From 60ab3c666e85c47ddf78ea626c282c87d385ecc6 Mon Sep 17 00:00:00 2001 From: Vincent Koc Date: Thu, 20 Aug 2026 21:53:36 -0700 Subject: [PATCH] docs(testing): define plugin scanner trust boundary --- .agents/skills/openclaw-testing/SKILL.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.agents/skills/openclaw-testing/SKILL.md b/.agents/skills/openclaw-testing/SKILL.md index ac32b9168266..87f6e967217d 100644 --- a/.agents/skills/openclaw-testing/SKILL.md +++ b/.agents/skills/openclaw-testing/SKILL.md @@ -340,6 +340,12 @@ lanes are intentionally reserved for the separate `Plugin Prerelease` child so PRs, main pushes, and ad hoc broad CI checks do not spend Docker/package time or all-plugin runtime time on release-only product coverage. +`Plugin Prerelease` may execute candidate code only in secretless packaging +jobs. The trusted scanner treats uploaded immutable tarballs as inert data and +scans the exact post-build bytes; publication must consume those verified bytes +or require an identical digest. Artifact ingestion stays fail-slow so one +malformed package records its own error without hiding other package reports. + Use one operator, one transition-only watcher, and at most one investigator for the current failed surface. Parent timeout or cancellation leaves adopted exact children running; cancel an exact child only by explicit operator action or the