oh-agent/skill-add 0.1.0 —— 信任证据

attested —— Depot 背书

权威 —— Depot 跑出来并签过，可离线复核（字段与复核动作见下）

publication（Depot 副署）

{
  "byte_plane_key": "attestations/sha256/9d/9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d/depot-publication.v1.dsse",
  "predicate": {
    "artifact": {
      "id": "oh-agent/skill-add",
      "kind": "skill",
      "version": "0.1.0"
    },
    "byte_plane": {
      "artifact_object": "objects/sha256/9d/9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d",
      "record_object": "objects/sha256/94/94b53b4e1c02bcee4d97a97ecf1c37292d3667cb4e1c12eb84e6d5367260ef6d",
      "trust_anchors": "trust-root/sha256/7b/7b9223430a0b48f7d8a9423561611b24676770fbd356f460fb54e60a1b0d015c.json"
    },
    "components": [],
    "digest": {
      "sha256": "9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d"
    },
    "publisher": {
      "declared": "oh-agent",
      "identity_verified": false,
      "oidc_issuer": null,
      "signer_identity": null,
      "signer_policy_version": null,
      "transparency_log": null
    },
    "received_at": "2026-08-13T03:09:26Z",
    "signature_state": "unsigned",
    "snapshot_version": 4
  },
  "predicate_type": "https://atd.run/attestation/depot-publication/v1",
  "signed_by": {
    "key_id": "103846a1976f0a64e714c0c0ab4d08fe",
    "key_provenance": "operator-supplied",
    "role": "countersign"
  },
  "subject": {
    "digest": {
      "sha256": "9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d"
    },
    "name": "oh-agent/skill-add@0.1.0"
  }
}

certification（认证档流水线）

{
  "byte_plane_key": "attestations/sha256/9d/9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d/depot-certification.v1.dsse",
  "predicate": {
    "aggregate_component_evidence_tier": null,
    "artifact": {
      "byte_plane_object": "objects/sha256/9d/9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d",
      "digest": {
        "sha256": "9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d"
      },
      "id": "oh-agent/skill-add",
      "kind": "skill",
      "version": "0.1.0"
    },
    "cert_tier": "Profile-Authored",
    "cert_tier_evidence_grade": "attested",
    "components": [],
    "consequence_gap": {
      "by_kind": {
        "skill": {
          "consequence_absent": 1,
          "consequence_declared": 0,
          "units": 1
        }
      }
    },
    "criteria": [
      {
        "id": "core/wire-conformance",
        "method": "atd-conformance --category discovery + --category effect",
        "state": "not_applicable",
        "tier": "Profile-Core",
        "why": "no unit of this artifact exposes an ATD wire of its own (the criterion measures a server); the artifact is consumed through the adopter's runtime"
      },
      {
        "id": "authored/authoring-lint",
        "method": "depot ingest lint: profile 8.6 SK3/SK4 + the F6 criteria applied to the declared consequence group + the static scan word list",
        "state": "pass",
        "tier": "Profile-Authored"
      },
      {
        "id": "authored/device-conformance",
        "method": "atd-conformance --category device",
        "state": "not_applicable",
        "tier": "Profile-Authored",
        "why": "no unit of this artifact exposes an ATD wire of its own (the criterion measures a server); the artifact is consumed through the adopter's runtime"
      },
      {
        "id": "certified/adopter-ci-discovery-conformance",
        "method": "discovery conformance running in the adopter's own CI",
        "state": "not_evaluated",
        "tier": "Profile-Certified",
        "why": "by definition this runs in the adopter's CI, outside the depot; the depot MUST NOT attest it (ADR-0003 D4.2)"
      },
      {
        "id": "certified/adopter-validation-issue",
        "method": "adopter-validation issue closed-verified",
        "state": "not_evaluated",
        "tier": "Profile-Certified",
        "why": "a human governance act in the adopter's tracker; outside the depot and never attestable by it (ADR-0003 D4.2; AN-7 names the human step)"
      }
    ],
    "findings": [],
    "policy": {
      "profile_version": "atd-discovery-profile as pinned by this build's upstream rev (see Cargo.lock)",
      "ruleset": {
        "rules": [
          {
            "id": "SK3",
            "source": "atd-discovery-profile §8.6 (description present, <= ~1024 chars)"
          },
          {
            "id": "SK4",
            "source": "atd-discovery-profile §8.6 (name unique within one source)"
          },
          {
            "id": "skill-frontmatter",
            "source": "oh-cli scan_skill_md (ADR-0004 D2.1 production leg)"
          },
          {
            "id": "F6-reversibility",
            "source": "atd doctor --authoring F6, applied to the declared consequence group"
          },
          {
            "id": "F6-side-effect-scope",
            "source": "atd doctor --authoring F6"
          },
          {
            "id": "F6-verifiability-class",
            "source": "atd doctor --authoring F6"
          },
          {
            "id": "verify-answered",
            "source": "ADR-0030 (open_loop is an answer, not an absence)"
          },
          {
            "id": "static-scan",
            "source": "oh-agent#127 skill-import-check word list (ADR-0004 D2.1)"
          },
          {
            "id": "consequence-gap",
            "source": "atd-discovery-profile W10 + PRD M5 (per-kind gap quantification)"
          }
        ]
      },
      "ruleset_digest": "62d680c0599dba4526cd6dbf1491d28e5d5d90f1b94ec530c558e452695f8e68"
    },
    "time_verified": "2026-08-13T03:09:26Z",
    "verifier": {
      "id": "atd-depot",
      "version": {
        "atd_conformance": null,
        "atd_doctor": null,
        "depot": "0.0.0"
      },
      "version_absent_why": {
        "atd_conformance": "requires a live server; ADR-0002 D2.5 excludes sandboxing and dynamic behaviour analysis, so the depot MUST NOT attest it (ADR-0003 D4.2) — a publisher-run report of this check is `declared`, never `attested`",
        "atd_doctor": "the depot does not invoke `atd doctor` on an artifact: that lint eats a ToolDefinition, which an artifact does not have. The depot applies the same F6 criteria to the declared consequence group instead, and records those rules in policy.ruleset (see depot-server publish::lint)"
      }
    }
  },
  "predicate_type": "https://atd.run/attestation/depot-certification/v1",
  "signed_by": {
    "key_id": "5af107687c5e2ba81bd7baf5de02089f",
    "key_provenance": "operator-supplied",
    "role": "certification"
  },
  "subject": {
    "digest": {
      "sha256": "9deb4641aaf7f497cd4c849383d5982130ffc09e09661492ede23a5d123d7f2d"
    },
    "name": "oh-agent/skill-add@0.1.0"
  }
}