[aarontrowbridge]

Related Issue

None filed yet — draft from the skills-integrity loop (proposal S-fcz-02). File an issue before marking ready.

Description

New public skill prereg-seal: write rules/predictions to a file before a scan, hash and stat it (seal.py, stdlib only), and make the keys script refuse to run if a sealed file changed or any result file is older than the seal. Includes what belongs in a seal (rules, predictions, named non-answer outcomes, grid derived from the prediction, the keys script itself), the one-clock rule, and amendments as first-class sealed files.

Evidence

Sealing was hand-rolled in G1, H2c, D2a, re-derived in G1b and A2 (obs notes under fluxonium-cz-intermediate/ledger/observations/); G1's three self-reported stamps disagreed by minutes.

Honesty flags

• Draft. seal.py was run against 8 cases (table in the card). The file-mtime ordering check is new in this card — earlier campaign scripts only re-hashed. It catches accidents, not an adversary (touch -d forges mtimes); the card's Limits section says so.
• Pairs with detached-run (companion PR) and research/deliberate (companion PRs); merge order does not matter for correctness, only for the cross-references.

Verification

cd packages/extension && node scripts/lint-skills.mjs --known scripts/lint-skills-known.txt → lint-skills: 41 skills, 0 error(s), 5 warning(s) — ok (the 5 warnings are pre-existing, none in this card). Also run with the unmerged private-package rule from origin/private-skills-out (--denylist): 0 hits in this card. Tests: skills_integrity, skill_salvage_851, workflow_skills_public 42/42 pass; the full vitest run shows the same 128 failures as clean origin/main in this environment (fleet/sidebar/pack tests; unrelated) plus one flaky fake_serve_reaper case that passes alone.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn