v4.6.1 — Deployment Tracking, Trust Checks, and Expanded Evals

Overview

4.6.1 is the next published release after 4.5.0, so this release includes all changes since 4.5.0:

• stronger discovery-oriented SKILL.md wording
• Perplexity Computer testing and .zip upload guidance
• optional deployment metadata for cross-surface tracking
• trust and audit guidance for downloaded or reused bundles
• expanded eval coverage for deployment drift, trust checks, and package integrity

Highlights

Better discovery and portability

• Updated SKILL.md description to be more trigger-oriented for skill loaders
• Kept SKILL.md under the 500-line guidance
• Added .zip upload guidance for platforms that do not accept .skill
• Documented Perplexity Computer as a tested partial-compatibility surface

Cross-surface deployment tracking

• Added optional deployments guidance to the manifest model
• Clarified how to track local bundles, uploaded bundles, and API-deployed copies without replacing platform-native version systems
• Added guidance for .agents/skills/ as a neutral cross-client install path

Trust and audit improvements

• Added trust/audit framing to help verify bundles before reinstalling or reusing them
• Strengthened guidance around hash verification, changelog review, and stale deployed copies

Expanded eval suite

The eval suite now covers 22 scenarios total, including new coverage for:

• deployment drift after local changes
• multi-surface install targets
• trust checks for untrusted bundles
• redeploy events
• deployment metadata conflicts
• hash mismatches
• packaged subset vs canonical bundle handling

Files updated

• skill-provenance/SKILL.md
• skill-provenance/README.md
• skill-provenance/evals.json
• skill-provenance/MANIFEST.yaml
• skill-provenance/CHANGELOG.md
• README.md
• skill-provenance.skill

Validation

• Bundle version: 4.6.1
• Evals: 22 total
• Hashes refreshed and verified successfully with validate.sh