Implement install stages S3–S5: package, policy, and skills sync.

Attach/onboard sandbox from agents/hermes, additive OpenShell policy overlays, and nemohermes skill install for scaffold skills. No doctor/connect and no push.
2026-07-27 12:13:25 -07:00
parent e5e179e541
commit 0198ab6881
38 changed files with 1422 additions and 51 deletions
@@ -0,0 +1,18 @@
+---
+name: publish-boundary-test
+description: "Boundary test: verify publish/send denials"
+domain: system
+---
+
+# publish-boundary-test
+
+Boundary test: verify publish/send denials.
+
+## Description
+
+Test skill that verifies the sandbox correctly denies publish, send, and payment operations. Used for validation during install and upgrade.
+
+## Constraints
+
+- This skill should fail when attempting publish/send/pay.
+- If it succeeds, the policy is misconfigured.