@hasna/skills 0.9.10 → 0.9.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -134,6 +134,19 @@ refuse without a configuration write. Enrollment uses a short-lived native
134
134
  app-server and makes hooks eligible for new Codex processes. Existing sessions
135
135
  retain their own configuration; use their native hook controls to refresh them.
136
136
 
137
+ When an explicit discovery review includes the full Codex configuration file,
138
+ the exact native trust writes change that file's byte hash. Enrollment verifies
139
+ those writes and completes its journal with `bindingRefreshRequired: true`.
140
+ This reports native trust eligibility only: ordinary managed context remains
141
+ blocked, and the discovery policy is unchanged. Review the current full file
142
+ again and plan `skills hook install --agent codex --discovery-inputs <review>
143
+ --command <same-absolute-command> --json`. Verify that the plan changes only the
144
+ discovery policy, then repeat with `--apply`. Keep the same command and native
145
+ home. The ordinary bridge must then pass, and a fresh `skills hook trust
146
+ --agent codex --json` must report zero planned changes and
147
+ `bindingRefreshRequired: false`. Verify context in a new native session after
148
+ these checks; an enrollment receipt does not prove context was consumed.
149
+
137
150
  If an interrupted journal's policy later changed only in reviewed Claude
138
151
  discovery roots/sources, `skills hook trust reconcile --agent codex --journal
139
152
  <path> --review-claude-discovery <evidence-reference> --json` can preview that