fix(client): pin the skills root for the whole reconcile (SEC-8985 row 2) - #70

Merged

XieX merged 5 commits into

split/skills-referencesfrom

xie/skills-09-root-pin

Sep 15, 2026

Commits on Sep 4, 2026

test(client): Agent Skills — the root-swap races the descriptor walk does not close

authored and
XieX
committed
3bdbfab
test(client): let the root-swap races fail outright

authored and
XieX
committed
559c985
fix(client): pin the skills root for the whole reconcile

XieX
and
claude
committed
dd5db37
docs(client): deny the agent write access to the root's ancestors

XieX
and
claude
committed
5040942

Commits on Sep 15, 2026

fix(client): read the skills manifest through the pinned root descriptor

XieX
and
claude
committed
d3a8bc1