1.17.5 — validating brands and portable skill names

This release incorporates Cursor Pstack 0.15.25 through 1b80080.

TypeScript guidance now creates branded identifiers through validating type guards instead of casts. The existing static checks reject skill names that do not match lowercase, hyphenated folder names of at most 64 characters. Existing names already conform.

The generated Claude tree and its alternate model-storage/default rules remain excluded. This distribution preserves its shared Codex/Claude package, exact saved routes, efforts and recovery policy. README content is unchanged. See source adaptations.

Validation is recorded in PR #158. Both native hosts loaded the candidate guidance and produced cast-free parsers that passed strict compilation, raw/mixed identifier rejection and supplied runtime controls. The actual static checker passed valid metadata and rejected mismatched, uppercase and overlong names. Final-head Linux CI passed with normal budgets, alongside independent review.

Limits: these are explicitly loaded, deterministic fixtures, not automatic skill selection, causal improvement or universal parser correctness. Claude included extra prose outside the requested code block. Native cases ran before a NOTICE-only metadata update; 237 unchanged contracts retain exact-hash evidence, and disposable copies were updated in place and rehashed. The local Node 24 suite failed with 991 passes, seven failures and six additional errors in unchanged tests, tracked in #141. Copilot review was unavailable. The How worker reported out-of-scope scratch writes under the legacy prompt contract; no confinement claim is made.

Rollback checkpoint: v1.17.4.