Skip to content
Back to skills

02 Accepted

ASecurity

<!-- machine-parseable table: directory = current status, last row = latest record -->

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 18, 2026
ai-agentsrustgoshelltesting

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned October 18, 2026

npx -y skills add lythos-labs/lythoskill --skill 02-accepted --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 02 Accepted?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 02 Accepted
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/lythos-labs-02-accepted-lythoskill/badge)](https://www.skillsdirectory.com/skills/lythos-labs-02-accepted-lythoskill)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# ADR-20260828005453077: incubate standalone general-purpose zk review skill

## Status History
<!-- machine-parseable table: directory = current status, last row = latest record -->

| Status | Date | Note |
|--------|------|------|
| proposed | 2026-08-27 | Created |
| accepted | 2026-08-28 | Accepted |

## Background
<!-- ⚠️ REQUIRED: Problem description and context. Empty = shell, blocked by probe. -->

The ZK (zero-knowledge) review pattern — spawn a context-free agent as a *sensor* against an artifact (task card, doc, UX flow, code), then process its findings — has sedimented into at least three places inside this project, each with its own copy of the methodology:

- **cortex**: ZK Review Gate for task cards (`packages/lythoskill-project-cortex/skill/references/zk-review.md`) — WHAT/WHY/HOW gap protocol, 4 gap types, 3-round ceiling, fill/challenge/reject dispositions.
- **arena**: ZK subagents for deck/skill testing — "mindset validator, not output checker".
- **BDD/e2e**: `reproduce.sh` ZK replay — a fresh agent self-discovers the scenario from the script (wiki: 2026-05-18-zero-knowledge-reproduce-sh-handoff).

User observation (2026-08-28): the pattern is proven but **locked inside** arena and this project's own e2e testing — worth incubating as a standalone, general-purpose skill any project can adopt. The methodology (sensor-not-oracle discipline, pass-by-reference dispatch, gap taxonomy, convergence protocol) is project-agnostic; only the gates (cortex task cards, arena decks) are project-specific.

## Decision Drivers
<!-- ⚠️ REQUIRED: Why does this decision need to be made? -->
- The pattern's value is demonstrated (ZK caught the site command bugs doc review missed, twice); its reach is artificially limited to this repo.
- Three embedded copies will drift — extraction creates one SSOT.
- Thin Skill Pattern is proven at exactly this skill level (user, 2026-08-28: cortex governance robustness as evidence).
- Over-extraction risk: the general skill must not drag cortex/arena specifics with it.

## Options

### Option A — Keep embedded (status quo)
Each consumer keeps its own copy of the methodology.

**Pros**:
- Zero work; each copy is locally tuned.

**Cons**:
- Drift across three copies; external projects can't adopt the pattern without adopting cortex/arena; the pattern's generality stays invisible.

### Option B — Extract a standalone `lythoskill-zk` skill (recommended)
New thin skill package carrying the general methodology: sensor-not-oracle framing, pass-by-reference dispatch, gap taxonomy, convergence protocol, disposition rules, trial-usage pattern. cortex and arena keep only their *gate wiring* (when to trigger, what artifacts to point at) and reference the general skill for the method.

**Pros**:
- One SSOT for the method; adoptable by any project via `deck add`; the "ZK as verification primitive" idea becomes a discoverable artifact, not buried tribal knowledge.
- Follows the established thin-skill build pipeline — no new infrastructure.

**Cons**:
- Boundary design is the real work: method (general) vs gate wiring (project-specific) must be split cleanly or the skill leaks cortex vocabulary.
- One more package to version/publish.

### Option C — Document-only: a wiki pattern page, no skill
**Pros**: cheapest.
**Cons**: doc-exhorted routines don't run (P-mechanize-routines); a pattern page can't be `deck add`-ed into another project's working set.

## Decision
<!-- ⚠️ REQUIRED: Explicit choice + rationale. Keeping placeholders = shell. -->
**Choice**: Option B (accepted by user 2026-08-28)

**Rationale**: The pattern has three independent existence proofs inside this repo and directly caused external-facing bug catches (site commands, onboarding UX). Extraction cost is low because the thin-skill pipeline already exists; the main risk (boundary leakage) is mitigated by making cortex/arena reference the new skill rather than inlining copies.

## Impact
<!-- ⚠️ REQUIRED: Positive / negative / follow-up. Empty = shell, blocked by probe. -->
- Positive: reusable verification primitive for the ecosystem; single SSOT for the method; strengthens the "skills as governable artifacts" thesis with a flagship export.
- Negative: extraction churn in cortex/arena skill docs; new package checklist applies (publish.sh, Trusted Publisher).
- Follow-up (on accept): task for the extraction — define method/gate boundary, create package, rewire cortex + arena references, ZK-review the new skill's SKILL.md itself (the pattern validating its own packaging).

## Related
- Related ADR: ADR-20260508230803515-style boundary discipline; thin-skill-pattern reference
- Related Epic:

Files in this skill

  • ADR-20260423101938000-thin-skill-pattern.md2.5 KB
  • ADR-20260423101950000-esm-import-fix.md2.2 KB
  • ADR-20260423124812645-should-dist-be-committed-to-git-or-ignored.md7.5 KB
  • ADR-20260423130348396-port-skill-manager-into-lythoskill-ecosystem-as-deck-governance.md6 KB
  • ADR-20260423182606313-skill-md-template-variable-substitution-and-cli-help-delegation.md4.5 KB
  • ADR-20260423191001406-deck-npm-package-naming-lythos-deck-vs-skill-specific-naming.md4.3 KB
  • ADR-20260424000744041-curator-output-is-personal-environment-scan-not-project-artifact.md10.3 KB
  • ADR-20260424013849984-lythoskill-as-anti-corruption-layer-and-meta-governance-boundary.md7.6 KB
  • ADR-20260424113352614-project-scribe-remains-independent-with-optional-skill-cooperation.md3.8 KB
  • ADR-20260424113917838-red-green-release-heredoc-migration-patch-design.md4.9 KB
  • ADR-20260424115621494-virtual-evaluator-swarm-adaptive-concurrency-skill-design.md5.7 KB
  • ADR-20260424120936541-player-deck-separation-and-deck-boundary-rationale.md4.4 KB
  • ADR-20260424125637347-handoff-format-migration-from-fixed-file-to-daily-first.md4.6 KB
  • ADR-20260430174746744-deck-add-command-convenience-download-without-locking-users-into-a-single-package-manager.md665 B
  • ADR-20260501090811296-ci-consistency-check-abandoned-in-favor-of-pre-commit-hook-for-skill-build.md3.6 KB
  • ADR-20260501092809000-skills-branch-preserves-directory-prefix-to-avoid-dual-locator-standards.md4.7 KB
  • ADR-202605011600-desc-preference-learning-arena.md6.9 KB
  • ADR-20260501170000000-description-preference-learning-via-arena-pilot-results.md5.9 KB
  • ADR-20260502012643244-fq-only-locator-no-bare-name-resolution.md5.1 KB
  • ADR-20260502012643344-self-bootstrap-via-localhost-symlink-no-special-case.md5.6 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.