Verify Open Pstack

Launch

This repository-local, non-shipped skill is shared with Codex through .agents/skills/verify-open-pstack. Verifier-changing PRs run from a checkout of their reviewed candidate head; all other PRs run from trusted main. The trusted parent owns GitHub reads and publication; candidate processes never receive publisher credentials. Its only GitHub writes are one structured evidence comment and live-gate status on the exact candidate SHA; it never queues or merges.

Install development dependencies separately when testing this skill; verify.sh does not install at runtime:

(cd .claude/skills/verify-open-pstack && bun install --frozen-lockfile --ignore-scripts)

Then run from the trusted publisher checkout: