Broaden global skill consistency audits

README.md

@@ -58,16 +58,17 @@ repo-code, PR readiness, artifact, release, and code-comment contracts plus the
 `contracts-review` action. `skills/ceratops-skill-lifecycle/references/` owns
 skill-design contracts and skill source-doc tracking. The
 `skills-contract-review` action refreshes those contracts against registered
-best-practice evidence; it does not audit skills or run the repository
-validator. The `skills-consistency-review` action audits one skills repository
-against the contracts and checks its coupled metadata, action references,
-automation consumers, helpers, installer, generated runtime, installed managed
-skills, and docs. Each runtime manifest records schema, skill, source identity,
-source path, local source-repository root, validation profile, and installer
-version. Repository consistency review compares only parsed
-`INSTALLER_VERSION` values before installed-skill checks.
-The `global-skills-consistency-review` automation discovers required source
-repositories and invokes the repo-scoped action once for each repository.
+best-practice evidence; it does not audit skills or run the source validator.
+The `skills-consistency-review` action audits one direct manifest-backed
+installed skill, regardless of its name, against the contracts and checks its
+coupled metadata, action references, automation consumers, helpers, installer,
+generated runtime, source, and docs. Each runtime manifest records schema,
+skill, source identity, source path, local source-repository root, validation
+profile, and installer version. Skill consistency review compares only parsed
+`INSTALLER_VERSION` values before the selected installed-skill check.
+The `global-skills-consistency-review` automation enumerates every direct
+manifest-backed skill under `$CODEX_HOME/skills` and invokes the single-skill
+action once per skill without repository deduplication.
 
 ## Scripts
 

skills/ceratops-skill-lifecycle/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ceratops-skill-lifecycle
-description: Route Ceratops or compatible skill lifecycle work to action references for create, make-repo-compatible, update, skills-contract-review, skills-consistency-review, fast-change, change-promotion, and ship-to-remote work. Use when Codex should create a skill, make a skills repository Ceratops-compatible, update skill source or shared governance surfaces, refresh Ceratops skill-design contracts, audit one skills repository and its coupled runtime consumers, apply an explicit fast release-branch change, promote committed skill changes into a local release/runtime preview, or ship a staged skills batch through GitHub.
+description: Route Ceratops or compatible skill lifecycle work to action references for create, make-repo-compatible, update, skills-contract-review, skills-consistency-review, fast-change, change-promotion, and ship-to-remote work. Use when Codex should create a skill, make a skills repository Ceratops-compatible, update skill source or shared governance surfaces, refresh Ceratops skill-design contracts, audit one manifest-backed installed skill and its coupled source, apply an explicit fast release-branch change, promote committed skill changes into a local release/runtime preview, or ship a staged skills batch through GitHub.
 ---
 
 # Ceratops Skill Lifecycle
@@ -22,7 +22,7 @@ local promotion, and remote shipping.
 - Update an existing skill or shared maintenance surface: `references/update.md`
 - Refresh Ceratops skill-design contracts from current standards evidence:
   `references/skills-contract-review.md`
-- Audit one skills repository and its coupled runtime consumers:
+- Audit one manifest-backed installed skill and its coupled source:
   `references/skills-consistency-review.md`
 - Apply an explicit fast release-branch change: `references/fast-change.md`
 - Promote committed skill changes into a local release branch and runtime
@@ -32,7 +32,7 @@ local promotion, and remote shipping.
 
 ### Inputs To Capture
 
-- Target skill, repo, branch, release branch, installed runtime expectation,
+- Target skill, installed runtime manifest, repo, branch, release branch,
   action intent, and any explicitly requested staging or shipping step.
 - Which repo-owned surfaces are in scope: source skill folders,
   `agents/openai.yaml`, `templates/`, runtime payload declarations, validators,
@@ -82,7 +82,8 @@ Infer missing inputs from the current repo state before asking.
   `$ceratops-governance-lifecycle` action `optimize-skill`.
 - If the task is Ceratops skill-contract standards upkeep, use
   `references/skills-contract-review.md`.
-- If the task is repository skill consistency and contract compliance, use
+- If the task is manifest-backed installed-skill consistency and contract
+  compliance, use
   `references/skills-consistency-review.md`.
 - If the task is a general GitHub repo lifecycle operation, use
   `$ceratops-gh-repo-lifecycle`.
@@ -100,8 +101,9 @@ Infer missing inputs from the current repo state before asking.
   generation, validator, contract, helper, or doc surface must change.
 - Use `skills-contract-review` only to refresh the skill-design contracts
   against current registered best-practice evidence.
-- Use `skills-consistency-review` to audit one skills repository against those
-  contracts and its coupled source, automation, installer, and runtime surfaces.
+- Use `skills-consistency-review` to audit one manifest-backed installed skill
+  against those contracts and its coupled source, automation, installer, and
+  runtime surfaces.
 - Use `fast-change` only when the user explicitly asks for a known-safe direct
   release-branch edit and targeted runtime update.
 - Use `change-promotion` when committed task-worktree branches are ready to

skills/ceratops-skill-lifecycle/references/contracts/skill-deterministic-contract.json

@@ -88,7 +88,7 @@
     "skill_validation_command": "python skills/ceratops-skill-lifecycle/scripts/skills-consistency-source-validator.py --mode skill --skill <skill-name>",
     "full_validation_command": "python skills/ceratops-skill-lifecycle/scripts/skills-consistency-source-validator.py --mode full",
     "section_validation_command": "python skills/ceratops-skill-lifecycle/scripts/skills-consistency-source-validator.py --mode sections",
-    "runtime_validation_command": "python skills/ceratops-skill-lifecycle/scripts/runtime/skills-consistency-runtime-validator.py --repo-root <repo-root>",
+    "runtime_validation_command": "python skills/ceratops-skill-lifecycle/scripts/runtime/skills-consistency-runtime-validator.py --repo-root <repo-root> --skill <skill-name>",
     "result_contract": "Exit 0 with an ok line when selected deterministic checks pass; nonzero with line-specific errors when they fail."
   },
   "checks": [
@@ -113,7 +113,7 @@
         "authoritative installer template INSTALLER_VERSION",
         "installed runtime manifest installer_version"
       ],
-      "pass_condition": "Compatible repositories declare one positive integer INSTALLER_VERSION in scripts/install-skills.py; repository consistency compares only that value, updates missing or lower versions through task worktrees, retains same-version content differences, and runs full validation after synchronization.",
+      "pass_condition": "Compatible repositories declare one positive integer INSTALLER_VERSION in scripts/install-skills.py; selected-skill consistency compares only that value, updates missing or lower versions through task worktrees, retains same-version content differences, and runs full validation after synchronization.",
       "source_lines": [
         "skills/ceratops-skill-lifecycle/scripts/runtime/synchronize-installers.py:installer_version",
         "skills/ceratops-skill-lifecycle/scripts/runtime/skills-consistency-runtime-validator.py:discover_runtime",
@@ -211,7 +211,7 @@
         "installed source_repository_root and installer_version",
         "selected install scope"
       ],
-      "pass_condition": "Full installation runs full source-repository validation before building; explicit skill installation validates only selected skills. Runtime manifests record schema, skill, runtime_source_id, source_path, source_repository_root, validation_profile, and installer_version. The builder preflights all selected targets, refuses unmanaged folders, links, invalid ownership, and same-name folders owned by another source; a full install removes only stale folders with the same runtime_source_id, while an explicit targeted install removes none. Runtime validation discovers attributable manifests once and compares complete managed file trees with canonical builder output.",
+      "pass_condition": "Full installation runs full source-repository validation before building; explicit skill installation validates only selected skills. Runtime manifests record schema, skill, runtime_source_id, source_path, source_repository_root, validation_profile, and installer_version. The builder preflights all selected targets, refuses unmanaged folders, links, invalid ownership, and same-name folders owned by another source; a full install removes only stale folders with the same runtime_source_id, while an explicit targeted install removes none. Runtime validation can select one direct manifest-backed skill and compare only its complete managed file tree with canonical builder output.",
       "source_lines": [
         "skills/ceratops-skill-lifecycle/scripts/runtime/resolve-lifecycle-bundle.py:resolve_bundle",
         "skills/ceratops-skill-lifecycle/scripts/runtime/install-managed-skills.py:main",
@@ -278,7 +278,7 @@
         "skill deterministic and nondeterministic contract mappings",
         "multi-action lifecycle action references and command snippets"
       ],
-      "pass_condition": "Full source validation checks rename completeness, current-source skill references, README alignment, and profile-aware source governance; repository runtime checks validate attributable installed ownership and skill identity without one-time stale-term detectors.",
+      "pass_condition": "Full source validation checks rename completeness, current-source skill references, README alignment, and profile-aware source governance; selected runtime checks validate one direct manifest-backed skill's installed ownership and identity without one-time stale-term detectors.",
       "source_lines": [
         "skills/ceratops-skill-lifecycle/scripts/skills-consistency-source-validator.py:check_source_governance_consistency",
         "skills/ceratops-skill-lifecycle/scripts/skills-consistency-source-validator.py:check_skill_contract_remediation_policy",