v7.7 — Reference Hardening, CI Pipeline, and README Overhaul

🆕 What's New

🔬 Reference Hardening

• upstream-sources.md: Authority-graded source index (level 1-5) with safe translation rules for every upstream source
• skill-authoring.md: Packaging conventions and quality standards for the skill itself
• 84-upstream-reference-refresh-policy.md: Safe upstream reference refresh workflow

🏗️ CI Pipeline (.github/workflows/ci.yml)

• pyc regression check (guards against __pycache__/ contamination)
• SKILL.md frontmatter validation (YAML parse + required field check)
• Python compile check on all .py files
• YAML lint with yamllint
• ShellCheck (manual invocation)

📦 Build Quality

• .editorconfig, .prettierrc, .yamllint — consistent code formatting
• tools/check_skill_frontmatter.py — frontmatter validator
• SAFEOPS_MANIFEST.json — complete file inventory with metadata
• LICENSE — MIT

🧰 Scripts

• lib_safeops.sh: Shared POSIX sh function library — redaction, backup, validation, output helpers
• openclash_active_binding_audit.sh: Read-only subscription binding consistency audit

📖 New KB Documents

• 31-openwrt-operational-safety.md: OpenWrt-layer safety boundaries (never touch network/dhcp/firewall)
• 32-mihomo-schema-compatibility.md: Mihomo YAML field compatibility guide
• 84-upstream-reference-refresh-policy.md: Safe upstream reference refresh rules

🎨 README Overhaul

• Emoji icons on every section heading
• HTML <a id> anchors for click-to-jump (English/Chinese TOC finally works)

🐛 Fixes

• Fix SAFEOPS_MANIFEST.json version 7.7-full → 7.7
• Delete WORKBUDDY_REVIEW_NOTES.md from release package
• Add lib_safeops.sh function reference to scripts-reference.md
• Add upstream-sources, skill-authoring, 84-upstream-refresh to document-index
• Add docs/kb/31-openwrt-operational-safety.md to document-index

📊 Package Stats

• 108 files, 0 pyc, 0 __pycache__/
• SKILL.md: 12.8 KB
• 32 scripts, 32 knowledge base docs, 7 reference docs

---

Full Changelog: https://github.com/yjw8448/openclash-safeops-skill/blob/main/references/changelog.md