coding-agent-skills 0.2.9 → 0.2.10

package/scripts/test-pack.mjs

@@ -47,6 +47,11 @@ import {
   renderRouteTraceReport,
   routeTraceCliResult,
 } from "./lib/route-trace.mjs";
+import {
+  buildEnvAuditReport,
+  envAuditCliResult,
+  renderEnvAuditReport,
+} from "./lib/env-audit.mjs";
 import {
   adapterUpgradeCliResult,
   checkAdapterUpgrade,
@@ -262,6 +267,7 @@ test("local CLI maps approved commands to existing safe scripts", () => {
   assert.ok(cliText.includes("scripts/validate-project-adapters.mjs"));
   assert.ok(cliText.includes("scripts/render-adapter-repo-map.mjs"));
   assert.ok(cliText.includes("scripts/render-route-trace.mjs"));
+  assert.ok(cliText.includes("scripts/render-env-audit.mjs"));
   assert.ok(cliText.includes("scripts/validate-adapters.mjs"));
   assert.ok(!cliText.includes(".env"));
 
@@ -287,6 +293,10 @@ test("local CLI maps approved commands to existing safe scripts", () => {
       ["route-trace", path.join(fixtureRoot, "route-trace", "static-project")],
       /# Route Trace Report/,
     ],
+    [
+      ["env-audit", path.join(fixtureRoot, "env-audit", "static-project")],
+      /# Env Audit Report/,
+    ],
   ];
 
   for (const [args, expected] of commands) {
@@ -311,7 +321,7 @@ test("local CLI maps approved commands to existing safe scripts", () => {
 test("npm package metadata is public-ready and dependency-free", () => {
   const packageJson = readJson("package.json");
   assert.equal(packageJson.name, "coding-agent-skills");
-  assert.equal(packageJson.version, "0.2.9");
+  assert.equal(packageJson.version, "0.2.10");
   assert.equal(
     packageJson.description,
     "Evidence-first, read-only coding-agent skills and project adapter tooling.",
@@ -324,6 +334,7 @@ test("npm package metadata is public-ready and dependency-free", () => {
     "agent-skills",
     "repo-map",
     "route-trace",
+    "env-audit",
     "project-adapters",
     "code-validation",
     "cli",
@@ -451,6 +462,65 @@ test("route-trace does not broaden a repo-map-only project adapter", () => {
   assert.match(renderRouteTraceReport(result), /route-trace is not enabled/);
 });
 
+test("env-audit identifies variable names without reading .env values", () => {
+  const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "env-audit-fixture-"));
+  fs.cpSync(path.join(root, "tests", "fixtures", "env-audit", "static-project"), temporary, {
+    recursive: true,
+  });
+  fs.writeFileSync(path.join(temporary, ".env"), "SHOULD_NOT_BE_READ=synthetic-fixture-value\n");
+
+  const result = buildEnvAuditReport(
+    temporary,
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "complete");
+  assert.ok(result.filesScanned.includes(".env.example"));
+  assert.ok(!result.filesScanned.includes(".env"));
+  assert.ok(result.skipped.some((item) => item.path === ".env"));
+  const names = result.variables.map((variable) => variable.name);
+  assert.ok(names.includes("DATABASE_URL"));
+  assert.ok(names.includes("NEXT_PUBLIC_APP_URL"));
+  assert.ok(names.includes("PORT"));
+  assert.ok(names.includes("SERVICE_TOKEN"));
+  assert.ok(names.includes("DENO_REGION"));
+  const rendered = renderEnvAuditReport(result);
+  assert.match(rendered, /DATABASE_URL/);
+  assert.doesNotMatch(rendered, /synthetic-fixture-value/);
+});
+
+test("env-audit respects adapter-declared scope", () => {
+  const result = buildEnvAuditReport(
+    path.join(root, "tests", "fixtures", "env-audit", "adapter-project"),
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "complete");
+  assert.equal(result.adapter.enabled, true);
+  assert.deepEqual(result.scopePaths, ["src"]);
+  assert.deepEqual(result.filesScanned, ["src/config.ts"]);
+  assert.ok(result.variables.some((variable) => variable.name === "ADAPTER_ONLY_VALUE"));
+  assert.ok(result.warnings.includes("env-audit used adapter-declared safe read paths only"));
+  const cli = envAuditCliResult(
+    path.join(root, "tests", "fixtures", "env-audit", "adapter-project"),
+    { coreRoot: root },
+  );
+  assert.equal(cli.exitCode, 0);
+  assert.match(cli.lines.join("\n"), /Env-audit enabled: yes/);
+});
+
+test("env-audit does not broaden a repo-map-only project adapter", () => {
+  const result = buildEnvAuditReport(
+    path.join(root, "tests", "fixtures", "project-adapter-installation", "valid-exact-pin"),
+    { coreRoot: root },
+  );
+
+  assert.equal(result.status, "partial");
+  assert.equal(result.filesScanned.length, 0);
+  assert.equal(result.variables.length, 0);
+  assert.match(renderEnvAuditReport(result), /env-audit is not enabled/);
+});
+
 test("validate-pack accepts installed package trees without source-only gitignore", () => {
   const temporaryRoot = fs.mkdtempSync(path.join(os.tmpdir(), "installed-package-"));
   const installedRoot = path.join(temporaryRoot, "coding-agent-skills");

package/scripts/validate-pack.mjs

@@ -96,12 +96,14 @@ const requiredRootFiles = [
   "scripts/render-evidence-archive-report.mjs",
   "scripts/render-adapter-repo-map.mjs",
   "scripts/render-route-trace.mjs",
+  "scripts/render-env-audit.mjs",
   "scripts/check-adapter-upgrade.mjs",
   "scripts/check-adapter-upgrade-chain.mjs",
   "scripts/validate-adapters.mjs",
   "scripts/validate-project-adapters.mjs",
   "scripts/lib/adapter-repo-map.mjs",
   "scripts/lib/route-trace.mjs",
+  "scripts/lib/env-audit.mjs",
   "scripts/lib/adapter-upgrade.mjs",
   "scripts/lib/adapter-upgrade-chain.mjs",
   "scripts/lib/adapter-discovery.mjs",
@@ -675,8 +677,8 @@ if (packageJson) {
   if (packageJson.name !== "coding-agent-skills") {
     failures.push("package.json has unexpected package name");
   }
-  if (packageJson.version !== "0.2.9") {
-    failures.push("package.json version must be 0.2.9 for public package validation");
+  if (packageJson.version !== "0.2.10") {
+    failures.push("package.json version must be 0.2.10 for public package validation");
   }
   if (packageJson.type !== "module") failures.push("package.json must preserve ESM mode");
   if (packageJson.private !== false) {
@@ -695,6 +697,7 @@ if (packageJson) {
       "agent-skills",
       "repo-map",
       "route-trace",
+      "env-audit",
       "project-adapters",
       "code-validation",
       "cli",

package/skills/env-audit/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: env-audit
+description: Identify environment variable names and configuration requirements from static files without reading .env files or printing values. Use when Codex must map required, optional, sample, or inferred environment names before implementation, deployment planning, or handoff; do not use for secret validation, credential testing, API calls, runtime checks, builds, tests, deployments, migrations, or secret-file reads.
+---
+
+# Env Audit
+
+Identify environment variable names from bounded static evidence and emit a value-free report. Remain audit-only and fail closed when evidence would require secret files, runtime state, or credential validation.
+
+This skill must not change project files, Git state, dependencies, runtime state, services,
+databases, remotes, or deployment state.
+
+## Purpose And Use
+
+Use this skill to map statically visible environment variable names, sample declarations, and configuration references before changing code, documenting setup, or preparing handoff. It can classify names as sample, required, optional, or inferred, but it must not claim that any value exists or works.
+
+Do not use this skill for secret auditing, credential validation, live service checks, runtime truth claims, deployment readiness, migrations, builds, tests, or package installation.
+
+## Inputs
+
+Require a project root or starting path. Optionally accept a project adapter, intended config area, maximum static scan depth, or named framework/config family to prioritize.
+
+Do not assume `.env` files may be read, variable values are safe, documented names are complete, sample files are current, runtime-injected variables are visible, or an adapter covers every configuration surface.
+
+## Procedure
+
+1. Record user intent, project root, declared scope, adapter state, and safety boundary.
+2. Validate a project adapter when present before reading adapter-declared metadata.
+3. If an adapter is present but does not enable `env-audit`, stop static file reading and report the adapter-limited skip.
+4. Build the scan scope from adapter safe read paths when available; otherwise use a bounded generic static scan.
+5. Exclude `.env`, `.env.*` except `.env.example`, secret-bearing paths, generated paths, dependency paths, and oversized files before reading.
+6. Extract environment variable names from safe static patterns such as `process.env.NAME`, `import.meta.env.NAME`, `Deno.env.get("NAME")`, `env("NAME")`, docs, and `.env.example` declarations.
+7. Never print values, line contents, tokens, credentials, or raw secret-like matches.
+8. Label every finding as sample, required, optional, inferred, skipped, or not verified.
+9. Report skipped files, unverified runtime/secret-store areas, branch state warnings, and safety refusals.
+10. Emit the shared evidence pack or env-audit report before claiming completion.
+
+Use [checklist.md](checklist.md). Consult [failure-modes.md](failure-modes.md), [adapter-interface.md](adapter-interface.md), and [examples.md](examples.md). Format findings with [evidence-template.md](evidence-template.md).
+
+## Evidence, Recovery, And Dependencies
+
+Emit repository identity, adapter state, scan scope, ignored paths, variable names, classifications, file references, sample files inspected, skipped items, not-verified areas, warnings, and changed-state declaration through the shared evidence-pack contract.
+
+Recover from missing adapters, unreadable files, ambiguous variable names, or secret-bearing paths by narrowing scope and reporting uncertainty. Never recover by reading `.env`, printing values, validating credentials, contacting APIs, installing dependencies, running builds/tests, broadening adapter scope, or mutating files.
+
+This skill depends on the evidence-pack contract and may consume validated project adapters. Adapters may add safe paths, ignored paths, documentation precedence, and evidence requirements, but cannot weaken policy or turn this skill into credential validation.
+
+## Approval Boundary
+
+Explicit approval may permit one named non-secret static file read outside normal config paths. Approval does not permit `.env` or secret-file reads, value printing, credential validation, API calls, builds, tests, package installation, runtime checks, deployments, migrations, Git mutation, or project writes.
+
+## Completion
+
+Claim `complete` only when the declared static scan scope was inspected, variable names are reported without values, skipped and not-verified areas are recorded with consequences, adapter limitations are explicit, and no project, Git, dependency, runtime, service, or remote state changed.
+
+Report `partial`, `failed`, or `blocked` when adapter scope prevents env scanning, requested evidence requires secret files or runtime state, the project root cannot be established, or safety exclusions prevent a requested conclusion. Never claim credential presence or validity from static findings.
+
+These conditions are both the acceptance criteria and definition of done.

package/skills/env-audit/adapter-interface.md

@@ -0,0 +1,12 @@
+Adapters may enable `env-audit` by declaring the skill ID with unchanged `audit-only`
+mode and compatible version `0.2.3` or `0.2.x`.
+
+Useful extension fields:
+
+- `safeReadPaths`: source, docs, sample, and config paths that may contain env names.
+- `ignoredPaths`: generated, dependency, runtime-output, and secret-bearing paths to skip.
+- `documentationPrecedence`: docs that may explain required or optional env names.
+- `requiredEvidence`: evidence the report must include before completion.
+
+Adapters must not add `.env`, `.env.*` except `.env.example`, credentials, secret stores,
+runtime checks, API calls, builds, tests, deployments, migrations, or project writes.

package/skills/env-audit/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "Env Audit"
+  short_description: "Map env variable names without reading values"
+  default_prompt: "Audit the statically visible environment variable names in this repository without changing project state. Do not read .env files or print values."

package/skills/env-audit/checklist.md

@@ -0,0 +1,7 @@
+- Confirm project root, branch state, and adapter state.
+- Validate adapter before consuming any adapter-declared paths.
+- Refuse `.env`, `.env.*` except `.env.example`, secret-bearing paths, and generated outputs.
+- Scan only bounded static source, docs, sample, and config files.
+- Record variable names, classifications, and file references without values.
+- Record skipped files and runtime/secret-store areas that were not verified.
+- Confirm no files, dependencies, runtime state, services, remotes, or databases changed.

package/skills/env-audit/evidence-template.md

@@ -0,0 +1,17 @@
+## Env Audit Evidence
+
+- Repository root:
+- Branch state:
+- Adapter state:
+- Scan scope:
+- Ignored paths:
+- Static files scanned:
+- Sample files inspected:
+- Variable names found:
+- Required names:
+- Optional names:
+- Inferred names:
+- Skipped items:
+- Not verified:
+- Safety refusals:
+- Changed state: none

package/skills/env-audit/examples.md

@@ -0,0 +1,28 @@
+## Safe
+
+```bash
+coding-agent-skills env-audit /workspace/app
+```
+
+Produces a value-free list of names such as `DATABASE_URL`, `NEXT_PUBLIC_API_URL`, and
+`PORT`, with file references and classifications.
+
+```bash
+node scripts/render-env-audit.mjs tests/fixtures/env-audit/static-project
+```
+
+Runs the synthetic fixture scanner without reading `.env` files or contacting services.
+
+## Unsafe
+
+```bash
+cat .env
+```
+
+Secret-file reads are forbidden.
+
+```bash
+npm run dev
+```
+
+Runtime checks are outside this skill.

package/skills/env-audit/failure-modes.md

@@ -0,0 +1,5 @@
+- **Adapter not enabled:** report `partial` and do not broaden target-project scanning.
+- **Secret-bearing path requested:** skip the file and record the safety exclusion.
+- **Dynamic variable names:** report as not verified instead of guessing.
+- **Large or unreadable files:** skip with consequence and continue bounded scanning.
+- **Credential validation requested:** refuse and explain that only names are in scope.

package/tests/fixtures/env-audit/adapter-project/.coding-agent/adapters/env-audit-fixture/adapter.json

@@ -0,0 +1,56 @@
+{
+  "adapterId": "env-audit-fixture",
+  "adapterVersion": "1.0.0",
+  "project": {
+    "id": "env-audit-fixture",
+    "detection": {
+      "rootMarkers": [
+        {"kind": "file", "path": "package.json"},
+        {"kind": "file", "path": "README.md"}
+      ],
+      "maximumDepth": 1,
+      "scope": "declared-project-root",
+      "requireApprovalOutsideScope": true
+    }
+  },
+  "supportedSkills": [
+    {
+      "id": "env-audit",
+      "compatibleVersions": ["0.2.3", "0.2.x"],
+      "declaredMode": "audit-only"
+    }
+  ],
+  "extensions": {
+    "safeReadPaths": ["src"],
+    "ignoredPaths": ["dist", "build"],
+    "documentationPrecedence": ["README.md"],
+    "commandAliases": [],
+    "safeStatusCommands": [],
+    "requiredEvidence": ["project root", "adapter scope", "env names", "skipped secret paths"],
+    "expectedRuntimeManagers": [],
+    "expectedPackageManagers": ["npm"]
+  },
+  "approvalRequirements": [],
+  "inheritance": {
+    "sharedRestrictions": "required",
+    "deniedOperationCategories": [
+      "file-write",
+      "package-install",
+      "deployment",
+      "git-mutation",
+      "unrestricted-scan",
+      "secret-read",
+      "process-mutation",
+      "service-mutation",
+      "migration-apply",
+      "privileged-api"
+    ],
+    "allowRestrictionRemoval": false,
+    "allowModeOverride": false,
+    "allowFailureSuppression": false,
+    "allowCompletionOverride": false,
+    "allowSecretExposure": false,
+    "allowRequiredEvidenceRemoval": false,
+    "allowScopeExpansionWithoutApproval": false
+  }
+}

package/tests/fixtures/env-audit/adapter-project/.coding-agent/skills.json

@@ -0,0 +1,23 @@
+{
+  "declarationVersion": "1.0.0",
+  "projectId": "env-audit-fixture",
+  "adapterRoot": ".coding-agent/adapters",
+  "adapterSchemaVersion": "1.0.0",
+  "core": {
+    "id": "coding-agent-skills",
+    "expectedVersion": "0.2.3",
+    "versionPin": ">=0.2.3 <0.3.0"
+  },
+  "compatibleSkillIds": ["env-audit"],
+  "adapters": [
+    {
+      "id": "env-audit-fixture",
+      "version": "1.0.0",
+      "skillIds": ["env-audit"]
+    }
+  ],
+  "validationCommand": "node <shared-core>/scripts/validate-project-adapters.mjs <project-root>",
+  "evidenceOutput": "validation-output/project-adapters.json",
+  "approvalPolicyReference": "docs/coding-agent-approval-policy.md",
+  "noSecrets": true
+}

package/tests/fixtures/env-audit/adapter-project/README.md

@@ -0,0 +1,3 @@
+# Env Audit Adapter Fixture
+
+This fixture narrows env scanning to `src`.

package/tests/fixtures/env-audit/adapter-project/package.json

@@ -0,0 +1,4 @@
+{
+  "name": "fixture-env-audit-adapter",
+  "type": "module"
+}

package/tests/fixtures/env-audit/adapter-project/src/config.ts

@@ -0,0 +1,2 @@
+export const adapterScoped = process.env.ADAPTER_ONLY_VALUE;
+export const adapterOptional = process.env.ADAPTER_OPTIONAL_VALUE ?? "fallback";

package/tests/fixtures/env-audit/static-project/.env.example

@@ -0,0 +1,3 @@
+DATABASE_URL=
+NEXT_PUBLIC_APP_URL=
+OPTIONAL_FEATURE_FLAG=

package/tests/fixtures/env-audit/static-project/README.md

@@ -0,0 +1,3 @@
+# Env Audit Static Fixture
+
+Requires DATABASE_URL and optional NEXT_PUBLIC_APP_URL. Workers may use QUEUE_NAME.

package/tests/fixtures/env-audit/static-project/docs/setup.md

@@ -0,0 +1,3 @@
+# Setup
+
+Set DATABASE_URL before starting locally. NEXT_PUBLIC_APP_URL is optional.

package/tests/fixtures/env-audit/static-project/package.json

@@ -0,0 +1,4 @@
+{
+  "name": "fixture-env-audit-static",
+  "type": "module"
+}

package/tests/fixtures/env-audit/static-project/src/config.ts

@@ -0,0 +1,4 @@
+export const databaseUrl = process.env.DATABASE_URL;
+export const port = process.env.PORT ?? "3000";
+export const publicUrl = import.meta.env.NEXT_PUBLIC_APP_URL;
+export const requiredToken = env("SERVICE_TOKEN");

package/tests/fixtures/env-audit/static-project/src/deno.ts

@@ -0,0 +1 @@
+export const denoValue = Deno.env.get("DENO_REGION");

package/tests/fixtures/triggers/cases.json

@@ -31,6 +31,18 @@
       "expectedSkill": "route-trace",
       "notSkills": ["build-verify", "runtime-truth"]
     },
+    {
+      "id": "env-audit-process-env",
+      "prompt": "Audit process.env and import.meta.env references without reading .env files.",
+      "expectedSkill": "env-audit",
+      "notSkills": ["secret-audit", "runtime-truth"]
+    },
+    {
+      "id": "env-audit-setup-docs",
+      "prompt": "Identify environment variables and configuration requirements from static docs and .env.example only.",
+      "expectedSkill": "env-audit",
+      "notSkills": ["build-verify", "deployment-preflight"]
+    },
     {
       "id": "build-after-implementation",
       "prompt": "The implementation is finished. Run the existing typecheck, tests, and build.",
@@ -83,7 +95,7 @@
       "id": "negative-deploy",
       "prompt": "Deploy this application to production.",
       "expectedSkill": null,
-      "notSkills": ["repo-map", "route-trace", "build-verify", "git-preflight", "runtime-truth", "llm-drift-control"]
+      "notSkills": ["repo-map", "route-trace", "env-audit", "build-verify", "git-preflight", "runtime-truth", "llm-drift-control"]
     },
     {
       "id": "negative-install",

package/tests/trigger/README.md

@@ -4,6 +4,8 @@
 
 - Repository orientation must trigger `repo-map`, not build or runtime validation.
 - Static route-surface tracing must trigger `route-trace`, not repository mapping or runtime truth.
+- Value-free environment variable mapping must trigger `env-audit`, not runtime truth or
+  secret-value inspection.
 - Local validation must trigger `build-verify` only when project-native checks are requested.
 - Git readiness must trigger `git-preflight`, not publication.
 - Process/listener/health questions must trigger `runtime-truth`, not restart behavior.

package/work-ledger.md

@@ -4,26 +4,29 @@
 
 - Repository: `coding-agent-skills`
 - Branch: `main`
-- Pilot skills: `repo-map`, `route-trace`, `build-verify`, `git-preflight`, `runtime-truth`, `llm-drift-control`
+- Pilot skills: `repo-map`, `route-trace`, `env-audit`, `build-verify`, `git-preflight`, `runtime-truth`, `llm-drift-control`
 - Adapter discovery, project adapter installation, stale-pin detection, upgrade evidence, compatibility-chain validation, evidence-bundle verification, retention policy, provenance design, archive-report rendering, archive-index fixtures, retention-expiry advisory reporting, and detached-signature verification planning are implemented.
 - Real-project adapter adoption readiness is documented as a planning-only approval gate.
 - First external project-owned adapter adoption completed for `/home/oneclickwebsitedesignfactory/tax-lien-platform` at candidate commit `c548b1a6cbb3455a70b89d0e301e22435bfccac9`.
 - The adopted adapter is `repo-map` only, docs/metadata-only, and contains no commands, runtime checks, build/test/package behavior, platform/deployment behavior, or secret-aware behavior.
 - The shared repository does not contain real adapter manifests; real project adapters remain owned by their project repositories.
-- Public npm package release `v0.2.9` exposes the dependency-free
+- Public npm package release `v0.2.10` exposes the dependency-free
   `coding-agent-skills` CLI under MIT license.
-- `route-trace` is implemented as an audit-only static route tracing skill. Additional new
-  skills are not approved.
+- `route-trace` is implemented as an audit-only static route tracing skill.
+- `env-audit` is implemented as an audit-only value-free environment variable name mapping
+  skill.
+- Builder-mode approval: complete the remaining read-only skill wave for
+  `coding-agent-skills` itself. Real-world project execution constraints remain unchanged.
 
 ## Last Completed Version
 
-`v0.2.9`
+`v0.2.10`
 
 ## Current Recommended Milestone
 
-The `route-trace` public npm release is complete for the approved CLI surface. No further
-real adapters, adapter expansion, new skills, platform skills, deployment/preflight work,
-signing infrastructure, or evidence-harness milestone is approved.
+The `env-audit` public npm release is in progress under builder-mode approval. Continue the
+remaining read-only skill wave one release at a time unless a real safety, validation,
+publication, or authentication boundary appears.
 
 ## Allowed Next Actions
 
@@ -41,7 +44,7 @@ signing infrastructure, or evidence-harness milestone is approved.
 
 ## Blocked Actions
 
-- Adding more new skills.
+- Adding skills outside the approved builder-mode read-only wave.
 - Creating real project adapters.
 - Modifying real project repositories.
 - Publishing release artifacts without explicit approval.
@@ -73,14 +76,15 @@ signing infrastructure, or evidence-harness milestone is approved.
 - Implementing the next evidence-retention or provenance milestone.
 - Selecting a real project adapter candidate.
 - Gathering evidence from a real project repository.
-- Creating, changing, or removing skills.
+- Creating, changing, or removing skills outside the approved builder-mode read-only wave.
 - Adding real project adapters.
 - Expanding the adopted `tax-lien-platform` adapter beyond `repo-map`.
 - Enabling candidate repo package scripts, build verification, runtime checks, or command aliases.
 - Allowing or bypassing project Git hooks during future adapter publication.
 - Touching real project repositories.
 - Changing release publication behavior.
-- Publishing a new npm version beyond the approved release.
+- Publishing a new npm version outside the approved builder-mode read-only wave or another
+  explicitly approved release.
 - Commit, tag, or push operations.
 - Any action not listed in the allowed next actions above.
 
@@ -94,6 +98,15 @@ No next runner command is currently queued.
 
 No autonomous maintainer-loop run has been recorded yet.
 
+### 2026-07-03T10:00:00Z
+
+- Latest tag observed: `v0.2.9`
+- Implemented milestone: `env-audit` audit-only environment variable name mapping skill and CLI command.
+- Required permission: `builder-mode-skill-implementation`
+- Validation result: pass pending final publication evidence
+- Next recommended milestone: continue builder-mode wave with `secret-audit-skill` after
+  `v0.2.10` publication completes.
+
 
 ### 2026-06-19T00:00:00Z