flow skill v0.28.0 — Attested Execution / Trust Control Plane
Highlights
- Card risk (
risk / risk-reason / risk-ack) with fail-closed auto preflight
- Fingerprint-bound receipts:
semantic_gate + live_verify under .flow/attestations/
flow attest mint/status/recover + flow auto / flow auto stop policy latch
- While auto is active:
check / card done / ready deps / merged worktree remove require current receipts
- Manual/teach/work remain usable with warnings when auto is inactive
- Bash + Git floor; receipts detect staleness, not actor identity
Versions
| Axis |
Version |
| Skill product |
0.28.0 |
| npm installer |
0.5.0 (ships this skill) |
Docs
skills/flow/references/attestations.md (canonical contract)
docs/migration-v028-attestations.md
Install
npx --yes @manhquy/flow-skill@latest