coding-agent-skills 0.2.13 → 0.2.15

package/CHANGELOG.md

@@ -2,6 +2,48 @@
 
 All notable changes follow [Semantic Versioning](docs/versioning/README.md).
 
+## [0.2.15] - 2026-07-03
+
+### Added
+
+- `deployment-preflight` audit-only skill for static deployment readiness evidence
+  mapping before separately approved deployment work.
+- `coding-agent-skills deployment-preflight <project-root>` CLI command.
+- Dependency-free deployment preflight renderer for deployment config files, deployment
+  docs, package script keys without command values, platform indicators, static risk
+  indicators, adapter-limited scope, skipped paths, not-verified provider/runtime areas,
+  and safety refusals.
+- Synthetic deployment-preflight fixtures and release tests for generic static scans,
+  adapter-scoped scans, package script key detection, platform indicators, and
+  repo-map-only adapter skips.
+
+### Changed
+
+- Adapter schemas and validators now recognize `deployment-preflight` as an audit-only
+  skill while preserving the existing `0.2.3` adapter contract compatibility baseline.
+- Usage, release, safety, architecture, adapter, roadmap, ledger, and run-log docs now
+  describe the new static read-only deployment preflight command.
+
+## [0.2.14] - 2026-07-03
+
+### Added
+
+- `github-handoff` audit-only skill for local Git handoff evidence before separately
+  approved GitHub work.
+- `coding-agent-skills github-handoff <project-root>` CLI command.
+- Dependency-free GitHub handoff renderer for branch state, HEAD, tags at HEAD, remote
+  names, changed-file summaries, secret-bearing path redaction, adapter-limited scope,
+  and safety refusals.
+- Synthetic github-handoff fixtures and release tests that create disposable Git
+  repositories under `/tmp` for generic, adapter-scoped, and repo-map-only adapter cases.
+
+### Changed
+
+- Adapter schemas and validators now recognize `github-handoff` as an audit-only skill
+  while preserving the existing `0.2.3` adapter contract compatibility baseline.
+- Usage, release, safety, architecture, adapter, roadmap, ledger, and run-log docs now
+  describe the new local Git handoff report command.
+
 ## [0.2.13] - 2026-07-03
 
 ### Added

package/README.md

@@ -11,12 +11,14 @@ The pilot pack contains:
 - `secret-audit`: audit-only high-confidence secret exposure detection without values.
 - `api-contract-audit`: audit-only static API contract surface mapping.
 - `migration-review`: audit-only static migration and schema evidence review.
+- `github-handoff`: audit-only local Git handoff evidence before separately approved GitHub work.
+- `deployment-preflight`: audit-only static deployment readiness evidence mapping.
 - `build-verify`: controlled local validation using existing project commands.
 - `git-preflight`: audit-only Git readiness inspection.
 - `runtime-truth`: audit-only runtime evidence collection.
 - `llm-drift-control`: audit-only claim reconciliation.
 
-It does not contain deployment, package installation, Git publication, runtime mutation, migration, privileged API, platform-specific, or project-specific skills.
+It does not contain deployment execution, package installation, Git publication, runtime mutation, migration application, privileged API, platform-specific deployment automation, or project-specific skills.
 
 Project-specific adapters will live in their owning repositories and may narrow, but never weaken, shared safety rules.
 
@@ -48,6 +50,8 @@ Every skill emits the evidence-pack contract. A command being attempted is never
 - Find redacted secret exposure risks with `coding-agent-skills secret-audit <project-root>`.
 - Map static API contract surfaces with `coding-agent-skills api-contract-audit <project-root>`.
 - Review static migration and schema evidence with `coding-agent-skills migration-review <project-root>`.
+- Prepare local Git handoff evidence with `coding-agent-skills github-handoff <project-root>`.
+- Map static deployment readiness evidence with `coding-agent-skills deployment-preflight <project-root>`.
 - Validate project adapters against [the formal adapter schema](schemas/project-adapter.schema.json).
 - Review [external adapter discovery](docs/adapters/discovery.md).
 - Run `node scripts/validate-adapters.mjs <adapter-root>` for a disposable external root.
@@ -63,6 +67,10 @@ Every skill emits the evidence-pack contract. A command being attempted is never
   `node scripts/render-api-contract-audit.mjs <project-root>`.
 - Render a static migration review report with
   `node scripts/render-migration-review.mjs <project-root>`.
+- Render a local GitHub handoff report with
+  `node scripts/render-github-handoff.mjs <project-root>`.
+- Render a static deployment preflight report with
+  `node scripts/render-deployment-preflight.mjs <project-root>`.
 - Review [adapter upgrade checks](docs/adapters/upgrades.md).
 - Run `node scripts/check-adapter-upgrade.mjs <before-project-root> <after-project-root>`
   for disposable project revisions.

package/ROADMAP.md

@@ -1,6 +1,6 @@
 # Roadmap
 
-The public package now contains ten approved shared skills. Builder-mode approval is
+The public package now contains twelve approved shared skills. Builder-mode approval is
 active for the remaining read-only skill wave in this repository; real-world project
 execution constraints remain unchanged.
 
@@ -38,6 +38,10 @@ execution constraints remain unchanged.
   contract surface mapping.
 - `v0.2.13`: audit-only `migration-review` skill and CLI renderer for static migration
   and schema evidence review.
+- `v0.2.14`: audit-only `github-handoff` skill and CLI renderer for local Git handoff
+  evidence before separately approved GitHub work.
+- `v0.2.15`: audit-only `deployment-preflight` skill and CLI renderer for static
+  deployment readiness evidence before separately approved deployment work.
 
 The next milestone is recorded in [work-ledger.md](work-ledger.md). The
 [maintainer loop](RUNBOOK.md) may select and evidence that milestone, but it must stop
@@ -83,8 +87,8 @@ Next safe milestone options:
 | `secret-audit-skill` | General | Audit-only | Implemented in `v0.2.11` |
 | `api-contract-audit-skill` | General | Audit-only | Implemented in `v0.2.12` |
 | `migration-review-skill` | General with platform adapters | Audit-only | Implemented in `v0.2.13` |
-| `github-handoff-skill` | General | Audit-only | Builder-mode approved; next in wave |
-| `deployment-preflight-skill` | General | Audit-only | Builder-mode approved; later in wave |
+| `github-handoff-skill` | General | Audit-only | Implemented in `v0.2.14` |
+| `deployment-preflight-skill` | General | Audit-only | Implemented in `v0.2.15` |
 | `cloudflare-preflight-skill` | Platform-specific | Audit-only | Builder-mode approved; later in wave |
 | `cloudflare-deploy-skill` | Platform-specific | Action-capable | Blocked on approval model |
 | `supabase-rls-audit-skill` | Platform-specific | Audit-only | Builder-mode approved; later in wave |

package/bin/coding-agent-skills

@@ -53,6 +53,18 @@ const commands = {
     usage: "coding-agent-skills migration-review <project-root>",
     requiredArgs: 1,
   },
+  "github-handoff": {
+    script: "scripts/render-github-handoff.mjs",
+    args: ([projectRoot]) => [projectRoot],
+    usage: "coding-agent-skills github-handoff <project-root>",
+    requiredArgs: 1,
+  },
+  "deployment-preflight": {
+    script: "scripts/render-deployment-preflight.mjs",
+    args: ([projectRoot]) => [projectRoot],
+    usage: "coding-agent-skills deployment-preflight <project-root>",
+    requiredArgs: 1,
+  },
   "validate-adapters": {
     script: "scripts/validate-adapters.mjs",
     args: ([adapterRoot]) => [adapterRoot],
@@ -74,6 +86,8 @@ function usage(exitCode = 0) {
     "  secret-audit <project-root>",
     "  api-contract-audit <project-root>",
     "  migration-review <project-root>",
+    "  github-handoff <project-root>",
+    "  deployment-preflight <project-root>",
     "  validate-adapters <adapter-root>",
     "",
     "local wrapper for the published coding-agent-skills package",

package/docs/adapters/README.md

@@ -122,6 +122,40 @@ skipped paths, and not-verified database behavior. It never connects to database
 executes migrations, generates ORM clients, builds, tests, deploys, or mutates project
 files.
 
+## Adapter-Aware GitHub Handoff Consumption
+
+The shared pack can consume a validated project-owned adapter as bounded context for
+`github-handoff`:
+
+```bash
+node scripts/render-github-handoff.mjs <project-root>
+```
+
+The renderer validates the project declaration when present. If an adapter is present but
+does not enable `github-handoff`, it reports an adapter-limited skip instead of listing
+changed-file details. When enabled, it uses local Git metadata only: branch state, HEAD,
+tags at HEAD, remote names, and changed-file summaries. It never prints remote URLs,
+reads tokens, creates pull requests, commits, pushes, tags, calls GitHub APIs, or mutates
+project files.
+
+## Adapter-Aware Deployment Preflight Consumption
+
+The shared pack can consume a validated project-owned adapter as bounded context for
+`deployment-preflight`:
+
+```bash
+node scripts/render-deployment-preflight.mjs <project-root>
+```
+
+The renderer validates the project declaration when present. If an adapter is present but
+does not enable `deployment-preflight`, it reports an adapter-limited skip instead of
+broadening scope. When enabled, it reads only adapter-declared safe paths, excludes `.env`,
+secret-bearing files, generated output, dependency paths, build output, runtime output,
+and oversized files, then reports deployment config files, deployment docs, package
+script keys, platform indicators, risk indicators, skipped paths, and not-verified
+provider/runtime behavior. It never deploys, calls provider APIs, installs packages,
+builds, tests, runs services, migrates, or mutates project files.
+
 ## What Adapters May Do
 
 - Add bounded relative read paths and ignored paths.
@@ -135,6 +169,11 @@ files.
   handlers, client calls, and schema/type files.
 - Add migration-review safe read paths for static migration, schema, config, and package
   files while relying on the shared reviewer to exclude secret-bearing paths.
+- Add github-handoff required evidence labels and ignored path labels while relying on the
+  shared renderer to avoid remote URLs, tokens, and GitHub mutation.
+- Add deployment-preflight safe read paths for static deployment config, docs, and package
+  metadata while relying on the shared preflight renderer to exclude secret-bearing paths
+  and avoid deployment behavior.
 - Add command aliases that already satisfy the shared command policy.
 - Add status-only runtime commands and manager hints.
 - Require additional evidence or named approval for exceptional reads.

package/docs/adapters/project-installation.md

@@ -170,6 +170,32 @@ files, schema/config files, package script keys, static risk indicators, and not
 database behavior without connecting to databases, applying migrations, generating ORM
 clients, or running package scripts.
 
+A project-owned adapter can also enable read-only `github-handoff` context:
+
+```bash
+node scripts/render-github-handoff.mjs <project-root>
+```
+
+The GitHub handoff renderer validates the project declaration when present. If the adapter
+is present but does not enable `github-handoff`, it reports an adapter-limited skip.
+When enabled, it reports local Git metadata and changed-file summaries without printing
+remote URLs, reading tokens, creating pull requests, committing, pushing, tagging, calling
+GitHub APIs, or changing project files.
+
+A project-owned adapter can also enable read-only `deployment-preflight` context:
+
+```bash
+node scripts/render-deployment-preflight.mjs <project-root>
+```
+
+The deployment preflight renderer validates the project declaration when present. If the
+adapter is present but does not enable `deployment-preflight`, it reports an
+adapter-limited skip. When enabled, it reads only adapter-declared safe paths and reports
+static deployment config files, deployment docs, package script keys, platform indicators,
+risk indicators, and not-verified provider/runtime behavior without deploying, calling
+provider APIs, installing packages, building, testing, running services, or reading
+secrets.
+
 ## Safety Boundary
 
 Project adapters are extension-only. They cannot remove denied operations, change an

package/docs/adapters/real-project-adoption.md

@@ -21,7 +21,8 @@ project repository is touched:
 - The project can declare exactly one installation file: `.coding-agent/skills.json` or
   `coding-agent.skills.json`.
 - The adapter need is bounded to existing pilot skills: `repo-map`, `route-trace`,
-  `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`, `build-verify`, `git-preflight`,
+  `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`,
+  `github-handoff`, `deployment-preflight`, `build-verify`, `git-preflight`,
   `runtime-truth`, or `llm-drift-control`.
 - The adapter can narrow context with relative paths, documentation precedence, safe
   aliases, status-only hints, or extra evidence requirements.

package/docs/architecture/README.md

@@ -17,6 +17,8 @@ Audit-only:
 - `secret-audit`
 - `api-contract-audit`
 - `migration-review`
+- `github-handoff`
+- `deployment-preflight`
 - `git-preflight`
 - `runtime-truth`
 - `llm-drift-control`
@@ -25,6 +27,6 @@ Controlled local validation:
 
 - `build-verify`
 
-The evidence pack is a shared output contract, not an executable skill. Deployment
-preflight, GitHub handoff, provider operations, and additional project adapters remain
-separate future work.
+The evidence pack is a shared output contract, not an executable skill. Provider
+operations, deployment execution, and additional project adapters remain separate future
+work.

package/docs/release/README.md

@@ -20,8 +20,9 @@
     folders, generated output, and unrelated repositories.
 14. Install the tarball into a temporary npm prefix and smoke-test the installed CLI.
 15. Smoke-test any new CLI command such as `coding-agent-skills route-trace`,
-    `coding-agent-skills env-audit`, `coding-agent-skills secret-audit`, or
-    `coding-agent-skills api-contract-audit`, or `coding-agent-skills migration-review`
+    `coding-agent-skills env-audit`, `coding-agent-skills secret-audit`,
+    `coding-agent-skills api-contract-audit`, `coding-agent-skills migration-review`,
+    `coding-agent-skills github-handoff`, or `coding-agent-skills deployment-preflight`
     against synthetic fixtures only unless a real project read-only smoke is explicitly
     approved.
 16. Review changelog, ledger, run evidence, and versioning impact.

package/docs/release/npm-package.md

@@ -7,7 +7,7 @@ safety model.
 ## Current Package Shape
 
 - Package name: `coding-agent-skills`.
-- Package version: `0.2.13`.
+- Package version: `0.2.15`.
 - CLI bin: `coding-agent-skills` mapped to `bin/coding-agent-skills`.
 - Module type: `module`.
 - Dependencies: none.
@@ -32,6 +32,8 @@ coding-agent-skills env-audit /path/to/project
 coding-agent-skills secret-audit /path/to/project
 coding-agent-skills api-contract-audit /path/to/project
 coding-agent-skills migration-review /path/to/project
+coding-agent-skills github-handoff /path/to/project
+coding-agent-skills deployment-preflight /path/to/project
 coding-agent-skills validate-adapters /path/to/adapter-root
 ```
 
@@ -56,6 +58,13 @@ without running servers, calling APIs, or generating clients or schemas.
 files, package script keys, static risk indicators, and not-verified database behavior
 without connecting to databases, applying migrations, generating ORM clients, or reading
 secrets.
+`github-handoff` is local Git metadata only; it reports branch state, HEAD, tags at HEAD,
+remote names, and changed-file summaries without printing remote URLs, reading tokens,
+creating pull requests, committing, pushing, tagging, or calling GitHub APIs.
+`deployment-preflight` is static and audit-only; it reports deployment config files,
+deployment docs, package script keys, platform indicators, risk indicators, and
+not-verified provider/runtime behavior without deploying, calling provider APIs,
+installing packages, building, testing, or reading secrets.
 
 `coding-agent-skills validate-pack` is package-aware. In a source checkout, it keeps
 source-only checks such as `.gitignore` validation. In an installed package tree, where
@@ -90,7 +99,8 @@ included.
 
 The public CLI remains read-only for target projects unless a specific underlying skill
 already permits a bounded local validation action. The installed `repo-map`,
-`route-trace`, `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`, and adapter flows do not:
+`route-trace`, `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`,
+`github-handoff`, `deployment-preflight`, and adapter flows do not:
 
 - deploy
 - run migrations

package/docs/safety/README.md

@@ -2,7 +2,7 @@
 
 ## Audit-Only Rule
 
-`repo-map`, `route-trace`, `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`, `git-preflight`, `runtime-truth`, and `llm-drift-control` must not alter project files, Git state, dependencies, processes, services, databases, remote systems, or deployment state.
+`repo-map`, `route-trace`, `env-audit`, `secret-audit`, `api-contract-audit`, `migration-review`, `github-handoff`, `deployment-preflight`, `git-preflight`, `runtime-truth`, and `llm-drift-control` must not alter project files, Git state, dependencies, processes, services, databases, remote systems, or deployment state.
 
 `route-trace` is static only. It may read bounded non-secret route files and route
 configuration, but it must not execute app code, run servers, hit URLs, claim runtime
@@ -27,6 +27,16 @@ config, and package files, but it must not connect to databases, apply migration
 generate ORM clients, run package scripts, build, test, deploy, inspect runtime state, or
 broaden adapter scope.
 
+`github-handoff` is local Git metadata only. It may inspect branch state, HEAD, tags at
+HEAD, remote names, and changed-file status, but it must not print remote URLs, read
+tokens, create pull requests, commit, push, tag, call GitHub APIs, mutate Git state, or
+broaden adapter scope.
+
+`deployment-preflight` is static only. It may read bounded non-secret deployment config,
+docs, and package metadata, but it must not deploy, run provider CLIs, call cloud APIs,
+install packages, build, test, run services, migrate databases, read secret files, or
+broaden adapter scope.
+
 `build-verify` may run existing project-native validation commands. Build or test tools may create their normal local artifacts, but the skill must declare observed changes and must reject installation, fix modes, snapshot updates, deployment, migration, or unknown scripts.
 
 ## Restricted Categories

package/docs/testing/README.md

@@ -67,6 +67,22 @@ adapter-declared scope, and adapter-present-but-not-enabled behavior. Tests must
 connect to databases, apply migrations, generate ORM clients, run package scripts, build,
 test, deploy, or read `.env` files.
 
+## GitHub Handoff
+
+Synthetic github-handoff projects are copied into disposable Git repositories under
+`/tmp` during tests. The harness verifies branch state, HEAD, tags at HEAD, changed-file
+summary, adapter-declared evidence metadata, and adapter-present-but-not-enabled behavior.
+Tests must never commit to the shared repository, push, tag shared history, create pull
+requests, call GitHub APIs, print remote URLs, read tokens, or read `.env` files.
+
+## Deployment Preflight
+
+Synthetic deployment-preflight projects cover deployment config detection, deployment docs,
+package script keys without command values, static platform indicators, risk indicators,
+adapter-declared scope, and adapter-present-but-not-enabled behavior. Tests must never
+deploy, call provider APIs, install packages, build, test, run services, migrate, or read
+`.env` files.
+
 ## Privacy And Redaction
 
 Sensitive shapes are stored as ordered synthetic parts and reconstructed only in memory. Tests verify type detection, redaction, and absence from reusable skill content without printing fixture values.

package/docs/usage/README.md

@@ -10,6 +10,8 @@ Select the least-privileged skill that matches the request:
 | Find high-confidence secret exposure risks without values | `secret-audit` |
 | Map static API contract surfaces | `api-contract-audit` |
 | Review static migration and schema evidence | `migration-review` |
+| Prepare local GitHub handoff evidence | `github-handoff` |
+| Map static deployment readiness evidence | `deployment-preflight` |
 | Run existing local validation checks | `build-verify` |
 | Assess Git handoff readiness | `git-preflight` |
 | Determine what is actually running | `runtime-truth` |
@@ -27,11 +29,15 @@ Select the least-privileged skill that matches the request:
    calls, and schema/type files must be mapped without runtime behavior.
 6. Use `migration-review` when database migration, schema, config, package-script-key,
    and static risk-indicator evidence must be mapped without database access.
-7. Perform implementation outside this pilot pack.
-8. Use `build-verify` for approved project-native checks.
-9. Use `git-preflight` before handoff or publication.
-10. Use `runtime-truth` only when live local state matters.
-11. Use `llm-drift-control` when claims and evidence may disagree.
+7. Use `github-handoff` when local Git metadata and changed-file summaries are needed
+   before separately approved GitHub work.
+8. Use `deployment-preflight` when visible deployment config, docs, package script keys,
+   and platform hints must be mapped without deployment behavior.
+9. Perform implementation outside this pilot pack.
+10. Use `build-verify` for approved project-native checks.
+11. Use `git-preflight` before handoff or publication.
+12. Use `runtime-truth` only when live local state matters.
+13. Use `llm-drift-control` when claims and evidence may disagree.
 
 Every skill emits an evidence pack. Read `status`, skipped checks, failures, confidence, and changed state before relying on a completion claim.
 
@@ -67,6 +73,8 @@ coding-agent-skills env-audit /path/to/project
 coding-agent-skills secret-audit /path/to/project
 coding-agent-skills api-contract-audit /path/to/project
 coding-agent-skills migration-review /path/to/project
+coding-agent-skills github-handoff /path/to/project
+coding-agent-skills deployment-preflight /path/to/project
 coding-agent-skills validate-adapters /path/to/adapter-root
 ```
 
@@ -96,6 +104,14 @@ client-call patterns, schema/type files, skipped paths, and not-verified runtime
 paths when enabled, and statically reports migration files, schema/config files, package
 script keys, risk indicators, skipped paths, and not-verified database behavior without
 database access or migration execution.
+`github-handoff` validates a project adapter when present, then reports local Git branch
+state, HEAD, tags at HEAD, remote names, and changed-file summaries without printing
+remote URLs, committing, pushing, tagging, creating pull requests, calling GitHub APIs,
+or reading tokens.
+`deployment-preflight` validates a project adapter when present, uses adapter-declared
+safe paths when enabled, and statically reports deployment config files, deployment docs,
+package script keys, platform indicators, risk indicators, skipped paths, and
+not-verified provider/runtime behavior without deploying or calling provider APIs.
 
 The installed CLI does not run target project builds or tests, perform runtime checks,
 deploy, migrate, mutate services or processes, or read `.env` files. Project adapters
@@ -114,6 +130,8 @@ bin/coding-agent-skills env-audit /path/to/project
 bin/coding-agent-skills secret-audit /path/to/project
 bin/coding-agent-skills api-contract-audit /path/to/project
 bin/coding-agent-skills migration-review /path/to/project
+bin/coding-agent-skills github-handoff /path/to/project
+bin/coding-agent-skills deployment-preflight /path/to/project
 bin/coding-agent-skills validate-adapters /path/to/adapter-root
 ```
 
@@ -129,6 +147,8 @@ coding-agent-skills env-audit /path/to/project
 coding-agent-skills secret-audit /path/to/project
 coding-agent-skills api-contract-audit /path/to/project
 coding-agent-skills migration-review /path/to/project
+coding-agent-skills github-handoff /path/to/project
+coding-agent-skills deployment-preflight /path/to/project
 coding-agent-skills validate-adapters /path/to/adapter-root
 ```
 

package/examples/command-policies/deployment-preflight.json

@@ -0,0 +1,70 @@
+{
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "parserPolicy": {
+    "inspectEverySegment": true,
+    "inspectScriptBodies": true,
+    "rejectUnknownExecutables": true,
+    "rejectShellWrappers": true,
+    "rejectHeredocs": true,
+    "rejectRedirection": true,
+    "providerSpecificNpx": true,
+    "authenticatedCurlRequiresApproval": true,
+    "boundedReadsRequired": true,
+    "allowedComposition": "read-only"
+  },
+  "allowedFamilies": [
+    {
+      "name": "bounded-deployment-preflight-inspection",
+      "executables": ["pwd", "ls", "rg", "find", "sed", "head"],
+      "argumentPolicy": {
+        "strategy": "pattern",
+        "allowedPatterns": ["bounded repository-local static deployment config, docs, and package metadata inspection"],
+        "deniedPatterns": ["deployments, provider APIs, package installs, builds, tests, runtime checks, secret files, and unbounded traversal"]
+      },
+      "constraints": [
+        "Remain inside the declared project scope.",
+        "Bound traversal depth and output.",
+        "Exclude .env, secret-bearing, generated, dependency, build, and runtime-output paths."
+      ]
+    },
+    {
+      "name": "git-identity-inspection",
+      "executables": ["git"],
+      "argumentPolicy": {
+        "strategy": "exact",
+        "allowedPatterns": ["rev-parse and status --short --branch"],
+        "deniedPatterns": ["all Git mutation and publication subcommands"]
+      },
+      "constraints": ["Allow only read-only repository identity and branch-state inspection."]
+    },
+    {
+      "name": "deployment-preflight-renderer",
+      "executables": ["node", "coding-agent-skills"],
+      "argumentPolicy": {
+        "strategy": "exact",
+        "allowedPatterns": ["node scripts/render-deployment-preflight.mjs <project-root>; coding-agent-skills deployment-preflight <project-root>"],
+        "deniedPatterns": ["deployments, provider APIs, package installs, builds, tests, runtime checks, migrations, service mutation, and secret-file reads"]
+      },
+      "constraints": [
+        "The renderer must remain static and read-only.",
+        "Do not run provider CLIs, deploy, build, test, or inspect secrets."
+      ]
+    }
+  ],
+  "restrictedCategories": [
+    "file-write",
+    "package-install",
+    "deployment",
+    "git-mutation",
+    "unrestricted-scan",
+    "secret-read",
+    "process-mutation",
+    "service-mutation",
+    "migration-apply",
+    "privileged-api"
+  ],
+  "approvalExceptions": [
+    "A named-file approval may permit one otherwise excluded non-mutating static read when the file is not secret-bearing."
+  ]
+}

package/examples/command-policies/github-handoff.json

@@ -0,0 +1,74 @@
+{
+  "version": "0.2.3",
+  "mode": "audit-only",
+  "parserPolicy": {
+    "inspectEverySegment": true,
+    "inspectScriptBodies": true,
+    "rejectUnknownExecutables": true,
+    "rejectShellWrappers": true,
+    "rejectHeredocs": true,
+    "rejectRedirection": true,
+    "providerSpecificNpx": true,
+    "authenticatedCurlRequiresApproval": true,
+    "boundedReadsRequired": true,
+    "allowedComposition": "read-only"
+  },
+  "allowedFamilies": [
+    {
+      "name": "local-git-handoff-inspection",
+      "executables": ["git"],
+      "argumentPolicy": {
+        "strategy": "exact",
+        "allowedPatterns": [
+          "status --short --branch",
+          "rev-parse --show-toplevel",
+          "rev-parse --abbrev-ref HEAD",
+          "rev-parse HEAD",
+          "log -1 --format=%s",
+          "tag --points-at HEAD",
+          "remote"
+        ],
+        "deniedPatterns": [
+          "remote URL printing, commits, pushes, tags, branch changes, pull requests, releases, and GitHub API calls"
+        ]
+      },
+      "constraints": [
+        "Inspect local Git metadata only.",
+        "Do not print remote URLs.",
+        "Do not mutate Git state."
+      ]
+    },
+    {
+      "name": "github-handoff-renderer",
+      "executables": ["node", "coding-agent-skills"],
+      "argumentPolicy": {
+        "strategy": "exact",
+        "allowedPatterns": [
+          "node scripts/render-github-handoff.mjs <project-root>; coding-agent-skills github-handoff <project-root>"
+        ],
+        "deniedPatterns": [
+          "PR creation, release creation, GitHub API mutation, token reads, secret-file reads, commits, pushes, and tags"
+        ]
+      },
+      "constraints": [
+        "The renderer must remain audit-only.",
+        "Do not read tokens, print remote URLs, create pull requests, commit, push, or tag."
+      ]
+    }
+  ],
+  "restrictedCategories": [
+    "file-write",
+    "package-install",
+    "deployment",
+    "git-mutation",
+    "unrestricted-scan",
+    "secret-read",
+    "process-mutation",
+    "service-mutation",
+    "migration-apply",
+    "privileged-api"
+  ],
+  "approvalExceptions": [
+    "No approval exception may turn github-handoff into a GitHub mutation workflow."
+  ]
+}

package/examples/evidence-packs/deployment-preflight.json

@@ -0,0 +1,60 @@
+{
+  "contractVersion": "1.0.0",
+  "skill": {"name": "deployment-preflight", "version": "0.2.3"},
+  "invocation": {
+    "id": "example-deployment-preflight",
+    "startedAt": "2026-07-03T12:00:00Z",
+    "endedAt": "2026-07-03T12:01:00Z"
+  },
+  "repository": {
+    "root": "/workspace/example-project",
+    "branch": "main",
+    "head": "0123456789abcdef",
+    "workingTreeState": "clean"
+  },
+  "userIntent": "Map static deployment readiness evidence before deployment planning.",
+  "declaredScope": ["/workspace/example-project"],
+  "projectAdapter": "example-deployment-preflight-adapter",
+  "environmentSummary": {"platform": "linux", "shell": "bash"},
+  "status": "complete",
+  "confidence": {
+    "level": "medium",
+    "reason": "Static deployment evidence was inspected, but provider credentials and deployed state were not verified."
+  },
+  "commands": [
+    {
+      "command": "coding-agent-skills deployment-preflight /workspace/example-project",
+      "family": "deployment-preflight-renderer",
+      "workingDirectory": "/workspace/example-project",
+      "startedAt": "2026-07-03T12:00:20Z",
+      "endedAt": "2026-07-03T12:00:21Z",
+      "exitStatus": 0,
+      "resultStatus": "success",
+      "safetyClass": "allowed",
+      "approvalReference": null,
+      "purpose": "Render a static deployment preflight report.",
+      "outputSummary": "Reported static deployment config files, docs, platform indicators, risk indicators, skipped items, and not-verified provider areas."
+    }
+  ],
+  "skippedChecks": [],
+  "findings": [
+    {
+      "summary": "Static deployment evidence was mapped without deployment behavior.",
+      "evidence": ["wrangler.toml", "docs/deployment.md"]
+    }
+  ],
+  "risks": [
+    {
+      "summary": "Provider and deployed service state may differ from static repository evidence.",
+      "evidence": ["provider APIs were not called", "runtime health checks were not performed"]
+    }
+  ],
+  "failures": [],
+  "unresolvedQuestions": [],
+  "changedState": {
+    "changed": false,
+    "summary": "No project, Git, dependency, runtime, service, database, cloud provider, remote, deployment, or generated-output state changed."
+  },
+  "handoffSummary": "Static deployment evidence is mapped; deployment execution and provider state remain unverified.",
+  "recommendedNextAction": "Review reported deployment surfaces before separately approving any platform-specific deployment work."
+}