Publishing contract
Quality standard
Every published BAS skill is executable supply-chain input. Source, version, files, permissions, network access, evidence, and limits remain visible.
Open format
Each package contains portable SKILL.md instructions and validated metadata.
Human review
Triggers, permission boundaries, network access, and limitations receive an explicit review.
Versioning
Semantic versions identify releases; published archives are immutable by version.
Evidence
Completion and maturity claims map to fresh checks or a clearly stated verification boundary.
Security
External writes, secrets, data boundaries, dependency risk, and rollback remain explicit.
Accessibility
Keyboard use, contrast, responsive reflow, themes, and reduced motion are correctness checks.