@1aboveio/skills 0.19.3 → 0.20.1

package/runtime/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -11,9 +11,7 @@ export const WORKFLOW_OWNED_MEMBERS = deepFreeze([
   'ensure-coverage',
   'implement-and-pr',
   'rush-issues',
-  'resolve-issues',
   'rush-release',
-  'resolve-release',
   'review-pr',
   'smoke',
   'engineering-runtime',
@@ -66,23 +64,7 @@ export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
     ],
     generatedIdentities: [],
   },
-  {
-    invokedSkill: 'resolve-issues',
-    members: [
-      'tdd',
-      'harness-runtime',
-      'e2e-test',
-      'ensure-coverage',
-      'implement-and-pr',
-      'resolve-issues',
-      'review-pr',
-      'smoke',
-      'engineering-runtime',
-    ],
-    generatedIdentities: [
-      { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
-    ],
-  },
+
   {
     invokedSkill: 'rush-release',
     members: [
@@ -91,22 +73,7 @@ export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
     ],
     generatedIdentities: [],
   },
-  {
-    invokedSkill: 'resolve-release',
-    members: [
-      'harness-runtime',
-      'e2e-test',
-      'ensure-coverage',
-      'resolve-issues',
-      'resolve-release',
-      'review-pr',
-      'smoke',
-      'engineering-runtime',
-    ],
-    generatedIdentities: [
-      { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
-    ],
-  },
+
 ]);
 
 // First-party content is distributed as an exact public npm release, so its identity is the package
@@ -119,7 +86,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.19.3',
+    version: '0.20.1',
   },
   matt: {
     id: 'matt-pocock',

package/skills/cicd-pipeline/mergify/SKILL.md

@@ -128,7 +128,7 @@ conflict, never hold the batch window open. Mechanics and the grouping rule
 
 - [cloud-build](../cloud-build/SKILL.md) — the CI the queue gates on
 - [cloud-debug](../cloud-debug/SKILL.md) — when the CI job itself is failing
-- [resolve-issues](../../engineering/resolve-issues/SKILL.md) — consumes this skill's delivery
+- [rush-issues](../../engineering/rush-issues/SKILL.md) — consumes this skill's delivery
   watch contract when it delivers merge-ready PRs through Mergify
 - `mergify-config`, `mergify-merge-queue`, `mergify-merge-protections`, `mergify-ci`,
   `mergify-stack` (vendor plugin skills) — reference for raw CLI invocation. They document

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -6,9 +6,7 @@
     "ensure-coverage",
     "implement-and-pr",
     "rush-issues",
-    "resolve-issues",
     "rush-release",
-    "resolve-release",
     "review-pr",
     "smoke",
     "engineering-runtime"
@@ -58,26 +56,6 @@
       ],
       "generatedIdentities": []
     },
-    {
-      "invokedSkill": "resolve-issues",
-      "members": [
-        "tdd",
-        "harness-runtime",
-        "e2e-test",
-        "ensure-coverage",
-        "implement-and-pr",
-        "resolve-issues",
-        "review-pr",
-        "smoke",
-        "engineering-runtime"
-      ],
-      "generatedIdentities": [
-        {
-          "member": "resolve-issues",
-          "path": "generated/workflow-repair-policy.json"
-        }
-      ]
-    },
     {
       "invokedSkill": "rush-release",
       "members": [
@@ -85,25 +63,6 @@
         "engineering-runtime"
       ],
       "generatedIdentities": []
-    },
-    {
-      "invokedSkill": "resolve-release",
-      "members": [
-        "harness-runtime",
-        "e2e-test",
-        "ensure-coverage",
-        "resolve-issues",
-        "resolve-release",
-        "review-pr",
-        "smoke",
-        "engineering-runtime"
-      ],
-      "generatedIdentities": [
-        {
-          "member": "resolve-issues",
-          "path": "generated/workflow-repair-policy.json"
-        }
-      ]
     }
   ],
   "digestAlgorithm": "sha256-path-content-v2",
@@ -383,7 +342,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "eff6c7b5931bce5b2265a619bccddd371a89df6ce7bc2edc74f11d00060a71dd",
       "digestExcludes": []
@@ -396,7 +355,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "d97abeff7bdc5ae2e4be2f631d09dba46d4753ce1e67334793364329af59f066",
       "digestExcludes": []
@@ -409,7 +368,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "00cfdd3e5bfbc3e37b1369ad93aae91161e671829760a8867ea9be25047ba461",
       "digestExcludes": []
@@ -422,7 +381,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "58b0556228a9271cf9e33727a05fc08a4fdfd29512ec0936b169f0a55d60e6ef",
       "digestExcludes": []
@@ -435,24 +394,11 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "4664873230f22de2fcf46b7b529570cfedabdc850620031d8f96baf89fcdc5b4",
       "digestExcludes": []
     },
-    {
-      "installName": "resolve-issues",
-      "ownership": "owned",
-      "sourcePath": "skills/engineering/resolve-issues",
-      "expectedSource": {
-        "id": "first-party",
-        "type": "first-party",
-        "package": "@1aboveio/skills",
-        "version": "0.19.3"
-      },
-      "contentDigest": "3016f025b4acf3b7f61628ff3043ca55e680d0fabc7cf9fb4b4c46424d9b22ed",
-      "digestExcludes": []
-    },
     {
       "installName": "rush-release",
       "ownership": "owned",
@@ -461,24 +407,11 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "01c192d8b4fd416af4ea02e8000e5fce0cee723a6ac2f8c0c48372087e1a262e",
       "digestExcludes": []
     },
-    {
-      "installName": "resolve-release",
-      "ownership": "owned",
-      "sourcePath": "skills/engineering/resolve-release",
-      "expectedSource": {
-        "id": "first-party",
-        "type": "first-party",
-        "package": "@1aboveio/skills",
-        "version": "0.19.3"
-      },
-      "contentDigest": "ffba0c83491676794c74721f4c6dbae430f5bc186e5a55f0764e29eaeb13829b",
-      "digestExcludes": []
-    },
     {
       "installName": "review-pr",
       "ownership": "owned",
@@ -487,7 +420,7 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
       "contentDigest": "f048fd00c69f2dc666fc7a3096cfeee6dfba73933bfb69602f3f0e26159798cc",
       "digestExcludes": []
@@ -500,9 +433,9 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
-      "contentDigest": "90a7c4e1ad6da1e632ea2c5259e4967ffebb84353adccbca8dfc5d6bc50b60c1",
+      "contentDigest": "27861f6dac89c32a97a7d249ce2695cea2d3d80dd2e9bc0607b0c4048a0e3b25",
       "digestExcludes": []
     },
     {
@@ -513,15 +446,15 @@
         "id": "first-party",
         "type": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3"
+        "version": "0.20.1"
       },
-      "contentDigest": "6ef7cf062d899835774d3010dbba511587b0d60835447417d4b74a5afe25b184",
+      "contentDigest": "3e0952beee7078463464872943d414fa944b395ae723ec78b385a28a3548897a",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "63593db8810d932c5774b375f3403578b821c9df6ca6e8a866f12f2b8fc4fd47",
+  "releaseIdentity": "baec385a2bc0414623c97a83ac4ebf3c44ede2654185b748a03ef955cb3f1c8d",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",
@@ -579,7 +512,7 @@
         "sourceId": "first-party",
         "sourceType": "first-party",
         "package": "@1aboveio/skills",
-        "version": "0.19.3",
+        "version": "0.20.1",
         "installPath": null,
         "members": [
           "harness-runtime",
@@ -587,9 +520,7 @@
           "ensure-coverage",
           "implement-and-pr",
           "rush-issues",
-          "resolve-issues",
           "rush-release",
-          "resolve-release",
           "review-pr",
           "smoke",
           "engineering-runtime"
@@ -597,7 +528,7 @@
         "commands": [
           {
             "transport": "npm",
-            "command": "npx @1aboveio/skills@0.19.3 install --group engineering-workflow --yes"
+            "command": "npx @1aboveio/skills@0.20.1 install --group engineering-workflow --yes"
           }
         ],
         "onFailure": {

package/skills/engineering/engineering-runtime/scripts/workflow-coherence.mjs

@@ -288,7 +288,7 @@ function validateManifest(manifest) {
     add('digest-algorithm-invalid', 'engineering-runtime', 'The coherence digest algorithm is missing or unsupported.');
   }
   if (JSON.stringify(manifest.ownedMembers) !== JSON.stringify(WORKFLOW_OWNED_MEMBERS)) {
-    add('owned-census-invalid', 'engineering-runtime', 'The exact ten-member Workflow ownership census is missing or malformed.');
+    add('owned-census-invalid', 'engineering-runtime', 'The exact eight-member Workflow ownership census is missing or malformed.');
   }
   if (JSON.stringify(manifest.dependencies) !== JSON.stringify([
     { groupId: 'matt-pocock-toolkit', members: MATT_DEPENDENCY_MEMBERS },
@@ -297,11 +297,9 @@ function validateManifest(manifest) {
     add('dependency-census-invalid', 'engineering-runtime', 'The exact Matt and harness runtime dependency census is missing or malformed.');
   }
   if (!exactContract(manifest.dependencyClosures, WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES)) {
-    const names = new Set(Array.isArray(manifest.dependencyClosures)
-      ? manifest.dependencyClosures.map((closure) => closure?.invokedSkill)
-      : []);
-    const member = WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES.find((closure) => !names.has(closure.invokedSkill))?.invokedSkill
-      ?? 'resolve-issues';
+    const actual = Array.isArray(manifest.dependencyClosures) ? manifest.dependencyClosures : [];
+    const member = WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES.find((closure, index) =>
+      !isDeepStrictEqual(actual[index], closure))?.invokedSkill ?? 'engineering-runtime';
     add('dependency-closure-invalid', member, 'The invoked-skill dependency closure is missing, weakened, reordered or malformed.');
   }
 

package/skills/engineering/engineering-runtime/scripts/workflow-policy.mjs

@@ -11,9 +11,7 @@ export const WORKFLOW_OWNED_MEMBERS = deepFreeze([
   'ensure-coverage',
   'implement-and-pr',
   'rush-issues',
-  'resolve-issues',
   'rush-release',
-  'resolve-release',
   'review-pr',
   'smoke',
   'engineering-runtime',
@@ -66,23 +64,7 @@ export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
     ],
     generatedIdentities: [],
   },
-  {
-    invokedSkill: 'resolve-issues',
-    members: [
-      'tdd',
-      'harness-runtime',
-      'e2e-test',
-      'ensure-coverage',
-      'implement-and-pr',
-      'resolve-issues',
-      'review-pr',
-      'smoke',
-      'engineering-runtime',
-    ],
-    generatedIdentities: [
-      { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
-    ],
-  },
+
   {
     invokedSkill: 'rush-release',
     members: [
@@ -91,22 +73,7 @@ export const WORKFLOW_TRUSTED_DEPENDENCY_CLOSURES = deepFreeze([
     ],
     generatedIdentities: [],
   },
-  {
-    invokedSkill: 'resolve-release',
-    members: [
-      'harness-runtime',
-      'e2e-test',
-      'ensure-coverage',
-      'resolve-issues',
-      'resolve-release',
-      'review-pr',
-      'smoke',
-      'engineering-runtime',
-    ],
-    generatedIdentities: [
-      { member: 'resolve-issues', path: 'generated/workflow-repair-policy.json' },
-    ],
-  },
+
 ]);
 
 // First-party content is distributed as an exact public npm release, so its identity is the package
@@ -119,7 +86,7 @@ export const WORKFLOW_TRUSTED_SOURCES = deepFreeze({
     id: 'first-party',
     type: 'first-party',
     package: '@1aboveio/skills',
-    version: '0.19.3',
+    version: '0.20.1',
   },
   matt: {
     id: 'matt-pocock',

package/skills/engineering/smoke/SKILL.md

@@ -113,7 +113,7 @@ The **per-PR golden-path liveness floor** (`ensure-coverage` CI contract, gate 8
 - **CI (gate 8, blocking)** — wired in `e2e-test/assets/ci-gates.*`; boots the app, drives the paths into `smoke-results.json`, runs `smoke.mjs verdict`. The mechanical backstop.
 - **`resolve-issues`** — final step of the [epic integration gate](../resolve-issues/references/deliverables.md#deliverables-the-shippable-component-not-the-whole-epic): boot the assembled integration branch and run the golden paths; a DEAD whose broken paths are `fail` belongs to a specific unit → reopen its fix loop. **A DEAD built from `blocked`/`missing` paths is a gate-environment problem, not a unit's defect** — report it and fix the environment; reopening a fix loop on it spends a producer spawn and an adversarial review on code that is fine, and the round lands in the unit's budget all the same.
 - **`/smoke`** — standalone, any time, against `local` or a URL.
-- **`resolve-release`** — [the exposure gate](../resolve-release/SKILL.md#the-release-loop): the `prod-preview` profile against the 0%-traffic candidate URL (read-only, so it excludes every mutating path), then the `prod-active` profile against the live service after the shift. A DEAD **before** exposure deletes the candidate (no rollback, no user impact); a DEAD after it triggers the rollback policy.
+- **Legacy `resolve-release` flow (archived)** — the `prod-preview` profile against the 0%-traffic candidate URL (read-only, so it excludes every mutating path), then the `prod-active` profile against the live service after the shift. A DEAD **before** exposure deletes the candidate (no rollback, no user impact); a DEAD after it triggers the rollback policy.
 - **The dev-deploy recorder** (`cloud-build` → Post-deploy smoke gate) — the integration pipeline runs this gate after its 100%-traffic deploy and publishes the verdict as a **SHA-keyed commit status**, never failing the build; that recorded ALIVE is what `resolve-release` requires when pinning a release candidate (its principle 11).
 
 ## Reference Map

package/skills/payment/payment-analysis/SKILL.md

@@ -12,7 +12,8 @@ description: >
   decline mix, BIN/issuer-country contribution, settlement GMV, payment journey,
   Sankey funnel, FX-to-USD, chargeback rate, 运营影响, or "business analysis of
   transactions" — even if they do not say payment-analysis. Do NOT use for
-  supervised fraud-rule mining (that is fraud-analysis).
+  supervised fraud-rule mining (fraud-analysis) or TLD / MCC-miscoding
+  clusters (tld-detection).
 ---
 
 # Payment Analysis
@@ -31,7 +32,7 @@ optional topic fuel, not required for the journey core.
 
 **Produce:** Markdown + preferred Chinese/bilingual HTML under
 `reports/payment-analysis/`.  
-**Do not produce:** supervised precision/recall packages (`fraud-analysis`).
+**Do not produce:** supervised precision/recall packages (`fraud-analysis`) or TLD clusters (`tld-detection`).
 
 Read the playbook for the step you are on. Paths under `references/` are
 relative to this skill.
@@ -106,12 +107,13 @@ Do not change numbers, joins, or chart data.
 - [ ] 运营影响 only from auth-rate-actions.md when triggered
 - [ ] Language matches terminology.md; banned strings have no unexplained hits
 
-## Boundary with fraud-analysis
+## Boundary with fraud-analysis and tld-detection
 
 | Need | Skill |
 |---|---|
 | Volume, journey Sankey, auth rate, decline mix, settlement overview, 运营影响 routing | `payment-analysis` |
 | Proxy/confirmed fraud labels, holdout precision/recall, 3DS/block **packages** | `fraud-analysis` |
+| Potential TLD clusters, currency-amount-pair ladders, MCC miscoding, stuffing | `tld-detection` |
 
 Routing 3DS / 风控拦截 / retry from this extract is not a fraud-analysis rule
 package.

package/skills/payment/tld-detection/SKILL.md

@@ -0,0 +1,163 @@
+---
+name: tld-detection
+description: >
+  Explicit-only. Potential TLD (transaction-laundering) clusters from
+  descriptor partitions, then exact currency-amount pairs, with same-descriptor
+  baseline contrasts, high/medium/low risk tiers, exposure sizing, and a
+  ≤3-sentence decision.
+  Not payment-analysis or fraud-analysis.
+disable-model-invocation: true
+---
+
+# TLD Detection
+
+Find **potential TLD clusters** in an authorization extract. TLD here is
+transaction laundering, not a domain name: hidden activity stuffed under a
+normal MCC, often mixed across descriptors.
+
+First partition the cleaned authorizations by **descriptor**. Inside each
+descriptor, the clustering key is the **currency-amount-pair**. Geometric
+relationships between exact anchors are the stuffing signal (掺量). BIN
+country is not a membership key; report it in the cluster-versus-baseline
+comparison after membership is frozen.
+
+**Produce:** cluster results and a separate run-specific methodology document
+under `reports/tld-detection/`.
+**Do not produce:** confirmed laundering, a legal finding, or supervised
+fraud-rule packages (`fraud-analysis`).
+
+Paths under `references/` are relative to this skill.
+
+## Workflow
+
+Follow these steps in order. Detail:
+[references/workflow.md](references/workflow.md).
+
+| Step | Do | Gate |
+|---|---|---|
+| 0 Pre-flight | File, grain, columns, window | Stop if auth grain, descriptor, amount, or currency column is missing; caption missing BIN country |
+| 1 Clean | Dedup | Record drop counts; do not filter BIN country |
+| 2 Cluster | Partition; rank pairs; identify anchors; freeze exact keys; compare with same-descriptor baseline | Partition = descriptor; ≥3 levels; adjacent levels = 2x; ≥100 attempts; absolute residual cap per candidate currency |
+| 3 Risk | Assign high/medium/low investigation priority | Mixed BIN countries are neutral; exact 100% single-country concentration is a standout |
+| 4 Decision | Conclusion + basis for the book | ≤3 sentences; no new evidence |
+| 5 Report | Answer highest-risk, cluster-characteristic, and exposure questions; write + proofread | Sort high → medium → low; no confirmed-TLD wording |
+
+### 0 — Pre-flight
+
+Authorization extract, one row per auth attempt. Record paths, time field,
+amount, currency, BIN/issuer country, descriptor, MCC, response. Grain and
+column aliases: [workflow.md](references/workflow.md).
+
+### 1 — Clean
+
+[references/clean.md](references/clean.md). Deduplicate first. Do not
+FX-convert the clustering key. Do not drop non-US BIN rows.
+
+### 2 — Cluster
+
+[references/clustering.md](references/clustering.md). Build normalized
+descriptor partitions, then rank currency-amount-pairs inside each descriptor. Use
+`scripts/detect_ladders.py` to detect geometric anchor relationships with
+adjacent, currency-specific absolute residual caps. Every cluster must contain
+at least three theoretical levels with a fixed 2x relationship between adjacent
+levels (for example 1x, 2x, 4x, 8x); search both up and down from every candidate
+seed. A theoretical level may
+keep multiple exact anchors, but each additional anchor must clear the stated
+portfolio support floor. Freeze membership by exact descriptor, currency,
+and amount; keep only clusters with ≥100 authorization attempts. Compare each
+cluster with the baseline formed by removing that cluster from the same
+descriptor. Do not invent clusters from MCC or comparison features.
+
+### 3 — Risk
+
+[references/decision.md](references/decision.md). Assign every identified
+currency-amount pair exactly one investigation-priority tier: High, Medium,
+or Low. BIN-country mixture is neutral and never downgrades a cluster. Treat
+an exact 100% single-BIN-country cluster as a standout; separately report the
+cluster's share of that descriptor-country slice without using an arbitrary
+coverage threshold or risk points.
+
+### 4 — Decision
+
+Write the conclusion and the basis in **at most 3 sentences** for the whole
+book. A one-line table per cluster is allowed under that.
+
+### 5 — Report
+
+[references/report-template.md](references/report-template.md). Terms:
+[references/terminology.md](references/terminology.md).
+
+```text
+reports/tld-detection/<scope>_clusters.md
+reports/tld-detection/<scope>_clusters.zh.md
+reports/tld-detection/<scope>_clusters.zh.html
+reports/tld-detection/<scope>_methodology.md
+reports/tld-detection/<scope>_methodology.zh.md
+reports/tld-detection/<scope>_methodology.zh.html
+```
+
+Keep detection results in the cluster reports. Lead with the highest-risk
+clusters, characterize every identified cluster and its descriptor share, then
+quantify exposure by risk tier, descriptor, and across all authorization
+attempts. Sort High → Medium → Low, then by evidence strength and attempts
+inside each tier. Put the
+actual run's cleaning, partitioning, parameter selection, sensitivity evidence,
+baseline definition, and audit details in the methodology documents; link the
+paired files in both directions. HTML is preferred when there are charts. Grep
+banned strings after writing.
+
+## Progress
+
+Track a task plan. One item is `in_progress` at a time.
+
+1. Pass pre-flight
+2. Freeze cleaned universe and descriptor partitions
+3. Assign High / Medium / Low risk tiers
+4. Publish descriptor currency-amount pairs + same-descriptor baselines
+5. Write ≤3-sentence decision
+6. Write report + separate run methodology and proofread
+
+## Boundary
+
+| Need | Skill |
+|---|---|
+| Potential TLD clusters, currency-amount pairs, stuffing / 掺量, MCC miscoding, descriptor mixing | `tld-detection` |
+| Volume, journey Sankey, auth rate, decline mix, settlement overview | `payment-analysis` |
+| Proxy/confirmed fraud labels, holdout precision/recall, rule packages | `fraud-analysis` |
+
+A suspected-fraud *rate contrast* in this skill is not a fraud-analysis
+rule package.
+
+## Reference index
+
+| Need | Read |
+|---|---|
+| Grain, columns, window | [workflow.md](references/workflow.md) |
+| Dedup | [clean.md](references/clean.md) |
+| Currency-amount pairs, anchors, same-descriptor baseline | [clustering.md](references/clustering.md) |
+| ≤3-sentence conclusion | [decision.md](references/decision.md) |
+| Report chapters | [report-template.md](references/report-template.md) |
+| Language / banned strings | [terminology.md](references/terminology.md) |
+
+## Sanity check
+
+- [ ] Auth grain; dedup counts are stated; no BIN-country row filter
+- [ ] Partition key is normalized descriptor; missing descriptor is an explicit bucket
+- [ ] Clustering key is original currency + amount, not USD
+- [ ] Each rung-pool currency has an explicit adjacent absolute-residual cap and sensitivity evidence
+- [ ] Multi-anchor levels state their portfolio support floor; final membership uses exact selected amount keys
+- [ ] Cluster attempts ≥100
+- [ ] Every cluster has a High / Medium / Low risk tier and results sort in that order
+- [ ] Currency-amount pairs show seed and representative anchors; `*` marks a multi-amount level
+- [ ] Same amount pair may recur across descriptor partitions; never merge them automatically
+- [ ] BIN country is post-membership reporting data, not a membership key; Mixed is neutral
+- [ ] Exact 100% single-country concentration is a standout; descriptor-country coverage is shown without a risk threshold
+- [ ] Each cluster baseline is the same descriptor after removing that cluster
+- [ ] Definition summary contains only descriptor, seed, anchors, and attempts
+- [ ] Anchor table reports attempts, authorization success rate, and suspected-fraud share for every level, including n < 30
+- [ ] Characteristics contain descriptor total, cluster attempts/share, MCC, and cluster-vs-baseline auth rate, suspected-fraud share, top 3 banks, and top 3 BIN countries
+- [ ] Decision prose is ≤3 sentences (conclusion + basis)
+- [ ] Report answers highest-risk, identified-cluster characteristics, and by-tier/by-descriptor exposure
+- [ ] Run-specific methodology is separate from results; report and methodology link to each other
+- [ ] Zero families → ranking only; no descriptor-invented clusters
+- [ ] Language matches terminology.md; no confirmed-laundering claim

package/skills/payment/tld-detection/agents/openai.yaml

@@ -0,0 +1,9 @@
+interface:
+  display_name: "TLD Detection"
+  short_description: "Risk-tiered TLD clusters from exact currency-amount pairs"
+
+policy:
+  # Codex counterpart to SKILL.md disable-model-invocation: true
+  # (Claude Code / Pi). Keeps explicit invoke; blocks description-based
+  # auto-selection.
+  allow_implicit_invocation: false