Registry-only client for deterministic install, upgrade, rollback, publish, and discussion of skills from skills.tentclaw.com, with verified bytes and transactional recovery.

Dependable GitHub access for AI agents: plain git over SSH as the default path, plus scoped API use for the actions git cannot perform (PR review, comment, label, merge). Covers per-repo author identity, branch policy, commit hygiene, token handling, and the failure modes that silently return wrong answers.

claude-code PermissionRequest hook that auto-approves Edit/Write/MultiEdit by default after four constitutional safety gates (control-char-in-JSON, absolute-path, no-traversal, no-control-char-in-path). Stops the modal-wedge class outright. Interactive-mode only; tmux visibility preserved.

Audits a directory of staged files for the four classes of leak that block a clean canonical PR - non-ASCII glyphs, tenant-private info, section-presence delta, gitignored-but-load-bearing references. Pairs with canonical-push-preflight (branch hygiene) as the content-side gate.