Every note that touches agent skills, newest first.
Third-party agent skills can combine runtime instructions with executable scripts. A bounded admission process can verify provenance, content, permissions, isolation, updates, and revocation before granting access.
