What's wrong with this entry?
When a session resumes and picks up a forked-skill agent, the resumption path now validates:
- The scoping record file (
.forked-skill.json) must be present and parseable - The record must name the same skill as the agent's task record
- For cold restarts, a provenance-marker witness (
.forked-skill.marker.json) must also be present and corroborate the fork identity
If any check fails, the agent refuses to resume and logs a clear error rather than running without its intended permission scoping. This prevents forked-skill agents from running with wrong or missing permission boundaries after a restart.
Resume validation guards (search for "refusing to resume it without the skill's permission scoping")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.