[criptogus]

Summary

Correct the 21 business skills' source-grounded workflows and bind qualification to their exact local model, packaged runtime and immutable registry archives.

structured request
  recompute host validation and redact supported private fields
  route actual intent without unrelated business records
  retain raw local generation
  require original 273 cases + substantive domain review + 5 context attacks
  prepare exact-model compatibility
  publish through authenticated administrator approval

The review queue previously loaded491 approved skills before21 drafts into a500-row result, hiding12 drafts. Add a server-side status filter before the limit and an accessible selector, preserving administrator authentication and the existing adversarial publication gate.

Preserve failed histories and all original thresholds. Completed-case checkpoints retain a hash-bound attempt journal and reject silent retries. Patch dependency advisories and migrate dictionary validation to Zod 4 with a real MCP transport/schema regression.

Evidence

• Before: immutable 0.1.3 evaluation: 245/273 passed; no skills published.
  After: corrected immutable 0.1.4: 273/273 passed, 21/21 eligible; five additional structured-context attacks passed. Zero errors, truncations or high/critical failures. All 273 primary reviews are output-hash bound; 21 Jev advisory requests and four disagreements are retained with primary resolutions. Actual evidence and exact-model compatibility are recorded; authenticated publication remains separate.
• Project batch: 10/10 passed, including strict lint, types, SDK, build, dependency audit and generated artifacts.
• Actual packaged-runner inference completed without truncation; configuration refusal probes 3/3 passed.
• Anonymous/RLS verification: 92 public tables checked; no unexpected exposure.

Merge Danger

Door: two-way for code; immutable registry versions and evaluation histories are retained.

Blast Radius: qualification

Only the exact pinned Qwen3.5-9B model, SDK/environment and packaged runtime may qualify. Bare prompts, other models and live tool execution remain unqualified. No Lovable generation calls are used. Final trace review passed without changing criteria. The authenticated administrator approval gate still controls publication. Full reproducibility summary: docs/BUSINESS-SKILLS-QUALIFICATION-0.1.4.md.