# Eve skill reconciliation record — 2026-09-09

- Task: 7.6
- Canonical owner: `@oshun/skill-system`
- Record digest:
  `7a2c8a854aee0fccdc149733b40b36b910098ed2be3aa3818d2b3559e4189e0d`
- Product admission: **not-admitted**
- Phase/gaps: **open**

## Current topology

| Layer     | Role                                       | Production source files | Concrete checked-in skills |
| --------- | ------------------------------------------ | ----------------------: | -------------------------: |
| SMX       | measured-prompt-source-and-serving-adapter |                       9 |                          7 |
| Voyager   | recipe-capture-and-candidate-adapter       |                       9 |                          0 |
| Canonical | canonical-control-plane                    |                      25 |                          0 |

SMX ids: `skill.audit.v1`, `skill.docs.v1`, `skill.member-data.v1`,
`skill.navigate.v1`, `skill.tour.v1`, `skill.workbench-read.v2`,
`skill.workbench-write.v3`. Its current complete stable prompt hash is
`de8abdeff5603c5d0c65200e9c0b6b3c5445851c494e78ca9e12919750ab3b96`. Across 4999
tracked product production source files, canonical package importers are 1,
canonical reconciliation consumers are 0, and Voyager skill entrypoint consumers
are 0.

## Reconciliation decision

| Area        | Decision                                                                                                                                 |
| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| Ownership   | `@oshun/skill-system` owns identity, lifecycle, admission, quarantine, feedback, and rollback. SMX and Voyager are distinct projections. |
| Version/pin | `skill-id`, `semver`, `content-sha256`; mutable overwrite and latest-at-execution are forbidden.                                         |
| Retrieval   | SMX retains its measured router until Task 7.2; canonical discovery returns active scope-filtered metadata plus an exact pin.            |
| Privilege   | `declared-intersect-current-grant-intersect-channel-intersect-registered`; missing sets widen nothing.                                   |
| Provenance  | Candidate hashes bind source/revision/evidence; authenticated full-receipt keys are required.                                            |
| Poisoning   | Failed admission quarantines; a later finding withdraws the active pin; quarantine cannot self-clear.                                    |
| Feedback    | Exact pin/subject/execution/evidence only; no raw prompt and no automatic mutation.                                                      |
| Rollback    | Previously active retired exact pin, fresh security and rollback governance, current trust, restart revalidation.                        |
| User story  | One noun—**Skills**—with Built-in, Organization skill, My skill labels and visible exact version.                                        |

## Source evidence

| Path                                                      | Digest of        | SHA-256                                                            |  Bytes |
| --------------------------------------------------------- | ---------------- | ------------------------------------------------------------------ | -----: |
| `EVE_SOTA_GAP_CLOSURE_TODOS_2026-09-01.md`                | task-requirement | `f48fced93f3e6e550c4f7adcf2384ea3c60d9520aea59fc9be7b14366190fd0e` |    246 |
| `docs/adr/ADR-0082-eve-canonical-skill-reconciliation.md` | file-bytes       | `ba4fe47da586d3e37f6066a4b80410fdca4d5f98872301126237b5e80d03dadf` |  13232 |
| `libs/oshun/skill-system/src/eve-reconciliation.ts`       | file-bytes       | `cb15300a6ad74f543a158cf7b2f4c75291e2e8086a7e3e1c2ef6b525f9f0faa6` |  52577 |
| `libs/oshun/skill-system/src/eve-reconciliation.spec.ts`  | file-bytes       | `feae8b6298132b50098f51b69a8b156193565ffe678da836299d24d65d1161a5` |  29998 |
| `docs/audits/eve-smx-ratchet.json`                        | file-bytes       | `7f0dbc16eaa430167fa60044aa152f1817e268194fd973dcf8fcb4c8b402870f` |  17019 |
| `source-set:smx-eve-skills`                               | source-set       | `f1798413920fd64f5da5fe751e6d3e91d01b79cc881ff1f61111bb23caf42ae4` |  29518 |
| `source-set:voyager-assistant-skills`                     | source-set       | `68c1326c35bfb27a5b68d3225a0d765e5f12b5ef93ac35a81ab580a6ca91b930` |  56431 |
| `source-set:canonical-skill-system`                       | source-set       | `2b9484afabdc57420211a65237de8fff95aa1707e8976a50543402118f6b31eb` | 292875 |

## Honest limits

- No BFF, web, or mobile production source consumes the canonical reconciliation
  contract.
- No SMX model-facing prompt byte, task-family router, tool definition, ratchet,
  or evaluation floor changed.
- No Voyager import adapter, durable reconciliation overlay, live security
  scanner, or authenticated receipt verifier ran.
- The process-local registry is a reference contract; it does not prove a
  database restart or distributed activation race.
- The single Skills vocabulary is a product contract, not a shipped UI or
  admitted user capability.
- Task 7.6 closes only the reconciliation decision; Phase 7 and G3/G11-G18
  remain open.

Task 7.6 is closed by ADR-0082 and the reference contract. Phase 7 and
G3/G11/G12/G13/G14/G15/G16/G17/G18 remain open.
