Chris 831029e5b6 docs(agents): add three-verdict finding contract to security skill (#8795) ...

Require every security candidate to name the lower-trust principal, the crossed boundary, the affected resource, and the observable result, and to land under exactly one of `confirmed`, `needs_validation`, or `rejected`. Only confirmed findings carry severity; a trace blocked on an unresolved deployment fact is reported as that fact instead of an assumption.

2026-10-22 08:06:34 +09:00

..

references

docs: trim redundant project skills (#8323)

2026-10-03 21:30:26 +08:00

skills

docs(agents): add three-verdict finding contract to security skill (#8795)

2026-10-22 08:06:34 +09:00