Skip to content

fix(skill-pin): bump to v6 for Inv #13 multi-step BTC flows (closes #463) - #465

Merged
szhygulin merged 1 commit into
mainfrom
fix/issue-463-skill-pin-bump
Apr 28, 2026
Merged

fix(skill-pin): bump to v6 for Inv #13 multi-step BTC flows (closes #463)#465
szhygulin merged 1 commit into
mainfrom
fix/issue-463-skill-pin-bump

Conversation

@szhygulin

Copy link
Copy Markdown
Collaborator

Summary

Coordinated MCP-side pin bump for vaultpilot-security-skill#17 which adds Invariant #13: Multi-step BTC flows.

Bumps three constants in src/diagnostics/skill-pin-drift.ts:

Constant Before After
EXPECTED_SKILL_SHA256 e48d5c0c…007a 83195093…72df
EXPECTED_SKILL_SENTINEL_B _v5_ _v6_
EXPECTED_SKILL_SENTINEL_C 9c4a2e7f3d816b50 8682084ac4984982

⚠️ Merge ordering

This PR is DRAFT until the skill PR merges, because:

  1. The runtime diagnostic in skill-pin-drift.ts fetches SKILL.md from the skill repo's master and compares the hash to EXPECTED_SKILL_SHA256.
  2. If this MCP PR lands FIRST, master is still v5 → expected is v6 → every signing flow halts with vaultpilot-preflight skill integrity check FAILED.
  3. Right order: merge skill#17 → mark this draft ready → merge.

Test plan

  • Full vitest suite green (2100/2100)
  • Typecheck clean (tsc --noEmit)
  • skill-pin-drift.test.ts 17/17 pass against new constants
  • After skill#17 merges: end-to-end signing flow passes Step 0 integrity check

🤖 Generated with Claude Code

Coordinated with vaultpilot-security-skill#17 which adds Invariant #13
covering multi-step BTC flows (combine_btc_psbts, prepare_btc_rbf_bump).
Bumps three constants in src/diagnostics/skill-pin-drift.ts:

- EXPECTED_SKILL_SHA256: e48d5c0c…007a → 83195093…72df
- EXPECTED_SKILL_SENTINEL_B: _v5_ → _v6_
- EXPECTED_SKILL_SENTINEL_C: 9c4a2e7f3d816b50 → 8682084ac4984982

MUST land AFTER the skill repo PR merges. If this PR lands first,
the runtime diagnostic in skill-pin-drift.ts fetches SKILL.md from
master and finds v5 instead of the now-expected v6, causing every
signing flow to halt with `vaultpilot-preflight skill integrity
check FAILED` until the skill repo merges.

Closes #463.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@szhygulin
szhygulin marked this pull request as ready for review April 28, 2026 04:10
@szhygulin
szhygulin merged commit 16d37b3 into main Apr 28, 2026
4 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 28, 2026
@szhygulin
szhygulin deleted the fix/issue-463-skill-pin-bump branch May 19, 2026 04:26
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant