@1aboveio/skills 0.15.0 → 0.17.0

package/skills/{backend → data-science}/pyspark/assets/templates/etl.py

@@ -1,6 +1,7 @@
 from abc import ABC, abstractmethod
 from argparse import ArgumentParser
 from contextlib import contextmanager
+from dataclasses import dataclass
 import enum
 import logging
 import os
@@ -22,6 +23,25 @@ from utils.hudi_metadata import hudi_metadata_write_options
 logger = logging.getLogger(__name__)
 
 
+@dataclass(frozen=True)
+class HudiLayout:
+    """Target on-disk layout. Do not pair with Spark/Hudi shuffle parallelism."""
+
+    files_per_partition: int = 1
+    target_file_size_mb: int = 128
+
+    def write_options(self) -> Dict[str, Union[str, int]]:
+        target_bytes = int(self.target_file_size_mb) * 1024 * 1024
+        group_bytes = target_bytes * max(1, int(self.files_per_partition))
+        return {
+            "hoodie.parquet.max.file.size": str(target_bytes),
+            "hoodie.parquet.small.file.limit": str(target_bytes),
+            "hoodie.copyonwrite.insert.split.size": str(target_bytes),
+            "hoodie.clustering.plan.strategy.target.file.max.bytes": str(target_bytes),
+            "hoodie.clustering.plan.strategy.max.bytes.per.group": str(group_bytes),
+        }
+
+
 _SPARK_LEASE_LOCK = threading.RLock()
 _SPARK_LEASES = {}
 
@@ -157,6 +177,10 @@ class Etl(ABC):
         "SINGLE_WRITER"
     )
     extra_hudi_options: Dict[str, Union[str, bool, int]] = {}
+    hudi_layout = HudiLayout(
+        files_per_partition=1,
+        target_file_size_mb=128,
+    )
     zookeeper: str = None
 
     def __init__(
@@ -321,6 +345,8 @@ class Etl(ABC):
             "hoodie.datasource.write.precombine.field": self.ts,
             "hoodie.datasource.write.operation": f"{operation}",
             "hoodie.datasource.write.reconcile.schema": True,
+            # Do not set hoodie.*.shuffle.parallelism or spark.sql.shuffle.partitions:
+            # each shuffle task becomes a tiny Hudi file.
             "hoodie.schema.on.read.enable": True,
             # ---------------------------------------------------------------
             # Hudi 0.15 ComplexKeyGenerator regression fix
@@ -350,6 +376,7 @@ class Etl(ABC):
             "path": self.path,
         }
         hudi_options.update(self.extra_hudi_options)
+        hudi_options.update(self.hudi_layout.write_options())
         # Applied last, deliberately. A table inside the daily v3 metadata
         # listing scope must have its Hudi metadata index maintained by every
         # writer; an `extra_hudi_options` opt-out would leave the index stale
@@ -361,6 +388,30 @@ class Etl(ABC):
 
         df.write.format("hudi").options(**hudi_options).mode("append").save()
 
+    def rewrite_hudi_layout(self, partition_filter: Optional[str] = None) -> None:
+        """Repair small files on an existing Hudi table.
+
+        Reads the published path, drops `_hoodie_*` meta columns, and
+        ``insert_overwrite``s with ``HudiLayout``. Do not set Spark/Hudi
+        shuffle parallelism. Pass a Spark SQL predicate to limit the rewrite
+        (for example ``dt = '2026-08-01'``).
+        """
+        if self.table_type != "hudi_table":
+            raise ValueError("rewrite_hudi_layout is for hudi_table only")
+        if not self._is_existing_hudi_table():
+            raise ValueError(f"no Hudi table at {self.path}")
+        source = self.spark.read.format("hudi").load(self.path)
+        if partition_filter:
+            source = source.where(partition_filter)
+        meta = [c for c in source.columns if c.startswith("_hoodie_")]
+        source = source.drop(*meta) if meta else source
+        previous = self.hudi_mode
+        try:
+            self.hudi_mode = "insert_overwrite"
+            self.load_hudi(source)
+        finally:
+            self.hudi_mode = previous
+
     def load_spark(self, df: DataFrame):
         output = df.repartition(*self.repartition) if self.repartition else df
         try:

package/skills/{backend → data-science}/pyspark/references/diagnosis-and-profiling.md

@@ -1,9 +1,31 @@
 # Diagnosis And Profiling
 
 Use this reference to decide whether a Spark job is fast enough, identify the
-largest performance gap, and determine whether a fix is ready to ship. Focus on
-the required evidence and outcome; choose environment-specific commands and
-APIs from the available runtime.
+largest performance gap, and determine whether a canary is ready for write and
+reconciliation. Focus on evidence and outcome; choose environment-specific
+commands from the available runtime.
+
+## When Profiling Is Required
+
+Profiling is optional during production validation. It is **required** when
+**either**:
+
+1. The small-sample canary (typically one month) wall time exceeds **5 minutes**
+   **and** the run was **not** resource-constrained (queued, under-provisioned
+   executors, competing warehouse work).
+2. **Any** job — canary, authorized write, or a scheduled production run —
+   exceeds **30 minutes**. This is a hard gate. Resource contention does not
+   waive it.
+
+Otherwise skip. When required, parse the event log and compare an isolated
+baseline on the same sample and resource profile. Keep validate-only time
+separate from write time.
+
+```bash
+set -o pipefail
+hdfs dfs -cat "$EVENT_LOG" | \
+  python {baseDir}/scripts/spark_eventlog_summary.py > canary-summary.json
+```
 
 ## Performance Target
 
@@ -50,7 +72,9 @@ Apply these rules to every performance change:
   hot-key algorithms, and write amplification in the job logic or data layout.
 - Do not claim a performance fix from changing shuffle partitions, executor
   count/cores/memory, timeouts, broadcast thresholds or hints, AQE switches,
-  repartition counts, cache/persistence, or retry settings.
+  repartition counts, cache/persistence, or retry settings. Raising Spark or
+  Hudi shuffle parallelism also creates small files on the write path; leave
+  those settings unset.
 - Do not meet the target by dropping history, rows, columns, validations,
   formulas, or publication work required by the job.
 - Classify a proven cluster, storage, or configuration defect as an operational
@@ -114,13 +138,12 @@ settings merely because the slow work becomes visible at a later action.
 3. **Make the fix:** reduce the responsible logical or physical work without
    tuning parameters, adding resources, or weakening output identity, ordering,
    boundaries, arithmetic, history, validation, or write behavior.
-4. **Validate locally:** prove required behavior, bidirectional parity, boundary
-   cases, and the intended physical-plan change with focused tests.
-5. **Canary and profile in the cluster:** run the production entry point in
-   validate-only mode on the comparable isolated snapshot; retain logs, prove
-   zero writes, and compare the same metrics with the baseline.
-6. **Ship:** open and review the PR, pass CI, enqueue and merge, deploy the merged
-   commit, then run authorized production validation and reconciliation.
+4. **Validate locally:** prove required behavior, boundary cases, and the
+   intended physical-plan change with focused tests. Do not treat local Spark as
+   cluster parity.
+5. **Production validation:** one-month (typical) sample: canary, optional
+   profile (5-minute unconstrained canary **or** any job over 30 minutes),
+   authorized write, then reconciliation.
 
 Repeat the loop when the target is still missed or the dominant gap moves.
 
@@ -132,9 +155,10 @@ Repeat the loop when the target is still missed or the dominant gap moves.
   confirmation of the same runtime, resources, and isolation conditions.
 - **Performance:** wall time, dominant stage, maximum task, cardinality,
   shuffle/spill, logic change, and pass/fail against the 5-minute target.
-- **Correctness:** local parity/plan results and canary blocker/output status.
-- **Delivery:** deployed hash, publication/reconciliation result when applicable,
-  and remaining limitations.
+- **Correctness:** local plan/boundary results, canary blocker/output status,
+  and cluster reconciliation (aggregates + bidirectional parity).
+- **Delivery:** cluster application IDs, published hash/commit, reconciliation
+  result when a write ran, and remaining limitations.
 
 Keep evidence aggregate-only. Never print credentials or entity-level rows.
 

package/skills/{backend → data-science}/pyspark/references/etl-contract.md

@@ -93,6 +93,25 @@ belong before the writer in the job process.
 - Reject incremental mode without a filter/watermark and exact restart boundary.
 - Reject optimistic concurrency without a working lock provider.
 - Do not rely on scheduler timing as the single-writer guarantee.
+- Do not set `spark.sql.shuffle.partitions` or Hudi
+  `hoodie.insert.shuffle.parallelism` / `hoodie.upsert.shuffle.parallelism` /
+  `hoodie.bulkinsert.shuffle.parallelism`. A raised shuffle partition count
+  becomes one small file per task on the write path. Size files with
+  `HudiLayout` (default one ~128MB file per partition), not shuffle parallelism.
+
+### Repair small files
+
+Existing tables written with high shuffle parallelism stay small-file until
+rewritten. Use `Etl.rewrite_hudi_layout` (same keys, partitions, locks, and
+`HudiLayout`). Restrict with a partition predicate when the table is large.
+Do not set shuffle parallelism on the rewrite either.
+
+```python
+job = MyEtl(start_date="2026-08-01", end_date="2026-08-02")
+job.rewrite_hudi_layout("dt = '2026-08-01'")  # one partition
+# job.rewrite_hudi_layout()                   # whole table
+```
+
 - Do not present `repartition`, JDBC partition count, fetch size, or writer
   option changes as logic optimization; classify required configuration fixes
   as separate operational work.

package/skills/data-science/pyspark/references/production-validation.md

@@ -0,0 +1,131 @@
+# Production Validation
+
+Playbook for workflow step 5: **canary → (optional) profile → write →
+reconciliation** on the cluster. Use a **small sample**, typically **one month**
+of source data. Bind canary and write to the same pinned snapshot. Local tests
+do not substitute.
+
+## Fail-Closed Admission
+
+Do not launch until all applicable facts are recorded and valid:
+
+- exact commit/module hash;
+- production Spark, Python, Java, and table-format runtimes;
+- source snapshot or date boundary (the one-month sample);
+- scheduler pause/ownership state;
+- zero competing warehouse work;
+- explicit validate-only or write-enabled mode;
+- durable writable log and event-log destination;
+- restart/recovery plan for writes.
+
+Classify existing processes and working-tree changes before touching them. Do
+not kill or overwrite another operator's work.
+
+## 1. Canary
+
+Implement the validate-only guard **in the Spark job**, not only in a wrapper.
+Validate with one aggregate action, then return before any writer.
+
+```python
+import json
+
+from pyspark.sql import functions as F
+
+
+def validate_candidate(candidate):
+    # first() is a Spark action: it executes the lazy transform plan.
+    metrics = candidate.agg(
+        F.count("*").alias("row_count"),
+        F.countDistinct("event_id").alias("distinct_event_count"),
+        F.sum(
+            F.when(F.col("event_id").isNull(), 1).otherwise(0)
+        ).alias("null_event_id_count"),
+        F.sum(
+            F.when(F.col("event_count_1h") < 0, 1).otherwise(0)
+        ).alias("invalid_event_count_1h"),
+        F.count("amount_usd_1h").alias("non_null_amount_usd_1h_count"),
+    ).first().asDict()
+
+    blockers = []
+    if metrics["row_count"] != metrics["distinct_event_count"]:
+        blockers.append("event_id is not unique")
+    if metrics["null_event_id_count"]:
+        blockers.append("event_id contains nulls")
+    if metrics["invalid_event_count_1h"]:
+        blockers.append("event_count_1h contains negative values")
+    if blockers:
+        raise RuntimeError(f"validation blocked: {blockers}")
+    return metrics
+
+
+def run(validate_only, source_snapshot):
+    source = extract(source_snapshot)
+    candidate = transform(source)
+
+    metrics = validate_candidate(candidate)
+    print(json.dumps(metrics, sort_keys=True))
+
+    if validate_only:
+        print("validate-only: skipping publication")
+        return
+
+    publish(candidate)
+```
+
+Pin every source read to the same immutable snapshot. If the source cannot be
+pinned, the canary does not prove what the writer will publish. Reference every
+derived output in at least one validation aggregate so Catalyst cannot prune it.
+
+Launch through the production `spark-submit` path and runtimes:
+
+```bash
+export PYSPARK_DRIVER_PYTHON="$DRIVER_PYTHON"
+export PYSPARK_PYTHON="$EXECUTOR_PYTHON"
+
+spark-submit \
+  --name "$CANARY_NAME" \
+  --conf spark.pyspark.driver.python="$DRIVER_PYTHON" \
+  --conf spark.pyspark.python="$EXECUTOR_PYTHON" \
+  --conf spark.eventLog.enabled=true \
+  job.py --validate-only
+```
+
+Do not replace another operator's scheduler files in place.
+
+Prove the canary did not write:
+
+1. Validation completed with zero blockers.
+2. The terminal log says publication was skipped.
+3. The event log reports zero Spark output records and bytes.
+
+Do not add `.cache()` or `.persist()` to warm the canary.
+
+## 2. Profiling (optional)
+
+After the canary, profile when **either** the small-sample canary exceeds
+**5 minutes** without resource constraints, **or any job exceeds 30 minutes**
+(hard gate). Otherwise skip. When required, follow
+[Diagnosis And Profiling](diagnosis-and-profiling.md).
+
+## 3. Write
+
+Write-enabled only after a successful canary and **explicit authorization**.
+Re-check admission. Publish the same pinned sample. Do not present canary time
+as write performance.
+
+If a write is cancelled, prove from logs/source that publication was not
+reached. YARN `KILLED` alone does not prove no commit occurred.
+
+## 4. Reconciliation
+
+Independent cluster read of the published scope — not a reuse of canary
+aggregates. Follow [Reconciliation](reconciliation.md). Fail closed on mismatch.
+
+## Evidence And Ownership
+
+Safe evidence: counts, null rates, distinct counts, min/max dates, hashes,
+stage metrics, plan-node counts, commit IDs. Do not print credentials or
+entity-level rows.
+
+After the run: confirm processes are terminal, restore scheduler ownership,
+and report compute/validation, publication, and end-to-end time separately.

package/skills/data-science/pyspark/references/reconciliation.md

@@ -0,0 +1,38 @@
+# Reconciliation
+
+Cluster check after an authorized write in production validation. Use the **same
+one-month sample** as the canary. Local fixtures do not prove this.
+
+Independently read the published table or Hudi commit. Do not reuse canary
+aggregates. Fail closed on mismatch.
+
+## What To Reconcile
+
+Against the canary metrics and the previous path/oracle:
+
+- row count and distinct identity count
+- schema and required columns
+- date/partition coverage of the sample
+- write mode, commit success, and downstream readability
+- validation blockers still zero on the published scope
+
+## Bidirectional Row Parity
+
+Counts alone miss wrong values, swapped identities, and duplicate multiplicity.
+Compare full rows both ways with `exceptAll`, not `subtract`:
+
+```python
+expected = old_build(source).select(*OUTPUT_COLUMNS)
+actual = published.select(*OUTPUT_COLUMNS)
+
+assert expected.exceptAll(actual).count() == 0
+assert actual.exceptAll(expected).count() == 0
+```
+
+Pin `source` to the same snapshot the writer used. Keep the previous
+implementation only as this oracle while parity is being proven.
+
+## Evidence
+
+Safe evidence: counts, distinct counts, null rates, min/max dates, hashes, and
+commit IDs. Do not print credentials or entity-level production rows.

package/skills/{backend → data-science}/pyspark/references/transformation-design.md

@@ -158,5 +158,33 @@ assert candidate.columns == OUTPUT_COLUMNS
 ```
 
 For composite identity, list every component, for example
-`IDENTITY_COLUMNS = ["transaction_id", "transaction_leg_id"]`. Add the
-bidirectional identity and row-parity tests from [Parity Testing](parity-testing.md).
+`IDENTITY_COLUMNS = ["transaction_id", "transaction_leg_id"]`.
+
+## Local proof
+
+These checks belong in **local tests** (workflow step 4). Cluster row parity is
+[Reconciliation](reconciliation.md) after a write.
+
+Keep a bounded previous-path oracle on **synthetic** fixtures. Assert critical
+rules directly so oracle and candidate cannot share the same mistake:
+
+```python
+by_id = {row.event_id: row for row in actual.collect()}
+assert by_id["at-24h"].count_24h == 2       # inclusive lower boundary
+assert by_id["after-24h"].count_24h == 1    # one unit outside
+assert by_id["same-time-b"].count_1h == 2   # stable tie ordering
+```
+
+Cover empty and single-event groups; exact boundaries and one unit beyond;
+same-timestamp ties; null key/time/amount; open/close/eviction; floating-point
+residue; one dense hot key; duplicate and missing identities.
+
+Assert the expensive plan shape is absent without snapshotting the whole plan:
+
+```python
+plan = actual._jdf.queryExecution().executedPlan().toString().lower()
+assert not ("join" in plan and "event_time" in plan and "interval" in plan)
+```
+
+Mutation-prove high-risk tests (cutoff direction, tie-breaker, pair join,
+required column) so they fail when the rule is broken.

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -361,7 +361,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "eff6c7b5931bce5b2265a619bccddd371a89df6ce7bc2edc74f11d00060a71dd",
       "digestExcludes": []
@@ -374,7 +374,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "08230dc57a53d6526692b50138038abbd80abce1a067e01c52ad6acc182caf7e",
       "digestExcludes": []
@@ -387,7 +387,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "9eea7bfba348ddaea1b934c9a7fabdd9b101df8a146e1c93e947da4d335f1d98",
       "digestExcludes": []
@@ -400,7 +400,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "58b0556228a9271cf9e33727a05fc08a4fdfd29512ec0936b169f0a55d60e6ef",
       "digestExcludes": []
@@ -413,9 +413,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
-      "contentDigest": "11621ce3234bb8e6083e27e3a32b14207e99c5acd6236300bd686ea7e71be07e",
+      "contentDigest": "0b2d8e0c4d0ae6336c733ff2102d6911a3bd4298394eddd9f40eefaeb884903c",
       "digestExcludes": []
     },
     {
@@ -426,7 +426,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "b5af4dccf703362d4f41cac4fdff48305f652a00338d85975a2e5c35ec6bc61c",
       "digestExcludes": []
@@ -439,7 +439,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "f048fd00c69f2dc666fc7a3096cfeee6dfba73933bfb69602f3f0e26159798cc",
       "digestExcludes": []
@@ -452,7 +452,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
       "contentDigest": "90a7c4e1ad6da1e632ea2c5259e4967ffebb84353adccbca8dfc5d6bc50b60c1",
       "digestExcludes": []
@@ -465,15 +465,15 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       },
-      "contentDigest": "377ca6637d79c2ca41e2d897292e11ba6c39eaa76826a2255389cb7d80a937c8",
+      "contentDigest": "4d2242d41c7c57e24119b7cd974a88dd97cf526a8f76e6825385060ff86095c8",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "0d08f604524dc513c957b6db803111f0f06aa2fc7c6850dc284cd5d9f4203ac9",
+  "releaseIdentity": "4a75f070c64c9f24bfbb250be0706a55f6fc3bf071d537200a0a5a91378a4959",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -531,7 +531,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0",
+        "version": "0.17.0",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -547,7 +547,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.15.0 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.17.0 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -97,7 +97,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.15.0',
+    version: '0.17.0',
   },
   matt: {
     id: 'matt-pocock',

package/skills/engineering/resolve-issues/generated/workflow-repair-policy.json

@@ -237,7 +237,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -248,7 +248,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -259,7 +259,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -270,7 +270,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -281,7 +281,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -292,7 +292,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -303,7 +303,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -314,7 +314,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     },
     {
@@ -325,7 +325,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0"
+        "version": "0.17.0"
       }
     }
   ],
@@ -426,7 +426,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.15.0",
+        "version": "0.17.0",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -442,7 +442,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.15.0 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.17.0 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/resolve-issues/scripts/run-state.mjs

@@ -3412,7 +3412,7 @@ export const WORKFLOW_PREFLIGHT_COMMANDS = Object.freeze([
 
 const WORKFLOW_VERIFIER_URL = new URL('../../engineering-runtime/scripts/workflow-coherence.mjs', import.meta.url)
 const WORKFLOW_FALLBACK_POLICY_URL = new URL('../generated/workflow-repair-policy.json', import.meta.url)
-export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = '7dde46aecddba9c837b567cf73d69eed42390912fa6d76c6d7468773f0d59a2d'
+export const WORKFLOW_TRUSTED_FALLBACK_POLICY_SHA256 = 'a6d80d500e43b660220f71f9764e5e6c905bf1955d63f8733d115b6c1a601448'
 const WORKFLOW_REPAIR_RECIPE_REFERENCE = Object.freeze({
   id: 'engineering-workflow-dependency-first',
   generatedFrom: 'skills/distribution/generated/recipes.json',

package/skills/payment/fraud-analysis/LICENSE

@@ -0,0 +1,3 @@
+MIT License
+
+Copyright (c) 2026 1AboveIO