[Knapp-Kevin]

Issue #495: restore the two useful first-party repairs with current provenance

Reimplements two bounded privacy/authority fixes from previously closed, unmerged PR #496 on current merged main at e083c47. This preserves the prior reviewed methods and leaves the rest of the repository untouched.

User value: Automation Receipts can verify scheduled-run claims without reading unrelated private logs or leaking secret-bearing output. Task Surface can organize work without treating "track this" as permission to create repositories, publish private work, seed labels, or write issues to another organization.

Exactly what changed

• skills/automation-receipts/SKILL.md: binds account/workspace/time/field access scope; minimizes logs/artifact checks and citations; untrusted-source data and redaction; status-only, no schedule creation.
• skills/task-surface/SKILL.md: proposal before persistent writes; separate approval for owner, visibility, README, labels, per-repo issues, and cross-org transitions; README/issue text cannot increase authority; portable no-tool fallback.
• Individual source records (2), individual verification records (2), and consolidated registry/local-verification.json (only those same 2 entries changed).
• Source-pinned machine receipt and human review, with seven unexecuted adversarial scenarios.

Exact source identities: Automation Receipts blob 94fb288d7d6a3ea6982f22bd8bb9ef77b9de7add, package tree 39a8e08f7037fca28665b33edcc9d93314059c2d. Task Surface blob 27f1a5ffe56f7653ec68c6ac998a4a03c0137085, tree 951d5da3b04651e5612e8d1af811b39250672585. Both SKILL.md bytes match the previously statically reviewed contents of #496; the prior 19/20 and 17/20 semantic scores apply only to those exact unchanged bytes.

Static integrity verified: 44/44 consolidated first-party records match the actual current branch Git tree, with zero unrelated changes. All seven action/authority scenarios remain not executed. Root MIT license and notice preservation confirmed. Nine intended files total; no README, dashboard, source registry, third-party skills or CI scripts changed.

Remaining HOLD gates

1. Run pinned NVIDIA SkillSpector v2.12.0 on both new exact final package trees, record complete coverage/findings and report hashes. Historical security passes for old trees do not transfer.
2. Independently execute the seven adversarial consent/no-leak/no-unauthorized-write cases with scoped test identities and private fixtures on an approved host. No simulated static reasoning can count as behavioral validation.
3. Reconcile current main and other active first-party repair branches fix: repair 16 retired pulse runners and enforce source/recurrence authority [skip ci] #673/fix(authority): redact credential fragments and scope five knowledge skills [skip ci] #686 before merging shared verification records.
4. Seek reviewer/owner merge authorization. mergeable=true is not approval.

DRAFT/HOLD. No source installed or executed, no private account read, no schedule or repository created, no external write, no source-pinned security scan run, no new unchanged-use approvals, no GitHub Actions. All commits [skip ci]. Closes issue #495 only after qualified merge, not by opening this PR.

2026-11-04 integration conflict cleared at current main

Reconciled this existing PR branch without force using merge commit d61ba91065175fd1651512901e358ee5ad382121 (parents original #702 cca9ec1d8956e3ce1c6d052780a7522da612317d and accepted main e19d5ce3389f783f5b58bbea3ff4b4f7a492dff3). Main-vs-base comparison found zero overlapping changed file paths. The resulting candidate tree retains both exact original repair package Git trees unchanged: Automation Receipts 39a8e08f7037fca28665b33edcc9d93314059c2d and Task Surface 951d5da3b04651e5612e8d1af811b39250672585; all 44 first-party verification names remain, the two intended records change, 42 current-main records remain byte-semantically unchanged. GitHub now reports mergeable=true (technical integration only). No new PR, CI runner or branch was opened.

Still DRAFT/HOLD: no pinned new exact-tree SkillSpector reports for these two revised packages, and the seven specified agent-host adversarial cases in docs/reviews/2026-11-03-q13-495-authority-repair.md have not been executed. Older package scan passes do not apply. No security or behavioral approval or external write authority has been granted; owner acceptance and tested current-tree merge remain pending. #495 remains OPEN.

2026-11-04 issue #402 precise scan frontier: two pending

The existing #702 branch is reconciled with accepted main at d61ba91065175fd1651512901e358ee5ad382121 via a non-force integration. Its Automation Receipts and Task Surface Git package-tree IDs remain exactly 39a8e08f7037fca28665b33edcc9d93314059c2d and 951d5da3b04651e5612e8d1af811b39250672585. The 44-record registry preserves current main and only two proposed repaired identities differ. Technical mergeability is not security approval.

The current P0 #402 scan target manifest records 2/2 requiring new exact-tree SkillSpector scans, 0 matched new-tree scanner passes, and 7 actual agent-host adversarial scenarios still NOT RUN per docs/reviews/2026-11-03-q13-495-authority-repair.md. Do not inherit prior main-package scans, treat the proposed writes as consented, or merge until independent security and observed behavior plus owner review are accepted.

2026-11-04 superseded by #703 with byte-identical transfer

This security repair is preserved in open draft #703 at merge commit bb4bcb5f2a394db07fe956c34b560f97d5a357d7, with the original #702 branch head d61ba91065175fd1651512901e358ee5ad382121 recorded as a second parent. The 8 unique changed artifacts from #702 were copied into the #703 candidate tree and read back from GitHub: 8/8 byte-identical Git blob SHA (2 SKILL.md sources, 4 provenance/verification companions, 2 review/evidence files). Their 2/2 complete skill package Git trees remain identical to #702; the 11 existing #703 package trees also remained identical (13/13). The consolidated registry/local-verification.json retains all 44 records, changes precisely the two intended #702 records on top of #703's eleven, and preserves the other 42 #703 records.

Disposition: close this redundant PR unmerged, because its entire unique implementation/evidence is integrated into the still-open #703 candidate; do not treat closure as accepted security or production merge. Issue #495 and P0 #402 remain OPEN. The two #702 package trees still need new exact NVIDIA SkillSpector results, seven observed adversarial host cases, reviewed user-fit/authority and governed owner-accepted merge. No unchanged-use clearance, external writes, CI, or new PR was authorized.