[Knapp-Kevin]

Implements two additional P1 capability hypotheses from #406 as passive host-executed knowledge procedures: skills/skill-behavior-evaluation/SKILL.md and skills/release-evidence-review/SKILL.md. Includes trigger/non-trigger and adversarial scenario design, independent semantic/security/behavioral states, release evidence and scoped authorization, honest not-run states. No scripts, CI, runtime, installers, schedulers or autonomous operations.

Pre-merge requirements: whole-corpus overlap check, provenance and verification companions for each skill, independent adversarial/security review, controlled category reconciliation, and atomic README/SYSTEM_STATE/CURATION_QUEUE/INDEX/index.json accounting (first-party 44 -> 48 only after both #412 and this PR are admitted). Separate from #412 to avoid concurrent file writes. Do not merge as-is.

2026-10-26 exact-candidate gate checkpoint

Two candidates retain exact SKILL.md blobs ceb0e562a70d6848e56d2641306eeac619d5f60f and d236826daad241afbfc5c8867221c066b7ff5044. A current-main overlap check against five neighboring first-party skills found differentiated procedures, not a reason to inflate trust. Static adversarial inspection covers eight proposed scenarios with all host outcomes not-run. Full evidence: candidate gate review.

New per-package registry/security/local-skills/ records truthfully mark security not-run, with the pinned required SkillSpector identity and exact manifest fingerprints. These records are blocker visibility, not scanner receipts. No qualifying pinned scanner execution or complete report was available in this host.

HOLD / draft. Before merge: obtain full external pinned exact-package scan reports, independent acceptance, reconcile registry/local-verification.json against #416 and any #412 admissions, then atomically update all five public accounting surfaces and categories. Current first-party inventory remains 44 on main. No repository-owned scanner, CI, test runner, runtime, or automation may be introduced.

[Knapp-Kevin]

Integration hygiene checkpoint (October 27): Current PR #413 branch 955a33eba5eadcf7dda68d5f78b5f8772e56f705 contains 46 entries in its proposed registry/local-verification.json: the current 44 first-party skills plus its two new candidates (skill-behavior-evaluation, release-evidence-review). This branch is based on older main c5bf80049fa0114bcd9ec61ff4b7e78b588caaf1, while live main is 17c7d9abd58ecf670036949cda22cfe8da406726 and PR #416 has independently changed 21 of the same 44 verification entries. Do not merge the 46-entry snapshot wholesale, which could overwrite #416's exact-version fingerprints and future #412 admissions. Recompute all first-party records from current main plus whichever PRs have actually merged; only then add the two qualified #413 candidates. Full current security reports, independent acceptance and five-surface atomic admission accounting remain required; this is not a security pass or admission approval.

[Knapp-Kevin]

Disposition: CLOSED / UNMERGED / EVIDENCE PRESERVED (2026-11-03).

Candidate admission HOLD, not merged. Two new passive skill proposals (behavioral evaluation and release-evidence review) and their provenance, static scores, and incomplete security records remain accessible here. No complete exact-package security evidence or representative host-executed adversarial acceptance; taxonomy/44-entry registry and five accounting surfaces must be reconciled if/when admitted. Closing the old draft avoids treating an unqualified PR as merge-ready. Preserve branch/evidence for a separately qualified future admission, tracked under #588/#589/#402.

Preserved exact PR head: 955a33eba5eadcf7dda68d5f78b5f8772e56f705. Linked tracking: #588 #589 and #402. PR reviews and inline review threads: none returned. Commit combined statuses: none; pull-request-triggered workflow lookup: zero for this head (not a global Actions claim).

Closing the PR does not close linked issues, delete its Git history, grant production/user action authority, or satisfy security/behavioral validation.