Repository navigation
docs: vet nine Cloudflare plugin candidates and correct admitted Agents SDK authority - #573
Merged
Merged
Conversation
…y drift [skip ci]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope and exact denominator
Closes #572 after merge. Nine direct front-mattered Cloudflare plugin candidate skills at registered
openai/pluginsrevision0722921d5542fc593105c27bd52630babd8b8c2a: 2 REFERENCE-ONLY / 7 REJECT unchanged. Six overlap already admittedcloudflare/skillspin; two share SKILL.md blobs but not package trees, four have changed manifests, three are plugin-only. No source admission, pin promotion, vendoring, runtime or new semantic pair.Cross-source admitted correction:
cloudflare-skills/agents-sdkexisting exact-pin review VERIFIED 17/20 → REJECT unchanged 14/20, because the bundled email reference auto-replies and logs private sender/subject without separate read/send authority, and installation/state/scheduling also lack scoped gates. Provenance and verification companions refreshed with exact tree. Cloudflare remains 13/13 reviewed, now 5 VERIFIED / 8 REJECT.Macro findings
workers-best-practices.Accounting and evidence
README, SYSTEM_STATE, CURATION_QUEUE, INDEX, index.json reconciled: official plugin candidate decisions 74 → 83 (32/42 → 34/49); governed inventory 44 first-party / 995 third-party / 1,039 pairs, 23 sources, 12 pinned corpora unchanged; admitted-source denominator delta 0. Review:
docs/reviews/2026-11-01-openai-cloudflare-nine-candidate-vetting.md. All individual candidate package trees, manifest blobs, last path-change dates, authority/dependencies, scores, dispositions, andnot-runbehavioral states recorded. No security scanner or behavioral run claimed.Verification and lifecycle
Branch readback: all eight changed/added files present; five public surfaces agree, JSON parses, two existing companions agree on REJECT, main remained at
cbbe16714ac7835f194288c366efaccddbb5f52ebefore PR. Existing drafts #489/#492/#496/#412/#413 remain independently qualification-held; this branch does not touch their shared first-party registry. No repository-owned scripts, CI, tests, schedulers, generators, scanners, monitors or runtime added. [skip ci] deliberately avoids Actions budget.Ready for same-run merge if PR head/mergeability/reviews/threads/statuses and main relation remain correct. Use expected-head protection.