Land Akii hardening on main (PR #2 had merged into adoption-layer by mistake) - #3
Merged
Conversation
…, provenance, governance Studied a mature same-category plugin (Akii's SEO/AEO/GEO optimizer) and adopted the on-brand parts while deliberately skipping its telemetry + paid-CTA growth machinery. - CI validator: scripts/validate.sh + .github/workflows/validate.yml — manifest schemas + version lockstep, skill frontmatter, resolving local links, the no-login/no-telemetry posture, a client-name/secret leak-check, and a skill trigger-phrase-overlap warning. Second CI job typechecks audit-report-kit. - docs/SOURCES.md: grounds the method in primary sources (Google AI Optimization Guide, KDD 2024 GEO paper, Schema.org, llms.txt proposal, crawler docs, Cloudflare) with an explicit "what we don't claim". - Provenance tags ([scan]/[partial-scan]/[heuristic]/[unmeasured], "emit — not a number when unmeasured") added to the GEO Method, the geo-audit output template, the worked example, and authoring-standard P7. audit-report-kit gains an optional provenance field + null-score rendering; the committed sample sets none, so the sample PDF + JSON-LD are byte-identical. - Governance: SECURITY.md (private disclosure + no-telemetry stance), issue templates, and a hardened README plugin-install path (full https URL + two-commands caveat). validate.sh passes (9/9); audit-report-kit typechecks; JSON-LD unchanged. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Hardening from competitor teardown: validator, sources, provenance, governance
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PR #2's base-retarget to main was rejected by a missing gh scope, so it merged into adoption-layer instead of main and its content never reached main. adoption-layer now holds the reviewed PR #2 commit (9bd0810) on top of the PR #1 base. This PR lands that delta on main: CI validator, SOURCES.md, provenance tags + null-score rendering, SECURITY.md, issue templates, install-UX fixes.