public-safe-export

Files (1)

• SKILL.md

SKILL.md (first lines)

# Public-safe export

Publication is a new derivative projection, not deletion from a private clone.

1. Validate the private source.
2. Require an active publication policy and an explicitly permitted evaluation for the exact target.
3. Construct from a public allowlist: independently public actors, representations, claims, relations, policies, and contexts only.
4. Omit binary assets unless a separately approved sanitized derivative exists.
5. Remove private identifiers, local paths, credentials, precise protected locations, private digests, provider settings, and unapproved extension namespaces.
6. Record omission and redaction categories without retaining protected values.
7. Mint the declared public identity, then validate and audit the finished projection again.
8. Refuse when authority is unknown, expired, revoked, or under review.

A secret scan is only defense in depth. It cannot override consent, license, community authority, or policy.

From prismatic7/MASA, MIT.

More from prismatic7/MASA