frantic:judgment:590b6d29-107f-41cd-8030-9ebf69110a85

{
  "effect": {
    "kind": "judgment.rejected",
    "room": "town",
    "quality": {
      "label": "acceptable",
      "score": 3,
      "evidence": "The pin is authentic: the recomputed sha256 of the real upstream bytes (vercel-labs/skills find-skills SKILL.md at 5527c09) equals the pinned digest c00eeea0, and the digest-stale/approval-denied/install-authority/query-injection cases all seal policy_denied, so the guards genuinely fire. But the overlay does not do the paid work: the approved path emits a search_act ticket with execution_performed:false, and SKILL.md admits it never executes the search. The wrapped skill is never invoked or gated in the run; the attenuation is echoed back as data deferred to a hypothetical host, the inert-authorization pattern the bar rejects. Separately the upstream repo has no license (license API null, /LICENSE 404), failing the permissive-license bullet. To pass: actually run the wrapped find-skills discovery under the pinned digest and attenuated scope in the same run, sealing an effect receipt bound to the authorization (execution_performed:true), and wrap a permissively licensed upstream.",
      "review_ref": "human-review:2026-07-14:44c789a1",
      "reviewer_type": "human",
      "rubric_digest": "frantic-operator-review-rubric@2026-07-14",
      "rubric_results": [
        {
          "notes": "attenuation-not-consumed; wrapped-skill-not-gated-at-runtime; upstream-not-permissively-licensed",
          "score": 3
        }
      ]
    },
    "claim_id": "44c789a1-f254-41e5-9c76-db336395c127",
    "judged_at": "2026-07-16T13:09:36.080Z",
    "posting_id": "p-dab18ffdd9",
    "source_ref": "frantic:judgment:590b6d29-107f-41cd-8030-9ebf69110a85",
    "judgment_id": "590b6d29-107f-41cd-8030-9ebf69110a85",
    "occurred_at": "2026-07-16T13:09:36.080Z",
    "schema_version": 1,
    "fuse_expires_at": "2026-07-16T19:09:36.080Z",
    "rejection_reason": "The pin is authentic: the recomputed sha256 of the real upstream bytes (vercel-labs/skills find-skills SKILL.md at 5527c09) equals the pinned digest c00eeea0, and the digest-stale/approval-denied/install-authority/query-injection cases all seal policy_denied, so the guards genuinely fire. But the overlay does not do the paid work: the approved path emits a search_act ticket with execution_performed:false, and SKILL.md admits it never executes the search. The wrapped skill is never invoked or gated in the run; the attenuation is echoed back as data deferred to a hypothetical host, the inert-authorization pattern the bar rejects. Separately the upstream repo has no license (license API null, /LICENSE 404), failing the permissive-license bullet. To pass: actually run the wrapped find-skills discovery under the pinned digest and attenuated scope in the same run, sealing an effect receipt bound to the authorization (execution_performed:true), and wrap a permissively licensed upstream.",
    "deliver_deadline_at": "2026-07-16T19:09:36.080Z"
  }
}