skillify

Iron contract — never write a half-broken skill to disk

Skills are user-trust artifacts. A broken skill in $B skill list makes agents reach for the wrong tool and erodes confidence. This skill writes to a temp dir, runs the auto-generated test there, and only renames into the final tier path on (a) test pass + (b) explicit user approval. On either failure, the temp dir is removed entirely. There is no "almost shipped" state.

Step 1 — Provenance guard (D1)

Walk back through the conversation, at most 10 agent turns, looking for the most recent /scrape invocation that:

• Was bounded (you can identify the user's intent line and the trailing JSON the prototype produced)
• Produced a JSON result the user did not subsequently invalidate (e.g., did not say "that's wrong", did not ask you to retry)