "cli_script_count": 80, - "command_handler_count": 63, + "cli_script_count": 81, + "command_handler_count": 64, "entrypoint_command_handler_count": 18, "command_module_count": 6, "warn_line_threshold": 900, @@ -27,6 +27,13 @@ "severity": "pass", "recommendation": "Break broad integration assertions into focused verifier helpers when the next behavior change lands." }, + { + "path": "scripts/yao_cli_parser.py", + "lines": 809, + "kind": "internal-module", + "severity": "pass", + "recommendation": "Watch this file before adding new responsibilities; extract a helper module when one concern dominates." + }, { "path": "scripts/skill_report_layout.py", "lines": 808, @@ -41,13 +48,6 @@ "severity": "pass", "recommendation": "Watch this file before adding new responsibilities; extract a helper module when one concern dominates." }, - { - "path": "scripts/yao_cli_parser.py", - "lines": 784, - "kind": "internal-module", - "severity": "pass", - "recommendation": "Watch this file before adding new responsibilities; extract a helper module when one concern dominates." - }, { "path": "tests/verify_review_studio.py", "lines": 751, diff --git a/reports/architecture_maintainability.md b/reports/architecture_maintainability.md index 1f9437f..c684402 100644 --- a/reports/architecture_maintainability.md +++ b/reports/architecture_maintainability.md @@ -5,12 +5,12 @@ Generated at: `2026-06-15` ## Summary - decision: `pass` -- python files: `172` -- scripts: `109` +- python files: `173` +- scripts: `110` - tests: `63` - internal modules: `31` -- CLI scripts: `80` -- Yao CLI command handlers: `63` +- CLI scripts: `81` +- Yao CLI command handlers: `64` - entrypoint command handlers: `18` - command modules: `6` - largest file lines: `897` @@ -28,9 +28,9 @@ No file-size hotspots found. | File | Lines | Kind | Severity | | --- | ---: | --- | --- | | `tests/verify_yao_cli.py` | `897` | `test` | `pass` | +| `scripts/yao_cli_parser.py` | `809` | `internal-module` | `pass` | | `scripts/skill_report_layout.py` | `808` | `internal-module` | `pass` | | `scripts/skill_report_model.py` | `801` | `internal-module` | `pass` | -| `scripts/yao_cli_parser.py` | `784` | `internal-module` | `pass` | | `tests/verify_review_studio.py` | `751` | `test` | `pass` | | `scripts/compile_skill.py` | `734` | `cli-script` | `pass` | | `scripts/build_skill_atlas.py` | `730` | `cli-script` | `pass` | diff --git a/reports/context_budget.json b/reports/context_budget.json index 2d55b91..e841533 100644 --- a/reports/context_budget.json +++ b/reports/context_budget.json @@ -6,20 +6,20 @@ "context_budget_tier": "production", "context_budget_limit": 1000, "skill_body_tokens": 767, - "other_text_tokens": 1334868, + "other_text_tokens": 1344728, "estimated_initial_load_tokens": 960, - "estimated_total_text_tokens": 1335635, - "deferred_resource_tokens": 421932, + "estimated_total_text_tokens": 1345495, + "deferred_resource_tokens": 427756, "deferred_resource_warn_threshold": 120000, "deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 373342, - "file_count": 109 + "estimated_tokens": 378743, + "file_count": 110 }, { "path": "references", - "estimated_tokens": 26755, + "estimated_tokens": 27178, "file_count": 34 }, { @@ -31,8 +31,8 @@ "large_deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 373342, - "file_count": 109 + "estimated_tokens": 378743, + "file_count": 110 } ], "deferred_resource_governance": { @@ -54,14 +54,14 @@ ], "missing": [], "path": "scripts", - "estimated_tokens": 373342, - "file_count": 109, + "estimated_tokens": 378743, + "file_count": 110, "rationale": "Script resources are deterministic deferred tools, not initial-load prompt context." } ], "summary": "Large deferred resources are indexed and backed by evidence." }, - "relevant_file_count": 554, + "relevant_file_count": 560, "unused_resource_dirs": [], "quality_signal_points": 130, "quality_density": 135.4 diff --git a/reports/context_budget.md b/reports/context_budget.md index 26cce1b..4a3cc2f 100644 --- a/reports/context_budget.md +++ b/reports/context_budget.md @@ -2,7 +2,7 @@ | Target | Path | Tier | Limit | Initial | SKILL | Deferred | Resource Governance | Large Deferred Dirs | Quality Density | Unused Dirs | Status | | --- | --- | --- | ---: | ---: | ---: | ---: | --- | --- | ---: | --- | --- | -| root | `.` | `production` | 1000 | 960 | 767 | 421932 | `governed` | scripts:373342 | 135.4 | - | ok | +| root | `.` | `production` | 1000 | 960 | 767 | 427756 | `governed` | scripts:378743 | 135.4 | - | ok | | complex-release-orchestrator | `examples/complex-release-orchestrator/generated-skill` | `production` | 1000 | 790 | 718 | 1657 | `not-required` | - | 164.6 | - | ok | | governed-incident-command | `examples/governed-incident-command/generated-skill` | `production` | 1000 | 760 | 658 | 1030 | `not-required` | - | 171.1 | - | ok | diff --git a/reports/context_budget_summary.json b/reports/context_budget_summary.json index 1bcc662..7a4b2cf 100644 --- a/reports/context_budget_summary.json +++ b/reports/context_budget_summary.json @@ -8,12 +8,12 @@ "budget_limit": 1000, "initial_tokens": 960, "skill_body_tokens": 767, - "deferred_resource_tokens": 421932, + "deferred_resource_tokens": 427756, "large_deferred_resource_dirs": [ { "path": "scripts", - "estimated_tokens": 373342, - "file_count": 109 + "estimated_tokens": 378743, + "file_count": 110 } ], "deferred_resource_governance": { @@ -35,8 +35,8 @@ ], "missing": [], "path": "scripts", - "estimated_tokens": 373342, - "file_count": 109, + "estimated_tokens": 378743, + "file_count": 110, "rationale": "Script resources are deterministic deferred tools, not initial-load prompt context." } ], diff --git a/reports/install_simulation.json b/reports/install_simulation.json index 9c4f85e..250ab02 100644 --- a/reports/install_simulation.json +++ b/reports/install_simulation.json @@ -8,7 +8,7 @@ "installed_skill_dir": "[temporary-install-root]/yao-meta-skill", "summary": { "archive_present": true, - "archive_entry_count": 609, + "archive_entry_count": 613, "archive_extracted": true, "entrypoint_loaded": true, "manifest_loaded": true, diff --git a/reports/package_verification.json b/reports/package_verification.json index 44d55d1..320109d 100644 --- a/reports/package_verification.json +++ b/reports/package_verification.json @@ -8,8 +8,8 @@ "target_count": 4, "adapter_count": 4, "archive_present": true, - "archive_sha256": "2db3aa6705be239ffef5e1a3d73118fc44f6395c3073d15def3ea587fef71e46", - "archive_entry_count": 609, + "archive_sha256": "f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a", + "archive_entry_count": 613, "failure_count": 0, "warning_count": 0 }, diff --git a/reports/package_verification.md b/reports/package_verification.md index 9ece7c0..521a92b 100644 --- a/reports/package_verification.md +++ b/reports/package_verification.md @@ -4,7 +4,7 @@ - Package directory: `dist` - Targets: `4 / 4` adapters present - Archive present: `True` -- Archive SHA256: `2db3aa6705be239ffef5e1a3d73118fc44f6395c3073d15def3ea587fef71e46` +- Archive SHA256: `f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a` - Failures: `0` - Warnings: `0` diff --git a/reports/python_compatibility.json b/reports/python_compatibility.json index dff01de..71bd68d 100644 --- a/reports/python_compatibility.json +++ b/reports/python_compatibility.json @@ -5,7 +5,7 @@ "root": ".", "summary": { "target_python": "3.11", - "file_count": 175, + "file_count": 176, "issue_count": 0, "syntax_error_count": 0, "fstring_311_violation_count": 0, @@ -46,6 +46,12 @@ "issue_count": 0, "issues": [] }, + { + "path": "scripts/apply_adaptation.py", + "ok": true, + "issue_count": 0, + "issues": [] + }, { "path": "scripts/build_confusion_matrix.py", "ok": true, diff --git a/reports/python_compatibility.md b/reports/python_compatibility.md index bd33500..5381d24 100644 --- a/reports/python_compatibility.md +++ b/reports/python_compatibility.md @@ -6,7 +6,7 @@ Generated at: `2026-06-15` - decision: `pass` - target python: `3.11` -- files scanned: `175` +- files scanned: `176` - issues: `0` - syntax errors: `0` - f-string 3.11 violations: `0` diff --git a/reports/registry_audit.json b/reports/registry_audit.json index d57bcfc..3c179c1 100644 --- a/reports/registry_audit.json +++ b/reports/registry_audit.json @@ -21,8 +21,8 @@ "trust_level": "local", "license": "MIT", "checksums": { - "package_sha256": "76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4", - "archive_sha256": "798153ff8e1569408e8f658be5aea1f144ee44bfe4edf658c71d6a2f0275c1c8" + "package_sha256": "7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff", + "archive_sha256": "f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a" }, "compatibility": { "openai": "pass", @@ -53,7 +53,7 @@ }, "distribution": { "archive_verified": true, - "archive_sha256": "798153ff8e1569408e8f658be5aea1f144ee44bfe4edf658c71d6a2f0275c1c8", + "archive_sha256": "f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a", "package_verification": "reports/package_verification.json", "install_simulated": true, "install_simulation": "reports/install_simulation.json" @@ -78,7 +78,7 @@ "vscode" ], "package_metadata": "registry/packages/yao-meta-skill.json", - "package_sha256": "76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4" + "package_sha256": "7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff" } ] }, diff --git a/reports/registry_audit.md b/reports/registry_audit.md index 5b95bb5..ad26aa4 100644 --- a/reports/registry_audit.md +++ b/reports/registry_audit.md @@ -6,8 +6,8 @@ - Maturity: `governed` - Owner: `Yao Team` - License: `MIT` -- Package SHA256: `76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4` -- Archive SHA256: `798153ff8e1569408e8f658be5aea1f144ee44bfe4edf658c71d6a2f0275c1c8` +- Package SHA256: `7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff` +- Archive SHA256: `f1790c1dd3b98d473a3ae9a9f6ab9d33bda7300e6f74453c2d30d2a8d7ed667a` - Install simulated: `True` ## Compatibility diff --git a/reports/security_trust_report.json b/reports/security_trust_report.json index 820ce0c..c50ee73 100644 --- a/reports/security_trust_report.json +++ b/reports/security_trust_report.json @@ -2,8 +2,8 @@ "ok": true, "skill_dir": ".", "summary": { - "scanned_files": 196, - "script_count": 109, + "scanned_files": 197, + "script_count": 110, "internal_module_count": 28, "secret_findings": 0, "dependency_files": [ @@ -12,18 +12,18 @@ "network_script_count": 3, "network_policy_covered_count": 3, "network_policy_missing_count": 0, - "file_write_script_count": 68, + "file_write_script_count": 69, "permission_required_count": 3, "permission_approved_count": 3, "permission_missing_count": 0, "permission_invalid_count": 0, "permission_expired_count": 0, - "help_smoke_checked_count": 81, + "help_smoke_checked_count": 82, "help_smoke_failed_count": 0, "interactive_script_count": 0, "package_hash_scope": "source-contract-without-generated-reports", - "package_hash_file_count": 196, - "package_sha256": "76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4" + "package_hash_file_count": 197, + "package_sha256": "7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff" }, "failures": [], "warnings": [], @@ -43,6 +43,20 @@ "network_urls": [], "network_hosts": [] }, + { + "path": "scripts/apply_adaptation.py", + "interface": "cli", + "interface_declared": true, + "interface_reason": "Approval-gated adaptive patch application with dry-run, allowlist, regression, and rollback evidence.", + "has_argparse": true, + "has_main_guard": true, + "uses_input": false, + "uses_network": false, + "uses_file_write": true, + "uses_subprocess": true, + "network_urls": [], + "network_hosts": [] + }, { "path": "scripts/build_confusion_matrix.py", "interface": "cli", @@ -1450,7 +1464,7 @@ "path": "scripts/yao_cli_adaptation_commands.py", "interface": "internal-module", "interface_declared": true, - "interface_reason": "Imported by yao.py to keep adaptive scan/proposal command handlers outside the thin CLI orchestrator.", + "interface_reason": "Imported by yao.py to keep adaptive scan/proposal/apply command handlers outside the thin CLI orchestrator.", "has_argparse": true, "has_main_guard": false, "uses_input": false, @@ -1603,9 +1617,9 @@ "help_smoke": { "enabled": true, "timeout_seconds": 5.0, - "candidate_count": 81, - "checked_count": 81, - "passed_count": 81, + "candidate_count": 82, + "checked_count": 82, + "passed_count": 82, "failed_count": 0, "skipped_count": 28, "failed_scripts": [], @@ -1620,6 +1634,16 @@ "stdout_excerpt": "usage: adjudicate_output_review.py [-h] [--blind-pack BLIND_PACK]\n [--answer-key ANSWER_KEY]\n [--decisions DECISIONS]\n [--output-json OUTP", "stderr_excerpt": "" }, + { + "path": "scripts/apply_adaptation.py", + "command": "python3 scripts/apply_adaptation.py --help", + "returncode": 0, + "timed_out": false, + "passed": true, + "has_help_text": true, + "stdout_excerpt": "usage: apply_adaptation.py [-h] [--proposal-id PROPOSAL_ID]\n [--patch-file PATCH_FILE]\n [--proposals-json PROPOSALS_JSON]\n [--approval-ledger APPROVAL_LEDGER]\n ", + "stderr_excerpt": "" + }, { "path": "scripts/build_confusion_matrix.py", "command": "python3 scripts/build_confusion_matrix.py --help", @@ -2589,6 +2613,7 @@ "status": "approved", "scripts": [ "scripts/adjudicate_output_review.py", + "scripts/apply_adaptation.py", "scripts/build_confusion_matrix.py", "scripts/build_skill_atlas.py", "scripts/check_update.py", @@ -2678,6 +2703,7 @@ "capability": "subprocess", "status": "approved", "scripts": [ + "scripts/apply_adaptation.py", "scripts/ci_test.py", "scripts/render_benchmark_reproducibility.py", "scripts/render_eval_dashboard.py", diff --git a/reports/security_trust_report.md b/reports/security_trust_report.md index 161a793..347545a 100644 --- a/reports/security_trust_report.md +++ b/reports/security_trust_report.md @@ -1,22 +1,22 @@ # Security Trust Report - OK: `True` -- Scanned files: `196` -- Scripts: `109` +- Scanned files: `197` +- Scripts: `110` - Internal script modules: `28` - Secret findings: `0` - Network-capable scripts: `3` - Network policy covered scripts: `3` - Network policy missing scripts: `0` -- File-write scripts: `68` +- File-write scripts: `69` - Permission approvals: `3 / 3` - Permission approval gaps: `0` -- CLI help smoke checked: `81` +- CLI help smoke checked: `82` - CLI help smoke failures: `0` - Interactive scripts: `0` - Package hash scope: `source-contract-without-generated-reports` -- Package hash files: `196` -- Package SHA256: `76edc3f9936da8966eff0e0f689568c7d6d787691a45773a3e86bb38be6b0cc4` +- Package hash files: `197` +- Package SHA256: `7334782000ae11f8ab7279a11d34953a2016f8955c96ba0d8a66c312498424ff` ## Failures @@ -54,8 +54,8 @@ - Enabled: `True` - Timeout seconds: `5.0` -- Checked scripts: `81` -- Passed scripts: `81` +- Checked scripts: `82` +- Passed scripts: `82` - Failed scripts: `none` ## Script Surface @@ -63,6 +63,7 @@ | Script | Interface | Declared | Argparse | Main Guard | Input | Network | File Write | Subprocess | Reason | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | scripts/adjudicate_output_review.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | +| scripts/apply_adaptation.py | cli | True | True | True | False | False | True | True | Approval-gated adaptive patch application with dry-run, allowlist, regression, and rollback evidence. | | scripts/build_confusion_matrix.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/build_skill_atlas.py | cli | False | True | True | False | False | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | | scripts/check_update.py | cli | False | True | True | False | True | True | False | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | @@ -162,7 +163,7 @@ | scripts/world_class_evidence_contract.py | internal-module | True | False | False | False | False | False | False | Imported by world-class evidence reports to share intake validation and artifact integrity checks. | | scripts/world_class_source_checks.py | internal-module | True | False | False | False | False | False | False | Imported by world-class evidence reports to keep source-evidence readiness checks consistent. | | scripts/yao.py | cli | False | True | True | False | False | False | True | Default CLI classification; add SCRIPT_INTERFACE for internal modules. | -| scripts/yao_cli_adaptation_commands.py | internal-module | True | True | False | False | False | False | False | Imported by yao.py to keep adaptive scan/proposal command handlers outside the thin CLI orchestrator. | +| scripts/yao_cli_adaptation_commands.py | internal-module | True | True | False | False | False | False | False | Imported by yao.py to keep adaptive scan/proposal/apply command handlers outside the thin CLI orchestrator. | | scripts/yao_cli_config.py | internal-module | True | False | False | False | False | False | False | Imported by yao.py for CLI target maps and side-effect-free shaping helpers. | | scripts/yao_cli_create_commands.py | internal-module | True | True | False | False | False | False | False | Imported by yao.py to keep skill creation and quickstart command handlers out of the CLI orchestrator. | | scripts/yao_cli_distribution_commands.py | internal-module | True | True | False | False | False | False | False | Imported by yao.py to keep distribution and runtime gate handlers outside the thin CLI orchestrator. | diff --git a/reports/skill_os2_audit.json b/reports/skill_os2_audit.json index 2875b4f..a752643 100644 --- a/reports/skill_os2_audit.json +++ b/reports/skill_os2_audit.json @@ -197,7 +197,7 @@ "key": "trust-security", "label": "Trust Security", "status": "pass", - "current": "secrets 0; scripts 109; help failures 0", + "current": "secrets 0; scripts 110; help failures 0", "target": "Secrets, scripts, dependencies, permissions, and package hash are reviewable", "evidence": [ { @@ -285,7 +285,7 @@ "key": "registry-distribution", "label": "Registry Distribution", "status": "pass", - "current": "zip entries 609; install failures 0; permission failures 0", + "current": "zip entries 613; install failures 0; permission failures 0", "target": "Package metadata, archive checksum, package verification, and install simulation pass", "evidence": [ { diff --git a/reports/skill_os2_audit.md b/reports/skill_os2_audit.md index 4e889bb..89da79a 100644 --- a/reports/skill_os2_audit.md +++ b/reports/skill_os2_audit.md @@ -23,11 +23,11 @@ Generated at: `2026-06-15` | Human Adjudication | human-required | 0/5 decisions; pending 5 | Real reviewer decisions recorded before claiming output review completion | Record real A/B choices in the decision template, then regenerate adjudication. | | Benchmark Reproducibility | pass | artifacts 24; missing 0; failures 3 | Public methodology, reproducible commands, required artifacts, and failure disclosure are machine-checkable | Keep the manifest current with every benchmark, package, and release evidence change. | | Runtime Conformance | pass | 5/5 targets pass | Target package structure, metadata, relative paths, and degradation notes pass | Keep target conformance fixtures updated as platform contracts change. | -| Trust Security | pass | secrets 0; scripts 109; help failures 0 | Secrets, scripts, dependencies, permissions, and package hash are reviewable | Keep high-permission approvals scoped, expiring, and target-mapped. | +| Trust Security | pass | secrets 0; scripts 110; help failures 0 | Secrets, scripts, dependencies, permissions, and package hash are reviewable | Keep high-permission approvals scoped, expiring, and target-mapped. | | Permission Metadata | pass | 4/4 target probes pass; metadata fallback 4; installer enforcement 4 | Packaged adapters expose explicit permission metadata, residual risks, and installer enforcement evidence when available | Preserve residual-risk notes until real native enforcement exists. | | Native Permission Enforcement | external-required | native-enforced targets 0; installer-enforced targets 4 | At least one target/client enforces approved permissions at runtime | Integrate a real target-client or external installer runtime guard before claiming native permission enforcement. | | Skill Atlas | pass | 12 skills; actionable collisions 0 | Workspace catalog, route overlap, stale/owner gaps, drift, and no-route opportunities | Feed real drift data into Atlas once client telemetry is installed. | -| Registry Distribution | pass | zip entries 609; install failures 0; permission failures 0 | Package metadata, archive checksum, package verification, and install simulation pass | Regenerate registry after package verification so checksums stay aligned. | +| Registry Distribution | pass | zip entries 613; install failures 0; permission failures 0 | Package metadata, archive checksum, package verification, and install simulation pass | Regenerate registry after package verification so checksums stay aligned. | | Review Studio | pass | decision review; warnings 3; score 91 | One page shows gates, evidence paths, blockers, warnings, actions, waivers, and annotations | Resolve human/external warning gates before claiming full release readiness. | | Telemetry Drift | pass | events 1; risk low; recipes 5 | Local-first metadata-only event contract, aggregate drift report, hook recipes, and import path | Keep raw JSONL out of distributed packages and use aggregate reports for Atlas. | | Native Client Telemetry | external-required | external source events 0; adoption samples 0 | A real Browser/Chrome/provider client sends production metadata events | Install a real client against the native host and import production metadata-only events. | diff --git a/reports/skill_os2_coverage.json b/reports/skill_os2_coverage.json index 15c3913..47e49b7 100644 --- a/reports/skill_os2_coverage.json +++ b/reports/skill_os2_coverage.json @@ -130,7 +130,7 @@ "label": "Trust Security", "status": "pass", "objective": "Scripts, dependencies, permissions, secrets, and package hash are reviewable for team distribution.", - "current": "109 scripts; secrets 0; help failures 0", + "current": "110 scripts; secrets 0; help failures 0", "command": "python3 scripts/yao.py trust .", "test": "python3 tests/verify_trust_check.py", "evidence": [ @@ -204,7 +204,7 @@ "label": "Registry Distribution", "status": "pass", "objective": "Skill packages are installable, versioned, checksumed, and upgrade-reviewable.", - "current": "archive entries 609; install failures 0", + "current": "archive entries 613; install failures 0", "command": "python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .", "test": "python3 tests/verify_registry_audit.py", "evidence": [ diff --git a/reports/skill_os2_coverage.md b/reports/skill_os2_coverage.md index 847bae9..1c6ed11 100644 --- a/reports/skill_os2_coverage.md +++ b/reports/skill_os2_coverage.md @@ -26,9 +26,9 @@ This report maps the Skill OS 2.0 upgrade blueprint to concrete local artifacts, | Skill IR | `pass` | schema 2.0.0; targets 5 | `python3 scripts/yao.py skill-ir .` | `python3 tests/verify_skill_ir.py` | | Output Eval Lab | `pass` | 5 cases; delta 100.0; execution 10 | `python3 scripts/yao.py output-exec . && python3 scripts/yao.py output-review .` | `python3 tests/verify_output_eval_lab.py` | | Runtime Conformance | `pass` | 5/5 targets pass | `python3 scripts/yao.py conformance .` | `python3 tests/verify_conformance_suite.py` | -| Trust Security | `pass` | 109 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | +| Trust Security | `pass` | 110 scripts; secrets 0; help failures 0 | `python3 scripts/yao.py trust .` | `python3 tests/verify_trust_check.py` | | Skill Atlas | `pass` | 12 scanned skills; actionable collisions 0 | `python3 scripts/yao.py skill-atlas --workspace-root .` | `python3 tests/verify_skill_atlas.py` | -| Registry Distribution | `pass` | archive entries 609; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | +| Registry Distribution | `pass` | archive entries 613; install failures 0 | `python3 scripts/yao.py package . --platform openai --platform claude --platform generic --platform vscode --output-dir dist --zip && python3 scripts/yao.py registry-audit .` | `python3 tests/verify_registry_audit.py` | | Review Studio | `pass` | 16 gates; decision review; warnings 3 | `python3 scripts/yao.py review-studio .` | `python3 tests/verify_review_studio.py` | | Telemetry Drift | `pass` | events 1; recipes 5; risk low | `python3 scripts/yao.py telemetry-hooks . && python3 scripts/yao.py adoption-drift .` | `python3 tests/verify_telemetry_hooks.py` |