Audit the public skill release and mirror contents #4

New Issue

2026-10-08T17:28:08-04:00

anodyine commented

2026-10-08 17:28:08 -04:00

Problem

The existing MIT skill release needs a focused publication check before its job-search mirror becomes a prominent public link.

Scope

Review the README, package list and status, MIT LICENSE and NOTICE, third-party attribution, author starter, release tag, examples, and tracked files. Run the documented package and unit checks from a clean checkout. Identify any private owner code, credentials, stale claims, broken links, or unsupported examples without changing the established license boundary.

Acceptance Criteria

A short audit records the exact reviewed revision and all publication findings.
A newcomer can identify the supported defaults, optional packages, starter, and commands.
License and third-party notices remain complete and accurate.
Documented provider-free checks pass, or the issue records precise blockers.
Documentation disposition is recorded.

Ablation decision

not_required: source and documentation audit only.

## Problem The existing MIT skill release needs a focused publication check before its job-search mirror becomes a prominent public link. ## Scope Review the README, package list and status, MIT LICENSE and NOTICE, third-party attribution, author starter, release tag, examples, and tracked files. Run the documented package and unit checks from a clean checkout. Identify any private owner code, credentials, stale claims, broken links, or unsupported examples without changing the established license boundary. ## Acceptance Criteria - A short audit records the exact reviewed revision and all publication findings. - A newcomer can identify the supported defaults, optional packages, starter, and commands. - License and third-party notices remain complete and accurate. - Documented provider-free checks pass, or the issue records precise blockers. - Documentation disposition is recorded. ## Ablation decision `not_required`: source and documentation audit only.

anodyine added the status/ready-for-agent type/docs area/docs labels 2026-10-08 17:28:08 -04:00

anodyine referenced this issue

2026-10-08 17:29:53 -04:00

Epic: Make the MIT skill release publicly discoverable #3

anodyine added a new dependency 2026-10-08 17:30:16 -04:00

#3 Epic: Make the MIT skill release publicly discoverable

anodyine added a new dependency 2026-10-08 17:31:15 -04:00

#5 Publish and verify the public RelayView Skills mirror

anodyine added a new dependency 2026-10-09 08:15:36 -04:00

#6 Make the Skills README understandable at a glance

anodyine commented

2026-10-09 08:56:59 -04:00

Provider-free checks and documentation disposition

Reviewed source revision: 467dd39976cd4eddc0a42a2ecfaa849c29dba7e8 (main). git status --short --branch reported ## main...origin/main before and after the checks, with no tracked or untracked changes.

Ran the three commands documented in README.md using Python 3; all exited 0:

python3 -m unittest discover -s tests -v — 12 tests passed.
python3 -m tools.packages check examples/starter-planner — package identity digest e186a81d8a57923bbd3e8d0afe98b77860b58c9ffe90caaf9026045b6db09ead.
python3 -m tools.packages pack examples/starter-planner dist/starter-planner.zip — archive SHA-256 fe3d4424d1d30c5ed2f3dc7eee2a7c0e5e54ac2a2c1629aa2abc4d55eae9962b, independently matched by sha256sum. unzip -l showed LICENSE, NOTICE.md, and the starter's SKILL.md, local-guidance.md, and relayview-skill.json.

No provider credentials, model calls, or running RelayView owner were needed. These checks verify the repository tooling and package structure; they do not assert a live Planner run.

Documentation disposition: not_required for this verification work. It changes no durable product behavior or repository documentation; the audit evidence belongs on this issue. The README import/assignment correction already present at the reviewed revision is tracked as a finding under #6. This comment records these two acceptance criteria, not completion of the remaining publication audit.

## Provider-free checks and documentation disposition Reviewed source revision: `467dd39976cd4eddc0a42a2ecfaa849c29dba7e8` (`main`). `git status --short --branch` reported `## main...origin/main` before and after the checks, with no tracked or untracked changes. Ran the three commands documented in `README.md` using Python 3; all exited 0: - `python3 -m unittest discover -s tests -v` — 12 tests passed. - `python3 -m tools.packages check examples/starter-planner` — package identity digest `e186a81d8a57923bbd3e8d0afe98b77860b58c9ffe90caaf9026045b6db09ead`. - `python3 -m tools.packages pack examples/starter-planner dist/starter-planner.zip` — archive SHA-256 `fe3d4424d1d30c5ed2f3dc7eee2a7c0e5e54ac2a2c1629aa2abc4d55eae9962b`, independently matched by `sha256sum`. `unzip -l` showed `LICENSE`, `NOTICE.md`, and the starter's `SKILL.md`, `local-guidance.md`, and `relayview-skill.json`. No provider credentials, model calls, or running RelayView owner were needed. These checks verify the repository tooling and package structure; they do not assert a live Planner run. **Documentation disposition: `not_required` for this verification work.** It changes no durable product behavior or repository documentation; the audit evidence belongs on this issue. The README import/assignment correction already present at the reviewed revision is tracked as a finding under #6. This comment records these two acceptance criteria, not completion of the remaining publication audit.

anodyine commented

2026-10-09 08:59:38 -04:00

Publication audit result

Reviewed 467dd39976cd4eddc0a42a2ecfaa849c29dba7e8 on clean main. This completes the audit of the source revision; the provider-free command evidence is in the preceding comment.

README: 22 listed directories match all 21 tracked packages plus examples/starter-planner. It identifies the two maintained defaults, optional guidance, the illustrative starter, and the three local check commands. Its local links to CONTRIBUTING.md, NOTICE.md, and LICENSE resolve.
License and attribution: root LICENSE is MIT and applies to this repository. NOTICE.md preserves the stated MIT copyright and permission notices for the adapted Matt Pocock and Jo Van Eyck skill sources and explicitly excludes the proprietary RelayView owner. Packaged ZIPs include both license and notice.
Source boundary: the 62 KB tracked tree consists of instruction packages/resources, the starter, Python package tooling/tests, documentation, and Gitea CI. A targeted scan found no private owner source, local home paths, token/key patterns, or credentials in tracked content. The only URL in the scanned source is the public Gitea server in the CI checkout configuration.
Validation: the documented 12 unit tests pass. I also ran the CI loops locally: all 21 packages plus the starter validate and pack successfully with Python 3. The worktree remained clean.
Release identity finding for #5: the latest existing tag, v0.3.1, points to 12dc0d5505eed4136e046b4a76e121bbb8c5fe94, before the README correction at the reviewed head. Publish the mirror from an explicitly recorded final commit (or make a new tag after #6) rather than implying v0.3.1 contains the latest README. The #6 screenshot and YAML are deliberately pending owner review before the mirror becomes a prominent link.

No audit blocker was found in this revision. The mirror's remote visibility, clone, and checks remain #5 acceptance work.

Documentation disposition: not_required. This read-only audit changed no product behavior or repository documentation. Its revision-bound evidence and the release-identity finding are recorded here, with the remaining publication work assigned to #6 and #5.

## Publication audit result Reviewed `467dd39976cd4eddc0a42a2ecfaa849c29dba7e8` on clean `main`. This completes the audit of the source revision; the provider-free command evidence is in the preceding comment. - README: 22 listed directories match all 21 tracked packages plus `examples/starter-planner`. It identifies the two maintained defaults, optional guidance, the illustrative starter, and the three local check commands. Its local links to `CONTRIBUTING.md`, `NOTICE.md`, and `LICENSE` resolve. - License and attribution: root `LICENSE` is MIT and applies to this repository. `NOTICE.md` preserves the stated MIT copyright and permission notices for the adapted Matt Pocock and Jo Van Eyck skill sources and explicitly excludes the proprietary RelayView owner. Packaged ZIPs include both license and notice. - Source boundary: the 62 KB tracked tree consists of instruction packages/resources, the starter, Python package tooling/tests, documentation, and Gitea CI. A targeted scan found no private owner source, local home paths, token/key patterns, or credentials in tracked content. The only URL in the scanned source is the public Gitea server in the CI checkout configuration. - Validation: the documented 12 unit tests pass. I also ran the CI loops locally: all 21 packages plus the starter validate and pack successfully with Python 3. The worktree remained clean. - Release identity finding for #5: the latest existing tag, `v0.3.1`, points to `12dc0d5505eed4136e046b4a76e121bbb8c5fe94`, before the README correction at the reviewed head. Publish the mirror from an explicitly recorded final commit (or make a new tag after #6) rather than implying `v0.3.1` contains the latest README. The #6 screenshot and YAML are deliberately pending owner review before the mirror becomes a prominent link. No audit blocker was found in this revision. The mirror's remote visibility, clone, and checks remain #5 acceptance work. **Documentation disposition: `not_required`.** This read-only audit changed no product behavior or repository documentation. Its revision-bound evidence and the release-identity finding are recorded here, with the remaining publication work assigned to #6 and #5.

anodyine added status/done and removed status/ready-for-agent labels 2026-10-09 08:59:58 -04:00

anodyine closed this issue

2026-10-09 09:00:06 -04:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Blocks

#3 Epic: Make the MIT skill release publicly discoverable

anodyine/relayview-skills

#5 Publish and verify the public RelayView Skills mirror

anodyine/relayview-skills

#6 Make the Skills README understandable at a glance

anodyine/relayview-skills

Reference: anodyine/relayview-skills#4