Publish the native skill lifecycle to CLI main

[rudijetson]

Objective

Publish the already accepted native-skill lifecycle implementation to the CLI default branch through a reviewable issue branch and green pull request.

Acceptance

• one ownership-aware, digest-bound, transactional lifecycle is used by install, update, explicit sync, check, host status, and remove
• Codex, Claude, Gemini, and Antigravity projections follow the same ownership and safety contract
• unmanaged and drifted trees are preserved unless exact scoped force is authorized
• dry-run remains non-persisting, rollback is verified, and restart requirements are reported accurately
• focused tests, full suite, reproducible build, debt scan, package dry-run, isolated E2E, and independent review pass
• tracked dist/index.cjs is committed separately from source per repository policy
• PR CI passes before merge to main

Evidence ledger

docs/swe-compliance/2026-08-31-native-skill-lifecycle.md

Risk

High: this mutates persistent host-native skill directories and ownership receipts. Rollback is a revert of the merge plus restoration from the already recorded machine-local backups if an installed runtime rollback is required.

[rudijetson]

Implementation is published on chore/37-native-skill-lifecycle.

Final evidence checkpoint:

• focused lifecycle suites: 89/89
• full CLI suite: 774/774
• hostile review regressions: 6/6 unchanged red-to-green
• reproducible build: passed
• changed-file debt scan: 0 findings
• package dry run: 6 files
• independent review: Standards, Spec, Proof, Overall all pass
• dedicated generated bundle commits: cd390db and review refresh 4ecfbb1
• final tracked bundle SHA-256: 32733e510d83b50f707a13e0ecb4bbe3d8c3a320cb8ac8d04f453ed652eff02b

The branch is ready for PR CI.

[rudijetson]

Final publication evidence

• Merged PR feat(skills): add transactional native skill lifecycle #38 to main at f69e76c2fd9463143403f98e991723a9da610329.
• Post-merge Quality passed on the exact merge commit: https://github.com/learnrudi/cli/actions/runs/33463452588
• Final local gates passed: hostile regression 6/6, focused 89/89, full 774/774, reproducible build, zero debt findings, package dry-run, and independent Standards/Spec/Proof review.
• Both the RUDI Mac and admin Mac run @learnrudi/cli@1.10.25 from the exact merged package artifact; all three accepted dist hashes match.
• Installed artifact SHA-256: 5fa9160a8c7207fd3fadfee8dc31f4541593c7e96ca5c8aadfc62c0918fa114e.
• The exact 15-skill lifecycle suite is current for Codex and Claude on both Macs; cross-machine semantic receipt verification matched 30/30 rows.
• Repo Steward publication closeout receipt: native-skill-lifecycle-publication-20260901-closeout, state archive_eligible, version 3.
• No npm release or worktree cleanup was performed.