Ship staged skill release

README.md

@@ -88,7 +88,14 @@ A non-null `reply_comment_id` from a supplied permalink is globally unique acros
 
 Skills use read commands automatically. They may pass `--approved` only after the user approves the exact canonical write. No skill publishes to Facebook.
 
-Install the managed Codex skills after repository setup:
+Bootstrap the managed Codex skills on a first installation:
+
+```powershell
+python scripts/install-skills-bootstrap.py --repo-root .
+```
+
+After the Ceratops skill lifecycle is installed, validate and refresh the
+managed skills with:
 
 ```powershell
 python scripts/install-skills.py --repo-root .

deploy/deploy.yml

@@ -0,0 +1,11 @@
+version: 1
+kind: ceratops-deploy
+operations:
+  deploy:
+    handoff: ceratops-skill-lifecycle/deploy
+  bootstrap:
+    steps:
+      - id: bootstrap-skills
+        run:
+          - python
+          - scripts/install-skills-bootstrap.py

docs/current-system-design.md

@@ -419,6 +419,22 @@ Repository-root `skills/` is the authoritative HasbaraTops skill source:
 - `hasbaratops-closeout`
 - `hasbaratops-strategy-review`
 
+`skills/skill-sections.json` is the runtime manifest. Every skill receives the
+canonical Ceratops-compatible rules from `skills/sections/core.md` and the
+HasbaraTops-specific shared rules from `skills/sections/hasbaratops.md`; source
+`SKILL.md` files remain delta-only. `scripts/install-skills-bootstrap.py` owns
+first installation, while `scripts/install-skills.py` validates and refreshes
+skills through an installed lifecycle bundle. `deploy/deploy.yml` declares the
+bootstrap operation and the managed lifecycle deployment handoff.
+
+Installed skills resolve the CLI command once before use. They prefer the
+`HasbaraTops` console command on `PATH`; otherwise an active source checkout
+uses `uv run --frozen HasbaraTops`, while an installed skill reads
+`source_repository_root` from its runtime manifest and uses
+`uv run --directory <source_repository_root> --frozen HasbaraTops`. The skills
+never hard-code or search for the checkout path and block when no declared
+route is executable.
+
 The model owns interpretation, ambiguous parentage judgment, reply drafting,
 fact-check judgment, and strategy analysis. Deterministic helpers own identifiers,
 duplicates, graphs, payload validation, lifecycle transitions, and persistence.