Stunspot · Stunspot · Jul 20, 2026 · Jul 20, 2026 · Jul 20, 2026 · Jul 20, 2026
diff --git a/ARCHIVE-CUSTODY.md b/ARCHIVE-CUSTODY.md
@@ -6,11 +6,11 @@ CanopyOps keeps one canonical source tree and several independently useful relea
 |---|---|---|
 | Complete Augment | `release-assets/v0.1.5/CanopyOps-v0.1.5.zip` | Portable full CanopyOps capability tree |
 | Codex plugin | `release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5.zip` | Branded Codex plugin, manifest, assets, and bundled skill |
+| OpenAI skills-only submission | `release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5-OpenAI-Submission.zip` | Deterministic portal upload with the portal-accepted minimal interface |
 | Standalone skill | `release-assets/v0.1.5/Skill-canopyops--CanopyOps-v0.1.5.zip` | Direct skill installation and subskill custody |
 | Claude.ai upload | `claude-ai/canopyops-v0.1.5.zip` | One-top-level-folder Claude.ai upload package |
 | Source repository | Git tag `v0.1.5` and its GitHub source archives | Versioned source, documentation, tests, and provenance |
 
-`release-assets/v0.1.5/archive-custody.json` records exact hashes, sizes, member counts, source-tree digests, and extraction-parity results for the governed archives. GitHub release assets and the latest-only convenience backup shelf must match those hashes. Canonical release assets are copied, never moved, to the backup shelf. Older same-family convenience copies may be removed only after the new copies match; unrelated products are untouched.
+`release-assets/v0.1.5/archive-custody.json` records exact hashes, sizes, member counts, source-tree digests, and extraction-parity results for the installable governed archives. `release-assets/v0.1.5/openai-submission-custody.json` separately records the portal derivative's archive hash, source and transformed manifest hashes, member count, and POSIX path requirement. The portal ZIP is not a replacement for the installable plugin. GitHub release assets and the latest-only convenience backup shelf must match the applicable custody records. Canonical release assets are copied, never moved, to the backup shelf. Older same-family convenience copies may be removed only after the new copies match; unrelated products are untouched.
 
 The standalone skill and Claude.ai upload intentionally carry the same skill content under host-appropriate names. Archive equality does not establish live-host activation.
-
diff --git a/BUILD-WEEK.md b/BUILD-WEEK.md
@@ -81,7 +81,7 @@ Codex did not independently authorize publication, legal posture, operational ac
 
 The public repository provides three levels of evidence:
 
-1. **Deterministic:** run **python -m unittest discover -s tests -v**. The 17 tests cover calculations, invalid inputs, unit and timestamp normalization, schema validation, template linting, source freshness, required package surfaces, schema parsing, version custody, distribution parity, customer-document reachability, archive topology, and release-manifest integrity.
+1. **Deterministic:** run **python -m unittest discover -s tests -v**. The 18 tests cover calculations, invalid inputs, unit and timestamp normalization, schema validation, template linting, source freshness, required package surfaces, schema parsing, version custody, distribution parity, customer-document reachability, archive topology, release-manifest integrity, and deterministic OpenAI submission custody.
 2. **Installable:** install the branded plugin directly from this repository using the two commands in [INSTALL.md](INSTALL.md).
 3. **Behavioral:** run the fictional late-flower incident in [JUDGE-QUICKSTART.md](JUDGE-QUICKSTART.md) and inspect whether CanopyOps preserves alternatives, authority, reversible containment, and an auditable record.
 

diff --git a/PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md b/PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md
@@ -1,27 +1,41 @@
 # CanopyOps Plugins Directory submission packet
 
-This packet maps the released CanopyOps plugin to the current OpenAI Plugins Directory form. It prepares a **Skills only** submission; it does not assert that a publisher identity is verified, that policy attestations have been made, or that OpenAI has reviewed or published the plugin.
+This packet maps the released CanopyOps plugin to the current OpenAI Plugins Directory form and records the created **Skills only** draft. Draft creation and publisher-identity selection are observed; owner policy attestations, submission for review, approval, publication, and discoverability remain separate states.
 
 ## Released object
 
 - Plugin and Augment version: `0.1.5`
-- Upload: `release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5.zip`
-- SHA-256: `6caf7ecf8f7016a9c5efd07a2844cb5d2e783f147b59badcbff6695019fa7778`
+- Installable plugin: `release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5.zip`
+- Installable plugin SHA-256: `6caf7ecf8f7016a9c5efd07a2844cb5d2e783f147b59badcbff6695019fa7778`
+- OpenAI submission upload: `release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5-OpenAI-Submission.zip`
+- Submission upload SHA-256: `0c6297a89b3b8081fdc23b00c1474f8f35cbdd658e5334a088cab11e1cf8c179`
+- Submission custody: `release-assets/v0.1.5/openai-submission-custody.json`
+- Draft-upload comparison: `release-assets/v0.1.5/portal-draft-upload-evidence.json`
 - Public release: <https://github.com/Stunspot/CanopyOps/releases/tag/v0.1.5>
 - Submission type: **Skills only**
 
+The installable plugin keeps its full local and marketplace `interface`. The governed portal upload is a deterministic channel derivative of the same 76-file plugin tree; only the archived manifest is transformed to retain `composerIcon` and `logo`. Every ZIP member path uses `/`; UTF-8 text is canonicalized to LF without a BOM; and members use stored ZIP entries so the archive is byte-identical across supported Python runtimes. The draft was created from a preflight ZIP with the same member names; 75 members are byte-identical and the Ella Greenfield persona is identical after CRLF/LF normalization. Its ZIP container metadata was not deterministic. The live portal accepted this shape.
+
+## Created draft
+
+- Plugin ID: `plugins_6a5e101a0c0481918dd2604b5c25d969`
+- Submission ID: `appsub_6a5e101a2b3c81919fc93b7fc00e8a77`
+- Draft URL: <https://platform.openai.com/plugins/plugins_6a5e101a0c0481918dd2604b5c25d969/submissions/appsub_6a5e101a2b3c81919fc93b7fc00e8a77>
+- Observed draft state on 2026-07-20: listing, three prompts, one skill, and capability tags saved; the skill passed automated scanning; policy attestations unchecked; review submission not executed.
+
 ## Info
 
 - Plugin name: **CanopyOps**
-- Short description: **Cannabis crop plans, diagnostics, and operating records.**
+- Portal subtitle: **Cannabis crop operations** (24 characters; the live form caps this field at 30)
 - Long description: **Turn facility data, crop observations, logs, and constraints into evidence-bounded plans, incident workups, calculations, harvest reviews, and auditable records for legal cannabis cultivation.**
-- Developer identity: select the verified **Collaborative Dynamics** identity in the portal; the accountable owner must confirm the identity and organization match before submission.
+- Developer identity: **Business — Collaborative Dynamics Inc** selected in the portal; the listing developer name is **Collaborative Dynamics Inc**.
 - Category: **Productivity**
 - Logo: `plugins/canopyops/assets/canopyops-icon-v0.1.5.png`
 - Website: <https://github.com/Stunspot/CanopyOps>
 - Support: <https://github.com/Stunspot/CanopyOps/issues>
 - Privacy: <https://github.com/Stunspot/CanopyOps/blob/main/DATA-AND-PRIVACY.md>
 - Terms: <https://github.com/Stunspot/CanopyOps/blob/main/TERMS-OF-USE.md>
+- Capabilities: separate **Interactive**, **Read**, and **Write** tags.
 
 ## Starter prompts
 
@@ -97,3 +111,5 @@ Initial public submission of the free CanopyOps skills-only plugin. CanopyOps pr
 ## Accountable-owner gate
 
 Before selecting **Submit for Review**, the publisher must personally confirm the verified developer or business identity, organization and Apps Management authority, country availability, public URLs, and every policy attestation. Submission begins OpenAI review; approval, publisher release, and public discoverability are later observable states.
+
+The live 2026-07-20 skills-only form did not expose the documentation page's separate Testing, Global, or release-notes panels. The exact five positive cases, three negative cases, availability decision, and release notes remain preserved above for reviewer follow-up or a later portal revision; their repository presence does not mean they were transmitted in the current draft.
diff --git a/README.md b/README.md
@@ -16,7 +16,7 @@ It is the reasoning-and-record layer between “something looks wrong” and an
 
 CanopyOps was conceived and built on July 17, 2026, during the OpenAI Build Week submission period. Stun supplied compact product intent, source material, the Ella Greenfield persona, domain and authority boundaries, and release judgment. Codex with GPT-5.6 turned that direction into the routed SKILL, deterministic utilities, schemas, templates, evaluations, host adapters, documentation, licensing surfaces, plugin packaging, verification, and public release.
 
-The working Augment emerged in roughly an hour; public packaging, branding, licensing, hardening, and publication continued afterward. This repository now includes a 17-test deterministic suite and automatic verification so judges and users can inspect the machinery rather than taking the claim on faith.
+The working Augment emerged in roughly an hour; public packaging, branding, licensing, hardening, and publication continued afterward. This repository now includes an 18-test deterministic suite and automatic verification so judges and users can inspect the machinery rather than taking the claim on faith.
 
 Read [BUILD-WEEK.md](BUILD-WEEK.md) for the architecture, provenance, human/AI responsibility split, and evidence. Judges can use [JUDGE-QUICKSTART.md](JUDGE-QUICKSTART.md) to install and test CanopyOps with fictional data in about five minutes.
 
@@ -83,7 +83,7 @@ Read [SAFETY-AND-SCOPE.md](SAFETY-AND-SCOPE.md) before operational use. In parti
 
 The v0.1.5 package passes the current Augment Builder Codex and Claude profiles plus the repository's deterministic release tests. The standalone, plugin, and Claude archive skill trees are byte-identical. A reviewed, context-only three-case safety/scope smoke completed 3/3 selected episodes in v0.1.2; that result remains inherited behavioral evidence because v0.1.5 changes documentation, release custody, listing identity, and regression checks rather than the operating kernel. It is evidence under those exact recorded conditions, not field validation or a reliability guarantee.
 
-Field use, broader behavioral consistency, current jurisdiction coverage, live Claude.ai or Claude Code execution, equipment integration, and official OpenAI Plugins Directory appearance remain unverified or outside v0.1.5. See [RELEASE-NOTES-v0.1.5.md](RELEASE-NOTES-v0.1.5.md).
+Field use, broader behavioral consistency, current jurisdiction coverage, live Claude.ai or Claude Code execution, equipment integration, and official OpenAI Plugins Directory appearance remain unverified or outside v0.1.5. An OpenAI skills-only draft has been created and populated, and its skill passed automated scanning; accountable-owner attestations, review submission, approval, and publication remain separate states. See [PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md](PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md) and [RELEASE-NOTES-v0.1.5.md](RELEASE-NOTES-v0.1.5.md).
 
 The exact v0.1.5 checks and their evidence boundaries are recorded in [VERIFICATION-v0.1.5.md](VERIFICATION-v0.1.5.md).
 
@@ -111,4 +111,5 @@ CanopyOps is a Collaborative Dynamics Augment created by Sam Walker (stunspot),
 - [Terms of use](TERMS-OF-USE.md)
 - [Current release notes](RELEASE-NOTES-v0.1.5.md)
 - [Archive custody](ARCHIVE-CUSTODY.md)
+- [OpenAI draft and submission custody](PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md)
 - [Previous release notes](RELEASE-NOTES-v0.1.3.md)
diff --git a/RELEASE-NOTES-v0.1.5.md b/RELEASE-NOTES-v0.1.5.md
@@ -11,8 +11,9 @@ CanopyOps v0.1.5 is the plugin-identity and archive-custody release. It preserve
 - Added canonical archives for the complete Augment, Codex plugin, and standalone CanopyOps skill.
 - Added a custody ledger with source-tree and archive SHA-256 values, sizes, member counts, and extraction-parity evidence.
 - Documented the distinction among canonical release assets, GitHub release assets, Claude.ai upload package, and latest-only convenience backups.
+- Added a deterministic OpenAI skills-only submission ZIP and its separate custody record without weakening the full installable plugin manifest.
+- Created and populated the OpenAI plugin draft; the skill passed automated scanning, while owner policy attestations and review submission remain pending.
 
 ## Boundary
 
-The operating skill is unchanged, so prior reviewed behavioral evidence is inherited rather than rerun. Package validation, archive parity, listing-asset inspection, and documentation review do not establish cultivation-field fitness, jurisdictional currency, live Claude behavior, official OpenAI Plugins Directory approval, accessibility conformance, or customer outcomes.
-
+The operating skill is unchanged, so prior reviewed behavioral evidence is inherited rather than rerun. Package validation, archive parity, listing-asset inspection, portal draft creation, and documentation review do not establish cultivation-field fitness, jurisdictional currency, live Claude behavior, OpenAI review approval or publication, accessibility conformance, or customer outcomes.
diff --git a/VERIFICATION-v0.1.5.md b/VERIFICATION-v0.1.5.md
@@ -8,19 +8,21 @@ This record distinguishes checks that were actually run from behavior that remai
 
 | Check | Result | What it establishes |
 |---|---|---|
-| Repository deterministic suite | 17 of 17 tests passed on the frozen release candidate | Calculations, record validation, version custody, canonical/plugin/Claude parity, customer-document reachability, and release-manifest hashes behaved as asserted. |
+| Repository deterministic suite | 18 of 18 tests passed on the frozen release candidate | Calculations, record validation, version custody, canonical/plugin/Claude parity, customer-document reachability, release-manifest hashes, and OpenAI submission reproducibility behaved as asserted. |
 | Augment Builder profiles | Bundle, canonical Codex, plugin-bundled Codex, and Claude profiles passed | Required structure, metadata, contained resources, JSON, and private-path rules passed the current static profiles. |
 | Plugin-readiness audit | 1 skill; 0 errors; 0 warnings | The v0.1.5 manifest, HTTPS customer links, listing metadata, skill entry point, and version-bound PNG assets satisfy the deterministic publication preflight. |
 | Distribution parity | Canonical, plugin-bundled, and Claude.ai skill trees matched | Every supported distribution carries the same CanopyOps operating skill. This does not prove host activation. |
 | Governed release archives | Complete Augment, Codex plugin, and standalone skill archives built and extracted byte-for-byte | `release-assets/v0.1.5/archive-custody.json` records source-tree and archive hashes, byte sizes, member counts, and extraction parity. |
+| OpenAI submission archive | Deterministic 76-member skills-only ZIP reproduced byte-for-byte | `release-assets/v0.1.5/openai-submission-custody.json` records the accepted channel transform, archive hash, manifest hashes, and POSIX member paths. |
+| OpenAI draft creation | Listing, three prompts, one skill, and three capability tags saved under the verified Collaborative Dynamics Inc business identity; the skill passed automated scanning | Draft creation and scan success are observed. Owner attestations, review submission, approval, publication, and discoverability are not established. |
 | Listing-asset inspection | New canopy-grid icon inspected at 1024 and 32 pixels | The mark remains recognizable at listing size and uses shape and contrast, rather than color alone, to distinguish canopy nodes, grid, and decision point. This is visual inspection, not accessibility conformance testing. |
-| Customer-document checks | 20 declared customer documents and all tracked repository-local Markdown links passed deterministic validation | The release identity and local navigation are coherent. External destinations, representative users, and assistive technologies were not tested by this check. |
+| Customer-document checks | 21 declared customer documents and all tracked repository-local Markdown links passed deterministic validation | The release identity and local navigation are coherent. External destinations, representative users, and assistive technologies were not tested by this check. |
 
 ## Fresh documentation review custody
 
 This page records checks performed against other release artifacts; it is not the evidence source for its own statements. The repository test output, Builder profile results, plugin-readiness audit, release manifest, archive-custody ledger, and retained reviewer records provide the corresponding evidence outside this prose summary.
 
-Because this page is also part of the reviewed customer corpus, it does not predeclare or self-certify its documentation-review result. Immutable fresh-context responses, exact input custody, runtime metadata, and validation records are retained under `verification/evidence/`. The machine-readable release summary names the authoritative run and records its resulting disposition after that evidence exists.
+Because this page is also part of the reviewed customer corpus, it does not predeclare or self-certify its documentation-review result. Immutable fresh-context responses, exact input custody, runtime metadata, and validation records are retained under `verification/evidence/`. That independent review covered the 20-document pre-draft corpus. The subsequently added Plugins Directory packet is included in the current 21-document deterministic inventory but has not received a new independent accessibility review.
 
 ## Inherited behavioral evidence
 
@@ -36,4 +38,4 @@ This release does not establish:
 - current jurisdiction coverage, legal advice, regulatory approval, or compliance certification;
 - equipment integration, direct control, batch-release authority, or customer outcomes;
 - browser, keyboard, screen-reader, localization, representative-user, or formal accessibility-conformance testing;
-- official OpenAI Plugins Directory appearance or accountable publication approval.
+- owner policy attestations, submission for review, approval, public Directory appearance, or discoverability.
diff --git a/documentation-manifest.json b/documentation-manifest.json
@@ -21,7 +21,8 @@
     "BUILD-WEEK.md",
     "RELEASE-NOTES-v0.1.5.md",
     "VERIFICATION-v0.1.5.md",
-    "ARCHIVE-CUSTODY.md"
+    "ARCHIVE-CUSTODY.md",
+    "PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md"
   ],
   "moments": {
     "orientation": ["README.md", "START-HERE.md"],
@@ -30,7 +31,7 @@
     "normal_use": ["FAQ.md", "SAFETY-AND-SCOPE.md"],
     "recovery": ["INSTALL.md", "SUPPORT.md"],
     "privacy_security": ["DATA-AND-PRIVACY.md", "TERMS-OF-USE.md", "SECURITY.md"],
-    "support_maintenance": ["SUPPORT.md", "RELEASE-NOTES-v0.1.5.md", "ARCHIVE-CUSTODY.md"],
+    "support_maintenance": ["SUPPORT.md", "RELEASE-NOTES-v0.1.5.md", "ARCHIVE-CUSTODY.md", "PLUGIN-DIRECTORY-SUBMISSION-v0.1.5.md"],
     "provenance": ["ATTRIBUTION.md", "LICENSE.md", "TRADEMARKS.md", "NOTICE.md", "CONTRIBUTING.md", "BUILD-WEEK.md"],
     "evidence_limits": ["VERIFICATION-v0.1.5.md"]
   }

diff --git a/release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5-OpenAI-Submission.zip b/release-assets/v0.1.5/Plugin-CanopyOps-v0.1.5-OpenAI-Submission.zip