sjunepark · Sep 15, 2026 · Sep 15, 2026 · Sep 15, 2026 · Sep 15, 2026 · Sep 15, 2026
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
@@ -10,7 +10,7 @@ jobs:
   source:
     runs-on: ubuntu-24.04
     outputs:
-      native: ${{ (github.event_name == 'pull_request' && github.base_ref == 'main') || (github.event_name == 'merge_group' && github.event.merge_group.base_ref == 'refs/heads/main') }}
+      native: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'pull_request' && github.base_ref == 'main') || (github.event_name == 'merge_group' && github.event.merge_group.base_ref == 'refs/heads/main') }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:

diff --git a/PROGRESS.md b/PROGRESS.md
@@ -24,33 +24,12 @@ PR #23 review follow-up: confirmed comments 3979633085 (commit pins), 3979633091
   release checks passed. The [release record](plans/sjskills-release.md) owns
   publication evidence. Installed binaries and managed skills were not changed.
 
-# sjskills maintenance plugin delivery
+# sjskills startup-check delivery
 
-- User authorized automatic CLI updates and configured skill sync on every
-  supported local host. Existing release support is macOS Intel/ARM and Windows
-  x64; Linux is unsupported.
-- User also authorized automatic adoption of this hook's published `main`
-  updates. Migrated the standalone hook into `plugins/sjskills-maintenance/`;
-  retired its installer. Maintenance still runs in the next agent turn.
-- Added daily plugin-check state, a 15-minute failure cooldown, remote source/ref
-  verification instructions, and target-only reinstall with installed-version
-  verification. Canonical sjskills workflow references are bundled and checked.
-- Plugin schema validation, isolated Codex CLI install/reinstall, and installed
-  Windows hook invocation succeeded. All 21 targeted tests pass. Bounded
-  independent review and scoped documentation alignment are complete.
-- Native validation confirmed reinstall removes the old plugin cache. The hook
-  now preserves content-addressed workflow/helper snapshots in plugin data;
-  regression coverage verifies they survive removal and reject local edits.
-  Explicit Windows command dispatch passes cmd.exe and PowerShell. Test fixture
-  setup uses ordinary reads/writes after reproducing a Node 22.17.1 recursive-copy
-  crash on Unicode Windows paths.
-- Published implementation and catalog to `main` in `e0c60b4`. Registered the
-  remote-backed personal marketplace on Windows and installed/enabled plugin
-  version `0.1.0+codex.20260910121700`. Installed content matches publication;
-  the installed Windows hook emits its maintenance context successfully.
-- Hook trust still requires review through `/hooks`. Other hosts require their
-  own installation. Full session-driven maintenance and native macOS execution
-  remain unverified.
+- Stages A–D are delivered through [PR #24](https://github.com/sjunepark/agent-scripts/pull/24), merged as `751d93f` to `codex/sjskills-startup-integration`. The [completed goal](goals/sjskills-startup-check.md) owns the closed delivery boundary.
+- [Final CI](https://github.com/sjunepark/agent-scripts/actions/runs/34927077118) passed on Windows x64 and both macOS targets. Released-CLI compatibility, isolated package reinstall, bounded review, and documentation alignment passed.
+- The user authorized main promotion and current-machine sync on 2026-09-15. [PR #25](https://github.com/sjunepark/agent-scripts/pull/25) is under review for promotion to main. The [startup-check plan](plans/sjskills-startup-check.md) owns stage E publication and activation status and the completed Windows skill-sync evidence.
+- Older installations may still inject the previous workflow. Existing plugin-data snapshots and update state remain intact.
 
 ## Previous CLI delivery
 

diff --git a/README.md b/README.md
@@ -275,9 +275,11 @@ drift with `bin/install-codex-hooks --check`. Repair boundaries, machine-state
 ownership, and upstream removal checks are documented in
 [docs/codex-lifecycle-workarounds.md](docs/codex-lifecycle-workarounds.md).
 
-`sjskills-maintenance` packages automatic CLI updates and configured skill
-synchronization as a plugin, with daily adoption of its own published-main
-updates. It requests maintenance in the first agent turn of each new or resumed
-session. See the [plugin guide](docs/sjskills-startup-hook.md) for publication
-prerequisites, per-host installation, update checks, and migration from the
-retired standalone installer. [PROGRESS.md](PROGRESS.md) tracks delivery status.
+`sjskills-maintenance` checks the native CLI, configured skills, and published
+plugin version on startup and resume. Healthy checks stay silent; findings or
+incomplete verification produce one short report. It never assigns maintenance
+to the agent or updates installations. See the [plugin guide](docs/sjskills-startup-hook.md)
+for per-host installation, hook trust, and migration from the retired standalone
+installer. The [startup-check plan](plans/sjskills-startup-check.md) tracks
+publication and activation; older installations retain their previous behavior
+until replaced.
diff --git a/ROADMAP.md b/ROADMAP.md
@@ -2,13 +2,14 @@
 
 ## Current
 
-_None._
+1. [Publish and activate the check-only sjskills hook](plans/sjskills-startup-check.md)
+   is authorized for the current Windows machine. PR #25 promotion to main is
+   underway; configured skills are synchronized. Plugin installation, trust,
+   and fresh-session acceptance remain pending.
 
 ## Plans
 
-1. [Install private GitHub skills through authenticated profiles](plans/sjskills-private-github-sources.md)
-   has a settled design; implementation and verification have not started.
-2. [Roll out the fixed global skill baseline](plans/sjskills-global-rollout.md)
+1. [Roll out the fixed global skill baseline](plans/sjskills-global-rollout.md)
    is proposed and requires separate evidence-bound authorization for each
    machine. Exact-content approval binding is delivered.
 
@@ -18,6 +19,8 @@ _None._
 
 ## Completed
 
+- [Install private GitHub skills through authenticated profiles](plans/sjskills-private-github-sources.md)
+  is recorded as shipped in v1.3.0; live private-skill installation remains separate.
 - [Prepare and spawn the next goal](tasks/next-goal-preparation-spawn.md)
   has implemented and evaluated source.
 - [Include the sjskills CLI version in automatic status checks](tasks/sjskills-cli-version-status.md)

diff --git a/docs/settings-sync.md b/docs/settings-sync.md
@@ -79,12 +79,12 @@ Repo-managed plugin source includes:
   Pushover MCP tools. Its credentials remain machine-local; setup and checks
   are documented in
   [`plugins/codex-pushover-notify/README.md`](../plugins/codex-pushover-notify/README.md).
-- `sjskills-maintenance` requests published-main plugin updates, stable CLI
-  updates, and reviewed skill synchronization at session startup. Its
-  [management guide](sjskills-startup-hook.md) owns installation and update
-  behavior; [PROGRESS.md](../PROGRESS.md) tracks publication and rollout. Its
-  bundled sjskills procedure preserves explicit public/authenticated selections
-  and stops a failing private scope without starting authentication setup.
+- `sjskills-maintenance` runs direct check-only CLI, skill, and plugin status
+  inspection at startup. Its [management guide](sjskills-startup-hook.md) owns
+  reporting, prerequisites, and explicit installation/update procedures; the
+  [delivery plan](../plans/sjskills-startup-check.md) separates source validation
+  from publication and host activation. Startup findings grant no maintenance
+  or authentication-setup authority.
 
 For `chezmoi-sync`: